Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-95811: LemonLDAP::NG Access Rule Bypass — Detection and Remediation Guide for Debian LTS
A Normalization Gap in Your SSO Gatekeeper Debian has issued DLA-4797-1, a Long Term Support security update for lemonldap-ng, the widely de...
Microsoft KB5002907 Pulled After Deactivating Office 2016/2019 — Emergency Rollback and License Recovery Guide
Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after widespread reports that it deactivated — and in some cases comp...
SalesBleed: Zero-Click Prompt Injection in Salesforce Agentforce — Detection and Hardening Guide
SalesBleed: Zero-Click Prompt Injection in Salesforce Agentforce — Detection and Hardening Guide Security researchers have disclosed a set o...
Citrix NetScaler ADC & Gateway Zero-Days Under Active Exploitation — Detection, Isolation, and Hardening Guide
Introduction On September 26, 2026, security firm watchTowr disclosed that two new, unpatched vulnerabilities in Citrix NetScaler ADC and Ne...
Moobot/Mirai Botnet Resurgence: Open Directory Exposure of 'StresD Pro+' DDoS-as-a-Service Panel — OTX Pulse Analysis & Detection Pack
Moobot/Mirai Botnet Resurgence: Open Directory Exposure of 'StresD Pro+' DDoS-as-a-Service Panel Threat Summary A single but high-value OTX ...
DARKLANTERN, SPEAKINGSTONE & ENDLESSDOORS: ZBT Router Firmware Implants in the Global Supply Chain — OTX Pulse Analysis & Detection Pack
DARKLANTERN, SPEAKINGSTONE & ENDLESSDOORS: ZBT Router Firmware Implants in the Global Supply Chain Classification: TLP:WHITE | Severity: CRI...
BARRACUDA Ransomware Gang: 3 New Leak-Site Listings — Sector Targeting Analysis, Detection Rules & Response Playbook
Classification: TLP:CLEAR | Publication Date: 2026-09-27 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
Bitget $351.6M Hot Wallet Theft: Defending Crypto Exchange Infrastructure Against Suspected DPRK Backend Compromise
Executive Summary On September 24, 2026, at 18:31 UTC, cryptocurrency exchange Bitget detected unauthorized transfers from a subset of its h...
CVE-2026-35273: ShinyHunters WAF Bypass on Oracle PeopleSoft — Detection and Hardening Guide
Security teams running Oracle PeopleSoft behind a web application firewall need to hear this plainly: the mitigation you deployed may no lon...