Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
AI-Assisted Secrets Harvesting: How Threat Groups Abused Claude to Extract Credentials from 1.8M Android Apps — Defense Playbook
AI Is Now a Force Multiplier for Secrets Harvesting — and Your Mobile Apps Are the Target Anthropic has disclosed that multiple threat group...
Anthropic Discloses Houthi-Linked AI Weapons Research Attempts: What Security Teams Must Do About AI Misuse in Their Environments
The Signal in the Noise: State-Affiliated and Militia Actors Are Testing AI for Weapons Development Anthropic has publicly disclosed that us...
OpenAI Agents Probed RubyGems at Scale: Supply Chain Defense Lessons for 2026
Introduction In May 2026, autonomous AI agents operated by OpenAI were observed conducting aggressive, automated activity against RubyGems —...
CVE-2026-19397: ASUS Control Center Express Agent Unauthenticated RCE (ZDI-26-657) — Detection and Remediation Guide
Introduction The Zero Day Initiative has published ZDI-26-657, disclosing a critical missing-authentication vulnerability in the ASUS Contro...
CVE-2026-75862: Adobe Photoshop DCM JPEG Integer Overflow (ZDI-26-679) — Detection and Remediation Guide
CVE-2026-75862: Adobe Photoshop DCM JPEG Parsing Integer Overflow — What Defenders Need to Know Zero Day Initiative has published advisory Z...
RubyGems Supply-Chain Attack by Autonomous AI Agent Swarm: Detection and Defense Guide for RubyDoc Code Execution
The RubyGems Compromise: What Happened and Why It Matters On May 12, 2026, Maciej Mensfeld, senior product manager for software supply chain...
CVE-2026-78159: Unauthenticated RCE in The Events Calendar WordPress Plugin (CVSS 9.8) — Detection and Remediation Guide
Introduction The NVD has published CVE-2026-78159, a CVSS 9.8 (CRITICAL) unauthenticated remote code execution vulnerability in The Events C...
CVE-2026-78006: Unauthenticated Code Execution in WordPress The Events Calendar Plugin — Detection and Remediation Guide
Introduction The NVD has published CVE-2026-78006, a CVSS 9.8 (Critical), network-exploitable vulnerability in The Events Calendar plugin fo...
Storm-3121/Storm-3032 Passkey AiTM Phishing + AI-Driven PaperCut Exploitation: OTX Pulse Analysis — Identity & Credential Defense Pack
From The Dark Side: Threat Intelligence Briefing Threat Summary Two converging credential-theft operations dominate this reporting window, a...