Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Year-End Credential Harvesting Campaign: SharePoint & DocuSign Impersonation Phishing Infrastructure — OTX Pulse Analysis
Year-End Credential Harvesting Campaign: SharePoint & DocuSign Impersonation Phishing Infrastructure Classification: TLP:WHITE | Pulse: "202...
CARBONATO Docker Botnet + Year-End Phishing Lures: OTX Pulse Analysis — AI-Agent Malware & Credential Harvesting Detection Pack
Threat Summary Two OTX pulses published in late October 2026 illuminate a converging threat landscape: opportunistic infrastructure exploita...
LiteLLM Supply-Chain Compromise: Malicious PyPI Package and Docker Images Steal Cloud Credentials — Detection and Response Guide
LiteLLM Release Pipeline Compromised: What Defenders Need to Do Right Now The LiteLLM project — one of the most widely deployed open-source ...
TRUST#GRAFT WordPress Admin PHP Backdoor + Year-End Phishing Credential Harvesting: OTX Pulse Analysis — Enterprise Detection Pack
TRUSTGRAFT WordPress Admin PHP Backdoor + Year-End Phishing Credential Harvesting: OTX Pulse Analysis — Enterprise Detection Pack Two live O...
FortiGate & GlobalProtect Perimeter Breach Campaign: 70,000 Credentials Exposed — Detection, Containment, and Remediation Guide
FortiGate & GlobalProtect Perimeter Breach Campaign: 70,000 Credentials Exposed — Detection, Containment, and Remediation Guide Introduction...
LiteLLM 1.107.0 Supply Chain Compromise: Detecting Python Startup Hook Credential Theft and Remediating Exposed AI Pipelines
Introduction Microsoft Threat Intelligence has published a detailed analysis of a supply chain compromise affecting LiteLLM 1.107.0, one of ...
ClickFix & Armorsteal Credential-Theft Wave: DarkGate, Amadey, and WordPress Backdoor Campaigns — OTX Pulse Analysis & Detection Pack
ClickFix & Armorsteal Credential-Theft Wave: Enterprise Threat Intelligence Briefing Threat Summary Four concurrent OTX pulses published on ...
SafePay Ransomware: 600+ Organizations Breached via Stolen VPN Credentials — Joint FBI/CISA Advisory Defense Guide
SafePay Ransomware Hits 600+ Organizations — What the Joint Advisory Means for Your SOC This week, CISA, the FBI, the U.S. Secret Service, G...
Red Heron 'Kapibala' WordPress Exploitation Wave + BUGSTER AI-Enabled Credential Theft: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two distinct but thematically linked threat operations surfaced in this reporting window, both centered on large-scale record...