Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ShinyHunters (UNC6240) Mass Exploitation of Oracle PeopleSoft CVE-2026-35273: SIDEEYE Backdoor, Neo-reGeorg Tunnels & MeshAgent — OTX Detection Pack
Threat Summary AlienVault OTX pulse data confirms that UNC6240, the intrusion set publicly tracked as ShinyHunters, has resumed a mass-explo...
Kothamine RAT, Python MaaS Stealer Factory & ShinyHunters/UNC6240 PeopleSoft Exploitation: OTX Pulse Analysis — Enterprise Detection Pack
Kothamine RAT, Python MaaS Stealer Factory & ShinyHunters/UNC6240 PeopleSoft Exploitation Three concurrent OTX pulses published on 2026-09-2...
SAFEPAY Ransomware: 9 New Leak-Site Listings in a Single Day — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-09-28 | Source: ransomware.live leak-site monitoring | Nature of data: Unverified threat-...
JadePuffer Agentic AI Attacks on Azure: Detection, Hunting, and Hardening Guide for Cloud Defenders
The Shift Nobody Wanted: Autonomous Agents as Intrusion Operators In 15 years of incident response, I've watched attackers industrialize eve...
Stolen AI Logins at 80,000+ Organizations: Detecting Infostealer Credential Theft, Shadow AI, and LLMjacking Before Attackers Monetize Your Accounts
Introduction A new analysis of infostealer malware logs has exposed something that should be on every CISO's radar in 2026: AI account crede...
NeedyMantis Malware Framework: Detection and Response Guide for Post-Compromise Intrusions
Introduction Microsoft Threat Intelligence has published an analysis of NeedyMantis, a modular post-compromise malicious software framework ...
Placeholder Domains Weaponized Across 1,700 Repos: Supply-Chain Defense, Service Account Hardening, and Citrix Patch Guidance
Introduction This week's threat landscape is a case study in forgotten assumptions becoming live attack surface. The standout story: a domai...
DC Medicaid Data Exposure: ~400,000 Beneficiaries' PII Published on a Public Website — Detection and Hardening Guide
Nearly 400,000 Beneficiaries Exposed — Without a Single Exploit The District of Columbia Department of Health Care Finance (DHCF) is notifyi...
CVE-2026-88771: CISA Warns of Global Exploitation of Critical Citrix NetScaler ADC and Gateway Flaws — Detection and Remediation Guide
CISA Confirms Active Exploitation of Two Critical NetScaler Flaws On Sunday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA...