Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
INCRANSOM Ransomware Gang: 4 New Victims Posted — Hospitality, Education, Retail and Manufacturing Alert
INCRANSOM Ransomware Gang: 4 New Victims Posted — Hospitality, Education, Retail and Manufacturing Alert Bulletin type: Dark web leak-site m...
Head Mare APT Exploits TrueConf Video Conferencing Servers to Deliver PhantomCore Malware: OTX Pulse Analysis — Supply Chain Detection Pack
Threat Summary AlienVault OTX pulse data confirms an active supply chain campaign attributed to the Head Mare APT group targeting organizati...
N0N Ransomware Gang: 11 Victims Posted in 72 Hours — Multi-Sector Campaign Analysis, Detection Rules & IR Playbook
Executive Summary Between 2026-09-18 and 2026-09-20, the N0N ransomware operation published 11 victims to its dark web leak site — an unusua...
Microsoft Fixes False 'Defender Antivirus Is Turned Off' Alerts — How to Validate Real AV Tampering vs. Bug Noise
Introduction Microsoft has resolved a known issue that caused Windows to incorrectly warn users and administrators that Microsoft Defender A...
ShinyHunters Breaches Clop Ransomware Leak Site: Defensive Lessons for Extortion-Proofing Your Infrastructure
When one of the most prolific extortion crews on the internet gets breached by another extortion crew, defenders should pay close attention ...
BragJack Prompt Forcing: Defending AI Browser Agents Against Malicious Extension Hijacking
Introduction Security researcher Gal Weizman of Forever Security has disclosed BragJack, a proof-of-concept attack that demonstrates somethi...
Plugin4Shell Supply-Chain Flaw in Claude Code, Codex, and Copilot: Detection and Remediation Guide
Introduction Air Security disclosed a supply-chain vulnerability class this week that should be on every CISO's radar — especially organizat...
Rocky Linux 9 Tomcat Security Update RLSA-2026-68660: Patching and Exploitation Detection Guide
Rocky Linux 9 Tomcat Security Update RLSA-2026-68660: Patching and Exploitation Detection Guide Excerpt: Rocky Linux 9 has shipped a moderat...
Abandoned CDN Domain Re-Registered — Defending Against Dangling DNS and Supply-Chain Script Hijacking
An Abandoned CDN Domain Is Now Controlled by a Stranger — and Your Site May Still Be Calling It In July 2025, a domain that once belonged to...