Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Xinbi Guarantee Takedown: $52.8M in Crypto Frozen — How to Detect Pig-Butchering Infrastructure Reaching Your Users
Introduction On Wednesday, the U.S. Department of Justice announced a coordinated, multi-pronged disruption of Xinbi Guarantee — an illicit ...
Infostealer Logs Expose Replayable AI Session Tokens: Detecting and Remediating Stolen Google, Anthropic, and LLM API Credentials
Introduction A growing volume of infostealer logs circulating on criminal marketplaces contains something defenders haven't traditionally pr...
cPanel EmailTrack Privilege Escalation: One Hosting Account to Root — Detection and Remediation Guide
What Happened On September 8, 2026, cPanel published a security advisory disclosing a critical privilege-escalation vulnerability affecting ...
Project Zero's Race Condition Testing Framework: How Defenders Can Reliably Reproduce and Regression-Test Concurrency Bugs
Introduction Race conditions are among the most dangerous and least testable classes of software vulnerabilities. Time-of-check-to-time-of-u...
Slim Spider Targets Brazilian Financial Institutions: Defending Crypto Custody Keys and Pix Payment Infrastructure
Introduction CrowdStrike has publicly attributed a series of intrusions against Brazilian financial institutions to a previously undocumente...
LOCKBIT5 Ransomware Gang: 4 New Victims Posted to Dark Web Leak Site — Sector Targeting Analysis & Detection Rules
LOCKBIT5 Ransomware Gang: 4 New Victims Posted to Dark Web Leak Site Classification: TLP:CLEAR | Published: 2026-09-08 | Source: ransomware....
220 Million Traveler Records Exposed via Default Credentials on Vietnam-Linked APIS Database — Detection and Hardening Guide
What Happened Researchers have disclosed that an Advance Passenger Information System (APIS) database — linked to Vietnam's aviation and bor...
PEEP Post-Compromise Toolkit: Detecting and Removing Malicious Chromium Extensions Injected via Forged Secure Preferences
Introduction Security researchers have disclosed PEEP, a post-compromise toolkit that converts Chrome and Microsoft Edge into covert command...
Help Desk Vishing + AitM Token Theft: Defending Microsoft 365 Against Executive-Targeted Data Theft and Extortion
The Threat: Voice-Based Social Engineering Meets Token Theft Threat hunters have disclosed a widespread data theft and extortion threat clus...