Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Taming the Alert Firehose: How Agentic AI in NDR Restores SOC Efficiency
Introduction For years, Network Detection and Response (NDR) has been a double-edged sword for Security Operations Centers (SOCs). While ess...
FBI Alert: Kali365 Phishing-as-a-Service Hijacks M365 OAuth Tokens — Detection and Defense
The FBI has issued a warning regarding 'Kali365,' a sophisticated social engineering-as-a-service (SEaaS) platform specifically designed to ...
Zhost Infrastructure Seizure: Detection and Threat Hunting Guide for Disrupted C2
Zhost Infrastructure Seizure: Detection and Threat Hunting Guide for Disrupted C2 Introduction The Dutch Fiscal Information and Investigatio...
CVE-2026-9082: Drupal Core SQL Injection — CISA KEV Alert and Defensive Response
On May 22, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-9082, a critical SQL Injection vulnerability aff...
Packagist Supply Chain Attack: Detecting Malicious Linux Binaries via package.
Introduction Security researchers at Socket have uncovered a coordinated supply chain campaign targeting the Packagist repository, the prima...
CVE-2026-9082: Drupal Core SQL Injection — CISA KEV Alert, Detection & Hardening
CVE-2026-9082: Drupal Core SQL Injection — CISA KEV Alert, Detection & Hardening Introduction The U.S. Cybersecurity and Infrastructure Secu...
Ghostwriter UAC-0057 Campaign: Detecting Prometheus-Themed Phishing and Malware
Introduction The Belarus-aligned threat actor known as Ghostwriter (aka UAC-0057 and UNC1151) has resumed active operations against Ukrainia...
GitHub Actions Security: Hardening zizmor Against YAML Anchor and pull_request_target Abuse
Introduction In March 2026, the security community witnessed a severe supply-chain compromise when attackers exploited a pullrequesttarget m...
CVE-2024-24919 and CVE-2024-37079: CISA KEV Alert — Critical Detection and Remediation Guide
CVE-2024-24919 and CVE-2024-37079: CISA KEV Alert — Critical Detection and Remediation Guide Introduction The Cybersecurity and Infrastructu...