Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-81578 & CVE-2026-82078: PaperCut Auth Bypass and RCE Chain Exploited Against Education — Detection and Remediation Guide
The Threat: A Chained Auth Bypass and RCE in PaperCut, Actively Exploited The Arctic Wolf Adversary Research Team has confirmed in-the-wild ...
Token Research Exposes 39 Passkey Attack Methods: A Defender's Guide to Hardening FIDO2 Deployments
Introduction Passkeys were supposed to end the phishing era. For credential replay and password theft, they largely have — FIDO2's origin-bo...
SmartLoader NodeJS Infostealer + SecFlow AI-Orchestrated Intrusions: OTX Pulse Analysis — Enterprise Detection Pack
SmartLoader NodeJS Infostealer + SecFlow AI-Orchestrated Intrusions: OTX Pulse Analysis Intelligence Category: Infostealer & Credential Thef...
Shai-Hulud Infostealer Now Scans 469 Credential Locations: Detection and Remediation Guide for Dev and CI/CD
Shai-Hulud Infostealer Now Scans 469 Credential Locations: Detection and Remediation Guide for Dev and CI/CD In early August, GitGuardian re...
Microsoft Teams Help-Desk Vishing + RMM Lateral Movement: OTX Pulse Detection Pack
Microsoft Teams Help-Desk Vishing + RMM Lateral Movement: OTX Pulse Detection Pack Threat Summary AlienVault OTX pulse activity modified 202...
Tampered Exodus Wallet Installer Drops Modular RAT: Dll4 Suite Credential Theft Campaign — OTX Detection Pack
Tampered Exodus Wallet Installer Drops Modular RAT: Dll4 Suite Credential Theft Campaign — OTX Detection Pack A single but high-density OTX ...
Knight Office M365 AiTM Kit + Tampered Exodus Modular RAT: OTX Pulse Analysis — Session Token Theft and Credential Access Detection Pack
Knight Office M365 AiTM Kit + Tampered Exodus Modular RAT: OTX Pulse Analysis — Session Token Theft and Credential Access Detection Pack Exc...
Sality Botnet Sinkhole & Tampered Exodus Wallet Modular RAT: OTX Pulse Analysis — Infostealer & Credential Theft Detection Pack
Threat Summary Two OTX pulses published 2026-09-02 paint a converging picture of the credential- and cryptocurrency-theft ecosystem: a legac...
CVE-2026-0768: Langflow Unauthenticated RCE Exploited for OpenAI and AWS Key Theft — Detection and Remediation Guide
What happened Threat actors are exploiting CVE-2026-0768, a critical unauthenticated remote code execution vulnerability in Langflow, an ope...