Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
NSO Group Pegasus Zero-Click iMessage Exploit Hits Serbian Student Activist: iOS Spyware Detection and Defense Guide
Pegasus Zero-Click Spyware Infects Serbian Student Movement Member's iPhone Citizen Lab, working in collaboration with the SHARE Foundation,...
llm-gemini 0.34 and Gemini 3.8 Flash: A Defender's Guide to Safely Adopting LLM CLI Tooling in Security Operations
Introduction On September 2, 2026, Simon Willison released llm-gemini 0.34, the Gemini plugin for his widely used llm command-line toolkit. ...
Fedora 44 mingw-gstreamer1-plugins-good Unauthenticated Code Execution — Patch to 1.28.6 Now
Introduction Fedora has shipped an urgent update for the mingw-gstreamer1-plugins-good package in Fedora 44, moving it to upstream GStreamer...
Marimo 0.20.4 Remote Code Execution: Defending Exposed Notebook Servers from Unauthenticated Code Execution
Introduction A critical code execution vulnerability in Marimo 0.20.4 — the increasingly popular reactive Python notebook framework — has be...
Mageia 10 Bubblewrap Sandbox Escape (MGASA-2026-0371): Symlink Traversal Detection and Remediation Guide
A Setuid Sandbox Tool With a Hole in the Wall Mageia has issued security advisory MGASA-2026-0371, an important-rated update for bubblewrap ...
Knight Office AiTM Phishing Kit: M365 Session Token Theft Campaign — OTX Pulse Analysis & Detection Pack
Threat Summary A single but high-fidelity OTX pulse from AlienVault (TLP:WHITE, modified 2026-09-02) details Knight Office, a newly document...
Knight Office M365 AiTM Kit + Tampered Exodus Modular RAT: OTX Pulse Analysis — Session Token Theft and Credential Access Detection Pack
Knight Office M365 AiTM Kit + Tampered Exodus Modular RAT: OTX Pulse Analysis — Session Token Theft and Credential Access Detection Pack Exc...
LOCKBIT5 Ransomware Gang: 6 Victims Posted in 24 Hours — Financial Services & Manufacturing Targeting Analysis with Detection Rules
LOCKBIT5 Ransomware Gang: 6 Victims Posted in 24 Hours — Sector Targeting Analysis & Detection Rules Classification: TLP:CLEAR | Published: ...
Rockwell Automation Patches 12+ Vulnerabilities in RSLinx Classic, FactoryTalk, ControlFLASH, and ArmorStart — ICS Detection and Remediation Guide
Executive Summary Rockwell Automation has published a coordinated set of security advisories addressing more than a dozen vulnerabilities ac...