Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
PIVOTPIPE .NET Beacon & Mythic C2 Infrastructure at Scale: OTX Pulse Analysis — Enterprise Detection Pack
PIVOTPIPE .NET Beacon & Mythic C2 Infrastructure at Scale: Enterprise Detection Pack Intelligence Category: Active Malware Campaigns & Crimi...
NightEagle APT (APT-Q-95) GhostContainer Exchange Backdoor + PeckBirdy Casino Infrastructure: OTX Pulse Analysis — Enterprise Detection Pack
NightEagle APT (APT-Q-95) GhostContainer Exchange Backdoor + PeckBirdy Casino Infrastructure: OTX Pulse Analysis — Enterprise Detection Pack...
NightEagle APT GhostContainer Exchange Backdoor + AMOS macOS Stealer ClickFix Campaign: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two pulses published to AlienVault OTX on 2026-09-16 paint a converging picture: credential theft is being industrialized at ...
DRAGONFORCE Ransomware: 2 New Victims Posted to Leak Site — Healthcare & SMB Targeting Analysis with Detection Engineering
DRAGONFORCE Ransomware: 2 New Victims Posted — Sector Targeting Analysis & Detection Rules Classification: TLP:CLEAR — Enterprise Defensive ...
WooCommerce Wholesale Lead Capture Exploited in the Wild: Detecting and Remediating Unauthenticated PHP Web Shell Uploads
Introduction Wordfence has confirmed that threat actors are actively exploiting a critical vulnerability in WooCommerce Wholesale Lead Captu...
xHealth (zHealth) EHR Data Breach Exposes 118,000 Patients — Detection, Response, and Third-Party Risk Hardening Guide
Introduction A data breach at xHealth (reported in early coverage as zHealth), a practice management and electronic health record (EHR) soft...
Fortinet Edge Exploitation Hits Thai Broadband Provider: FortiGate Compromise Detection and Hardening Guide
Introduction SecurityWeek reports that a Thai broadband provider was compromised through a vulnerability in its Fortinet infrastructure. The...
CrowdStrike, Palo Alto Networks and Sophos Join SE Labs PIVOT: What the Shift Away from MITRE Engenuity Evaluations Means for Defender Procurement
Introduction A significant realignment is underway in how endpoint and threat detection vendors prove their products actually work. A group ...
PhantomRaven: LLM-Generated npm Infostealer Masquerading as Bug Bounty Research — Detection and Response Guide
PhantomRaven: When the Supply-Chain Attack Writes Its Own Cover Story CrowdStrike's Counter Adversary Operations team recently published res...