Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ShinyHunters Claims FBI Breach via Unpatched Oracle PeopleSoft Flaw — Detection and Hardening Guide
Introduction The ShinyHunters extortion gang is claiming one of its most audacious targets yet: the Federal Bureau of Investigation. Accordi...
Malicious npm Package 'tw-pkgprobe-7731' Poses as Twilio Bug-Bounty Tool — Detection and Remediation Guide
Introduction On September 2026, cybersecurity researchers disclosed a malicious npm package named tw-pkgprobe-7731 that impersonates a secur...
CVE-2026-20350: Cisco ThousandEyes Virtual Appliance DHCP Command Injection — Detection and Remediation Guide
Introduction The Zero Day Initiative has published ZDI-26-719, disclosing CVE-2026-20350 — a command injection vulnerability in the DHCP cli...
CISA KEV Alert: Check Point, Arista VeloCloud, and F5 BIG-IP APM CVEs Under Active Exploitation — Detection and Remediation Guide
Introduction CISA has added four vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitati...
CVE-2026-18169: Critical IBM FTM for Red Hat OpenShift Flaws (CVSS 9.9) — Detection and Remediation Guide
Critical Vulnerabilities in IBM Financial Transaction Manager for OpenShift Demand Immediate Action The National Vulnerability Database has ...
CVE-2026-93616: Check Point Management Server Path Traversal Actively Exploited — Detection and Remediation Guide
CVE-2026-93616: Unauthenticated Path Traversal in Check Point Management Infrastructure — Under Active Exploitation On September 22, 2026, C...
Vidar Stealer VM-Based String Obfuscation & Custom ChaCha20-Style Ciphers: OTX Pulse Analysis — Enterprise Detection Pack
Vidar Stealer VM-Based String Obfuscation & Custom Stream Ciphers: Enterprise Detection Pack Threat Summary A new OTX pulse published by Ali...
QILIN Ransomware Gang: 14 New Leak-Site Listings — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-09-22 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
indexed-btree npm Malware Hid Loader in Runtime Code: Detection and Remediation Guide
Introduction Checkmarx reported that the npm package indexed-btree was malicious and impersonated the legitimate sorted-btree package, a rou...