Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
HollowGraph Malware: Detecting Microsoft Graph API Abuse in M365 Calendars
Introduction The democratization of cloud services has fundamentally shifted the threat landscape. We no longer face just malware that exfil...
HollowGraph C2: Detecting Microsoft 365 Graph API Abuse via Future-Dated Calendar Events
Introduction Security operations teams must adapt to a sophisticated new evasion technique observed in the wild. Researchers at Group-IB hav...
CVE-2026-49452: openSUSE Python-Weasyprint CSS Injection — Detection and Patching Guide
CVE-2026-49452: openSUSE Python-Weasyprint CSS Injection — Patch and Hunt Guide A new security advisory for openSUSE (openSUSE-2026-0251) ad...
Round 106 Threats: AsyncAPI Supply Chain Compromise and CrashStealer Defense
Round 106 Threats: AsyncAPI Supply Chain Compromise and CrashStealer Defense The latest Security Affairs newsletter (Round 106) highlights a...
Analysis of Fairlife Production Outage: Detecting Encryption-Based Attacks in Manufacturing
Introduction The recent confirmation that Coca-Cola has suspended production at its US Fairlife facilities due to an "encryption-based cyber...
Daxin Rootkit & Stupig Backdoor: Active Detection and IR Playbook for 2026
Introduction The discovery of the Daxin rootkit and the associated Stupig unauthorized access mechanism on the network of a Taiwan-based sub...
Third-Party Support System Breach: Analyzing the EY Incident and Defensive Strategies
Introduction Ernst & Young (EY) recently disclosed a significant security incident stemming from the compromise of a third-party support tic...
Defending Against CrashStealer macOS Malware and Mobile Surveillance Operations
Introduction Recent intelligence reveals multiple concerning developments in the threat landscape that require immediate defensive attention...
TELEPUZ Malware: Detecting ClickFix Infection Chains and Modular C2 Activity
Introduction Since late April 2026, a new, modular threat known as TELEPUZ has been actively circulating in the wild, utilizing the highly e...