Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
NWHStealer, notnullOSX, and APT28 Roundcube: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary OTX pulses from 2026-04-17 reveal a coordinated surge in credential theft operations targeting both high-value individuals an...
NWHStealer, notnullOSX, & Chrome Extension Botnets: OTX Pulse Analysis — Credential Theft Campaign
NWHStealer, notnullOSX, & Chrome Extension Botnets: OTX Pulse Analysis — Credential Theft Campaign Threat Summary A coordinated wave of cred...
Intel: STX Rat Supply Chain Attack & Global Credential Harvesting Wave — April 2026
Telegram Intel: STX Rat Supply Chain Attack & Global Credential Harvesting Wave — April 2026 Excerpt Active STX Rat campaign via trojanized ...
CVE-2024-39338: Active Exploitation of Marimo Pre-Auth RCE — Defense & Remediation
Critical Marimo Vulnerability Under Active Exploitation Security teams utilizing Marimo, the open-source reactive notebook for Python, are f...
VoidLink Linux C2 Framework: Detecting Multi-Cloud Credential Theft and AI-Generated Malware
Introduction Security researchers have identified VoidLink, a sophisticated Linux-based Command and Control (C2) framework specifically desi...
The Developer Credential Economy: Detecting and Remediating Exposed Secrets in CI/CD Pipelines
The Developer Credential Economy: Detecting and Remediating Exposed Secrets in CI/CD Pipelines Introduction We are witnessing a paradigm shi...
PyPI Supply Chain Attack: Detecting TeamPCP Malicious Telnyx Packages
Introduction A new campaign by the threat actor known as TeamPCP has been identified targeting developers utilizing the Telnyx SDK on the Py...
DeepLoad Malware: Detecting ClickFix Attacks and WMI Persistence
DeepLoad Malware: Detecting ClickFix Attacks and WMI Persistence Date: March 2026 Author: Senior Security Consultant, Security Arsenal Intro...
How to Defend Against React2Shell (CVE-2025-55182) Attacks on Next.js
How to Defend Against React2Shell (CVE-2025-55182) Attacks on Next.js A recent wave of attacks has targeted the web development ecosystem, s...