Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-85706: GitLab Path Traversal Exploited in the Wild — Detection and Remediation Guide
CVE-2026-85706: GitLab Path Traversal Exploited in the Wild — Detection and Remediation Guide On September 10, 2026, GitLab shipped a critic...
CVE-2026-90937: Critical Froxlor Config Injection (CVSS 9.9) — Detection and Remediation Guide for Hosting Providers
CVE-2026-90937: Froxlor Configuration Injection — What Defenders Need to Know NVD has published CVE-2026-90937, a CVSS 9.9 (Critical) vulner...
JeetBot Malicious Browser Extension Campaign: Twitch OAuth Token Theft via Russian Proxy Infrastructure — OTX Detection Pack
Threat Summary A single high-fidelity OTX pulse published by AlienVault (TLP:WHITE, modified 2026-09-14) exposes a live credential-harvestin...
KATARU IoT Botnet + Mirai-Style DDoS: OTX Pulse Analysis — Telnet Brute-Force, Public Linux LPE Exploits, and Encrypted C2 Detection Pack
KATARU IoT Botnet + Mirai-Style DDoS: OTX Pulse Analysis — Telnet Brute-Force, Public Linux LPE Exploits, and Encrypted C2 Detection Pack Th...
SAFEPAY Ransomware Gang: 11 New Victims Posted — Cross-Sector Campaign Analysis & Detection Rules
SAFEPAY Ransomware Gang: 11 New Victims Posted — Cross-Sector Campaign Analysis & Detection Rules Classification: TLP:CLEAR | Publication Da...
JFrog Artifactory Authentication Bypass and Privilege Escalation Flaws Exploited for Backdoor Deployment — Detection and Remediation Guide
Organizations running self-managed JFrog Artifactory instances are facing active, in-the-wild exploitation of a chain of three vulnerabiliti...
CISA KEV Alert: Maximum-Severity GitLab Flaw Under Active Exploitation — Detection and Remediation Guide
CISA Confirms Active Exploitation of a Maximum-Severity GitLab Vulnerability CISA has issued a public warning that threat actors are activel...
openSUSE Chromedriver 153.0.8010.36 Update Patches 230 Chromium Vulnerabilities — Defensive Guide
Introduction openSUSE has issued security advisory 2026-11750-1, shipping chromedriver version 153.0.8010.36-1.1 — an update that resolves 2...
Telus Credential Stuffing Campaign: Detection and Hardening Guide for Stolen-Credential Account Takeovers
Introduction Telus, one of Canada's largest telecommunications providers, has warned customers that stolen credentials were used in a multi-...