Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Carbonato Botnet Hijacking Exposed Docker Daemons with AI Agents — Detection and Hardening Guide
Introduction A new botnet tracked as Carbonato is actively compromising Docker hosts whose daemons are exposed to the internet without authe...
llm-anthropic 0.29 Released: What Security Teams Must Do to Govern LLM CLI Tooling and Anthropic API Access
Introduction Simon Willison has released version 0.29 of llm-anthropic, the plugin that connects his widely used llm command-line tool to An...
LLM 0.36 CLI Release: Defending Against Shadow AI and Unsanctioned LLM Tooling in the Enterprise
Simon Willison has released version 0.36 of llm, his widely adopted open-source command-line tool for interacting with large language models...
CVE-2026-5430: WSO2 Path Traversal Under Active Exploitation — Detection and Remediation Guide
Introduction On September 24, 2026, CISA added CVE-2026-5430 to the Known Exploited Vulnerabilities (KEV) catalog, confirming what many of u...
DRAGONFORCE Ransomware Gang: 4 New Victims Listed — Cross-Regional Campaign Analysis & Detection Engineering
Classification: TLP:CLEAR | Publication Date: 2026-09-24 | Source: ransomware.live leak-site monitoring | Nature of data: Unverified threat-...
Ryuk Ransomware Operator Sentenced: Detection and Hardening Lessons for Defenders
Ryuk Affiliate Sentenced — Why This Still Matters to Your SOC A U.S. federal court has sentenced Karen Vardanyan, an Armenian national, to p...
SANS Report: Data Overload, Not Skills Gaps, Is Now the Top Threat Hunting Bottleneck — How SOC Leaders Should Respond
Data Has Replaced Skills as the Primary Defensive Monitoring Challenge For years, the security industry's default diagnosis for underperform...
CVS Health & Criteo $20.5M Website Tracking Settlement: What Healthcare Defenders Must Do About Pixel Privacy Risk
The Settlement That Should Be on Every Healthcare CISO's Radar CVS Health and ad-tech firm Criteo have agreed to pay a combined $20.5 millio...
CVE-2026-87902: WordPress get_page_template() Exploited Within Hours — Detection and Remediation Guide
Introduction Within hours of public disclosure, threat actors began actively exploiting CVE-2026-87902, a critical vulnerability in WordPres...