Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Microsoft 365 Token-Replay Attacks: Defending Against AitM Session Hijacking and Credential Theft
Introduction In early October 2026, security researchers at Huntress disclosed a widespread campaign targeting Microsoft 365 environments. B...
Tailscale SSH Port Forwarding Abuse: One Compromised Node to Root — Detection and Hardening Guide
Introduction A security researcher published findings this week demonstrating that a single compromised device on a Tailscale network can be...
AI Coding Agents Hijacked via Malicious AGENTS.md File — Detection and Mitigation Guide
Introduction Security researchers recently discovered a novel attack technique targeting AI coding agents: a malicious AGENTS.md file placed...
Sandworm and UAC-0099 Wiper Campaign: Detecting MeshAgent-Based Unauthorized Access in the Ukraine Logistics Attack
Sandworm + UAC-0099: A Division-of-Labor Wiper Operation In October 2026, ESET disclosed that the Russian state-sponsored group Sandworm (al...
LiteLLM Supply Chain Compromise: Leaked Master Key Led to Malicious PyPI Package — Detection and Response Guide
Introduction LiteLLM disclosed on Friday that a threat actor pushed a malicious version of its widely deployed Python package after obtainin...
Google AI Search & Gemini Now Access Gmail and Photos: Privacy and Ad-Targeting Risk Analysis
Introduction Google has formally updated its privacy policy to disclose a significant expansion of data integration between its consumer ser...
BlackX UEFI Bootkit: Secure Boot Revocation Gaps on Windows — Detection and Hardening Guide
Executive urgency A new UEFI bootkit tracked as BlackX is reported against diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenis...
CVE-2026-110936: Siemens Software Center DLL Hijacking — Detection and Remediation Guide for ICS Environments
Siemens Software Center Uncontrolled Search Path Vulnerability (CVE-2026-110936) Siemens has published a security advisory — cataloged by CI...
CVE-2026-89196 Through CVE-2026-89206: Siemens RUGGEDCOM CROSSBOW SQL Injection and Privilege Escalation — Detection and Remediation Guide
Introduction Siemens has released security updates addressing 11 distinct vulnerabilities in RUGGEDCOM CROSSBOW, a network management system...