Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
N0N Ransomware Gang: 13 New Leak-Site Listings in 6 Days — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-09-23 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
EvilTokens PhaaS Takedown: Defending Entra ID Against Device Code Phishing and Token Theft
What Happened Microsoft's Digital Crimes Unit (DCU), working with industry partners, has facilitated a disruption of infrastructure belongin...
Critical Next.js ImageResponse RCE via Crafted SVG — Detection, Hunting, and Remediation Guide
Introduction On September 22, 2026, Vercel disclosed and patched a critical vulnerability in Next.js that can lead to server-side code execu...
Rogue AI Incidents Are Forcing the Safety Debate Into the Boardroom — A Defender's Playbook for AI Governance and Containment
The AI Safety Debate Just Stopped Being Academic For years, "AI alignment" was a conversation happening in research labs and policy think ta...
ShinyHunters Claims FBI Breach: Defending Against SaaS Data Theft and Extortion Campaigns
Introduction On Tuesday, the cyber extortion group ShinyHunters publicly claimed it had compromised the U.S. Federal Bureau of Investigation...
Chinese-Speaking Threat Actor Exploits Zyxel GS1900 Switches and WordPress to Steal Government Data — Detection and Hardening Guide
A Persistent Actor Is Feeding on Your Edge — And Your CMS Security researchers have disclosed an active campaign attributed to a Chinese-spe...
CVE-2026-91018: lwIP Double Free Vulnerability in ICS/OT Devices — Detection and Remediation Guide
Introduction CISA has published ICS Advisory ICSA-26-265-02 covering CVE-2026-91018, a double free vulnerability in lwIP (Lightweight IP), t...
USN-8802-1: Linux Kernel (Oracle) Vulnerabilities — Patching, Detection, and Hardening Guide for Ubuntu Systems
Introduction Canonical has published USN-8802-1, a security notice addressing multiple vulnerabilities in the Linux kernel packages built fo...
CVE-2026-67367: Siemens SIMOVE Fleetmanager and SIPLANT Path Traversal — Detection and Remediation Guide
Overview CISA published ICS advisory ICSA-26-265-07 covering a path traversal vulnerability — CVE-2026-67367 — affecting Siemens SIMOVE Flee...