Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Kimsuky XenoRAT, Longlegs Warlock Ransomware & Municipal Webshell Campaigns: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three concurrent threat streams dominate this OTX pull, and together they sketch a familiar but accelerating pattern: state-n...
RemusStealer EtherHiding C2, StreamRat Banking Trojan & PamStealer macOS Campaign: OTX Pulse Analysis — Infostealer Detection Pack
Threat Summary Five OTX pulses published this cycle collectively paint a picture of a maturing infostealer-as-a-service economy that has mov...
AKIRA Ransomware Gang: 3 New Leak-Site Listings Across Manufacturing & Professional Services — Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-02 | Source: ransomware.live leak-site monitoring | Nature of data: Unverified threat-...
Zer0day Stealer + ENIGMA Locker Build-Path Attribution: OTX Pulse Analysis — Rust Infostealer, HVNC, and Ransomware Detection Pack
Zer0day Stealer + ENIGMA Locker: One Build Path, Three Malware Families A newly published AlienVault OTX pulse (TLP:WHITE, modified 2026-10-...
THEGENTLEMEN Ransomware Gang: 24 New Leak-Site Claims — Sector Targeting Analysis & Detection Engineering
Classification: TLP:CLEAR | Publication Date: 2026-10-02 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
INCRANSOM Leak-Site Claims: 6 New Listings — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-01 | Source: ransomware.live leak-site monitoring (0 of 6 listings independently obser...
CVE-2026-88771 Citrix NetScaler Pre-Auth Command Injection: pitboss/NSPPE Web Shell and Credential-Theft Hunt Pack
Threat Summary Live OTX pulse data from AlienVault and LevelBlue THOR indicates active exploitation of CVE-2026-88771, a critical pre-authen...
STORM Ransomware Gang: 7 US Organizations Listed on Leak Site — Sector Targeting Analysis and Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-01 | Source: ransomware.live leak-site monitoring (6 listings multi-source; 1 single-s...
INTERLOCK Ransomware Gang: 2 New Leak-Site Claims — US Professional Services Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-01 | Source: ransomware.live leak-site monitoring | Nature of data: Unverified threat-...