Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-18351: Unauthenticated Arbitrary File Upload in Elementor Forms File Upload Plugin — Detection and Remediation Guide
CVE-2026-18351: Unauthenticated Arbitrary File Upload in Elementor Forms File Upload Plugin — Detection and Remediation Guide A critical, un...
Redis Cryptomining Botnet (3,562 Compromised Servers) + Hagaseca Android RAT Loader: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two freshly published OTX pulses reveal a converging trend: threat actors continue to industrialize the compromise of exposed...
Aeternum Blockchain C2 Botnet + XWorm/ZingoStealer Loader Chain: OTX Pulse Analysis — Polygon Smart Contract Detection Pack
Aeternum Blockchain C2 Botnet: When the Command Server Can Never Be Taken Down Security teams spend years refining infrastructure takedown p...
Aeternum Blockchain C2 Botnet: XWorm, ZingoStealer and XMRig Loader Activity — OTX Detection Pack
Aeternum Blockchain C2 Botnet: XWorm, ZingoStealer and XMRig Loader Activity — OTX Detection Pack Threat Summary The pulse describes a shift...
QILIN Ransomware Gang: 4 New Victims Posted — US Manufacturing/Education, SK Financial Services, ES Intrusion Signal & Detection Rules
Executive Summary Live leak-site monitoring shows QILIN added four victims between 2026-09-07 and 2026-09-09: Jet Specialty in US manufactur...
Passkey-Themed Social Engineering: How Attackers Hijack Entra ID Identities and Pivot to Cloud Data — Detection and Hardening Guide
Introduction Microsoft's threat intelligence teams have published a critical warning this week: threat actors are running passkey-themed soc...
Trezor–ShipMonk Supply Chain Breach Exposes 81,000 Customers: Phishing Defense and Detection Guide
Trezor–ShipMonk Supply Chain Breach: What Defenders Need to Know Trezor, the hardware cryptocurrency wallet manufacturer, has disclosed that...
Xinbi Guarantee Takedown: $52.8M in Crypto Frozen — How to Detect Pig-Butchering Infrastructure Reaching Your Users
Introduction On Wednesday, the U.S. Department of Justice announced a coordinated, multi-pronged disruption of Xinbi Guarantee — an illicit ...
Wellstar & Cone Health Pixel Lawsuit Settlements: A Defender's Guide to Eliminating Tracker-Based PHI Leakage
Introduction Wellstar Health System and Moses H. Cone Memorial Hospital Operating Corporation (Cone Health) have agreed to settlements resol...