Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-48842: Roundcube SQL Injection Exploited in the Wild — Detection, Patching and IR Guide
CVE-2026-48842: Roundcube SQL Injection Exploited in the Wild Roundcube Webmail deployments that remain unpatched against CVE-2026-48842 are...
CVE-2026-101084: obot MCP Server Authorization Bypass (CVSS 9.6) — Detection and Remediation Guide
Introduction The National Vulnerability Database has published CVE-2026-101084, a critical (CVSS 9.6) broken access control vulnerability in...
NetSupport Manager RAT Hidden in Fake MP4 uuid Boxes: PowerShell Loader Campaign — OTX Detection Pack
NetSupport Manager RAT Hidden in Fake MP4 uuid Boxes: PowerShell Loader Campaign Threat Summary AlienVault OTX pulse "Fake MP4 File Carries ...
APT-C-36 GitHub Loader: AsyncRAT/DcRat/Remcos/XWorm Colombia Phishing — OTX Detection Pack
Threat Summary A live OTX pulse published by AlienVault/LevelBlue describes continued operator activity behind a GitHub-hosted loader ecosys...
APT-C-36 (Blind Eagle) GitHub Loader Campaign: AsyncRAT, DcRat, Remcos & XWorm Deployment Pipeline — OTX Detection Pack
Threat Summary Live OTX pulse data from AlienVault and LevelBlue SpiderLabs exposes the operational infrastructure of APT-C-36 (Blind Eagle)...
CVE-2026-86862: Fedora 43 Ships pgAdmin 9.18 Security Fix — Detection and Remediation Guide
Fedora 43 has released an update shipping pgAdmin 9.18 to address CVE-2026-86862. If your teams administer PostgreSQL databases from Fedora ...
Fedora 43 Goose 1.45.0 Arbitrary Command Execution Fix — Detection and Remediation Guide
Fedora 43 Ships Goose 1.45.0 to Close Arbitrary Command Execution Flaw Fedora has published an update advisory for Fedora 43 pushing the goo...
Debian DSA-6520-1: LemonLDAP::NG Security Update — Patch Your SSO Portal Before Attackers Do
When Debian ships a security update for LemonLDAP::NG, every defender running that stack should pay attention. DSA-6520-1 patches the open-s...
Debian DSA-6521-1: ruby-oj Security Update — Patching and Detection Guide for Ruby JSON Parsing Flaws
What Happened Debian's security team has released DSA-6521-1, a security update for ruby-oj — the widely deployed C-extension JSON parser/se...