Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Moobot/Mirai Botnet Resurgence: Open Directory Exposure of 'StresD Pro+' DDoS-as-a-Service Panel — OTX Pulse Analysis & Detection Pack
Moobot/Mirai Botnet Resurgence: Open Directory Exposure of 'StresD Pro+' DDoS-as-a-Service Panel Threat Summary A single but high-value OTX ...
DARKLANTERN, SPEAKINGSTONE & ENDLESSDOORS: ZBT Router Firmware Implants in the Global Supply Chain — OTX Pulse Analysis & Detection Pack
DARKLANTERN, SPEAKINGSTONE & ENDLESSDOORS: ZBT Router Firmware Implants in the Global Supply Chain Classification: TLP:WHITE | Severity: CRI...
BARRACUDA Ransomware Gang: 3 New Leak-Site Listings — Sector Targeting Analysis, Detection Rules & Response Playbook
Classification: TLP:CLEAR | Publication Date: 2026-09-27 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
Bitget $351.6M Hot Wallet Theft: Defending Crypto Exchange Infrastructure Against Suspected DPRK Backend Compromise
Executive Summary On September 24, 2026, at 18:31 UTC, cryptocurrency exchange Bitget detected unauthorized transfers from a subset of its h...
CVE-2026-35273: ShinyHunters WAF Bypass on Oracle PeopleSoft — Detection and Hardening Guide
Security teams running Oracle PeopleSoft behind a web application firewall need to hear this plainly: the mitigation you deployed may no lon...
CVE-2025-10263: Arm TLB Invalidation Flaw Patched in Ubuntu IBM Kernels (USN-8818-2) — Defender's Guide
Introduction Canonical has released USN-8818-2, a kernel security update targeting the IBM-optimized Linux kernel builds (linux-ibm) on Ubun...
Lunex Stealer Abuses AMD Driver for BYOVD EDR-Kill and Browser Credential Theft — Detection and Defense Guide
Executive Summary Ontinue researchers have detailed a four-stage attack chain delivering Psychedelic Stealer, an infostealer sold as part of...
openSUSE Leap 16.0 389 Directory Server Unauthenticated Code Execution — Patch Advisory 2026-21950-1 Now
An unauthenticated code execution flaw in the 389 Directory Server package on openSUSE Leap 16.0 is exactly the kind of finding that should ...
CARBONATO Docker Botnet: Detecting and Defending Against the AI-Powered Credential Theft Operation Targeting Exposed Docker Daemons
The CARBONATO Operation: Why Your Docker Hosts Are the Target Security researchers at ThreatDown recently uncovered an operation that should...