Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-85878: Critical Privilege Escalation in Azure Database for PostgreSQL — Detection and Remediation Guide
CVE-2026-85878: Critical Privilege Escalation in Azure Database for PostgreSQL — Detection and Remediation Guide NVD has published CVE-2026-...
CVE-2026-85885: Critical Command Injection in Microsoft 365 Copilot (CVSS 9.9) — Detection and Remediation Guide
Introduction NVD has published CVE-2026-85885, a CVSS 9.9 (Critical) vulnerability in Microsoft 365 Copilot — one of the most widely deploye...
CVE-2026-69865 & CVE-2026-69843: Microsoft Cloud Auth Bypasses (CVSS 10) — Detection and Remediation Guide
Three CVSS 9–10 Authentication Bypasses Land on Microsoft's Cloud Stack NVD published four CRITICAL, network-exploitable CVEs in the last 72...
ValleyRAT via Signed Overwolf Sideloading + SilkParasite SpiceRAT C2 Cluster: OTX Pulse Analysis — Enterprise Detection Pack
ValleyRAT via Signed Overwolf Sideloading + SilkParasite SpiceRAT C2 Cluster: OTX Pulse Analysis — Enterprise Detection Pack Two fresh OTX p...
Octagon Android MaaS + APT36 Operation RapidRust + Mirage2FA AiTM Kit: OTX Pulse Analysis — Mobile Banking Fraud, GitHub C2 Backdoors, and M365 Session Hijacking Detection Pack
Octagon Android MaaS + APT36 Operation RapidRust + Mirage2FA AiTM Kit: OTX Pulse Analysis — Enterprise Detection Pack Three concurrent OTX p...
Octagon Android Banking Bot + Mirage2FA Session Hijacking + APT36 Operation RapidRust: OTX Pulse Analysis — Enterprise Credential Theft Detection Pack
Octagon Android Banking Bot + Mirage2FA Session Hijacking + APT36 Operation RapidRust: OTX Pulse Analysis Threat Summary Three concurrent OT...
EMPERADOR Ransomware Gang: 3 New Victims Posted — Education & Manufacturing Targeting, KEV-Linked Access Paths
EMPERADOR Ransomware Gang: 3 New Victims Posted — Education & Manufacturing Targeting, KEV-Linked Access Paths Classification: Threat Intell...
BIND 9.20.29 / 9.21.26 Released: Unauthenticated DoH Crash Flaw — Detection, Patching and Hardening Guide
Introduction On 16 September, the Internet Systems Consortium (ISC) published fourteen security advisories for BIND 9 — the most widely depl...
FamousSparrow SparroWocky Backdoor: Detection and Hardening Guide for Latin America Operations
FamousSparrow SparroWocky Backdoor: Detection and Hardening Guide for Latin America Operations ESET researchers Alexandre Côté Cyr and Romai...