Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Suo5 HTTP/HTTPS Tunneling via Compromised IIS Web Servers: OTX Pulse Analysis — Pivot Detection & Hunting Pack
Suo5 HTTP/HTTPS Tunneling via Compromised IIS Web Servers: Enterprise Detection Pack Classification: TLP:WHITE | Intelligence Type: Active M...
YuanKong Android RAT + TraderTraitor (DPRK) FLATROOF/ROOFDECK Backdoors: OTX Pulse Analysis — Enterprise Detection Pack
YuanKong Android RAT + TraderTraitor (DPRK) FLATROOF/ROOFDECK Backdoors: OTX Pulse Analysis — Enterprise Detection Pack Two pulses published...
TraderTraitor FLATROOF/ROOFDECK, QuartzLine PDF Backdoor & SkyKick M365 Credential Abuse: OTX Pulse Detection Pack — 2026-10-19
Threat Summary Four concurrent OTX pulses paint a coherent picture of the current credential-theft and access-broker ecosystem: adversaries ...
N0N Ransomware Gang: 36 Leak-Site Listings in Latest Posting Wave — Sector Analysis & Detection Engineering
Classification: TLP:CLEAR | Publication Date: 2026-10-19 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
RUSTSEC-2026-0306: Fedora 43 rust-faster-hex Buffer Overflow — Patch, Rebuild, and Detection Guide
Introduction Fedora has issued an update advisory for Fedora 43 addressing a potential buffer overflow in the rust-faster-hex package, track...
USN-8916-2: Ubuntu 26.10 PyJWT Token Forging Fixes — Detection and Remediation Guide for Defenders
Introduction Canonical has released USN-8916-2, an Ubuntu security update addressing multiple token-forging vulnerabilities in PyJWT, the de...
DPRK Fake IT Worker Scheme: FBI Raids Texas Laptop Farms — Detection and Defense Guide for Hiring Orgs
The Breach Nobody Patched For: DPRK IT Workers Inside the Perimeter This week the Justice Department announced coordinated enforcement actio...
CikaBika Bot: Rust RAT Abusing Discord for C2 — Detection and Response Guide for Windows Defenders
Introduction Darktrace researchers have documented an active campaign distributing CikaBika Bot, a remote access trojan written in Rust that...
CVE-2026-106931: SiteGuard Server Edition WAF Command Injection Under Active Exploitation — Detection and Remediation Guide
A Critical Flaw in the Security Stack Itself EG Secure Solutions has published an urgent advisory for CVE-2026-106931, an OS command injecti...