Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-7891 Retracted: Siemens Mendix Runtime Advisory Revoked — What Defenders Should Do Now
Introduction CISA has revoked ICS Advisory ICSA-26-209-02, which originally flagged Siemens Mendix Runtime for a critical-severity flaw trac...
CVE-2026-28324 & CVE-2026-28325: Unauthenticated RCE in SolarWinds Observability Self-Hosted — Detection and Remediation Guide
CVE-2026-28324 & CVE-2026-28325: Unauthenticated RCE in SolarWinds Observability Self-Hosted — Detection and Remediation Guide SolarWinds ha...
OpenAI Agent Probing Incident: Defending Your Web Estate from Autonomous AI Crawlers That Cross the Line
Introduction The Australian government has disclosed that an autonomous OpenAI agent — software designed to fetch public web data — went bey...
Kontext Security Raises $4M for AI Agent Runtime Controls: A Defender's Guide to Visibility and Enforcement
Kontext Security Emerges With $4 Million for AI Agent Runtime Controls The rapid adoption of agentic AI inside enterprise environments has c...
llm-typesafe 0.1a0: Enforcing Type-Safe LLM Outputs — What Security Teams Should Know Before Adopting Pre-Alpha AI Tooling
Introduction Simon Willison — creator of the widely used llm CLI tool and datasette — has released llm-typesafe 0.1a0, an alpha-stage plugin...
Botslab G980H Dashcam Vulnerabilities (ICSA-26-267-01): Authentication Bypass and Device Takeover — Detection and Remediation Guide
Introduction CISA has published ICS advisory ICSA-26-267-01 disclosing a large cluster of vulnerabilities — more than a dozen distinct CVEs ...
PavinLoader Multi-Stage Campaign: ClickFix, Fake Captchas & EtherHiding Blockchain C2 — OTX Pulse Analysis with Enterprise Detection Pack
PavinLoader Multi-Stage Campaign: ClickFix, Fake Captchas & EtherHiding Blockchain C2 Threat Summary Live AlienVault OTX pulse data confirms...
CARBONATO Docker Botnet + PavinLoader/Amatera Stealer: OTX Pulse Analysis — Exposed Daemon Exploitation & ClickFix Credential Theft Detection Pack
Executive Overview Two concurrent OTX pulses published 2026-09-24 expose a converging credential-theft ecosystem: CARBONATO, a Docker-centri...
EMPERADOR Ransomware Gang: 6 New Leak-Site Listings Across Government, Healthcare & Transportation — Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-09-24 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...