Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Wiz Continuous Vulnerability Assessment (CVA): Closing the Gap Between CVE Publication and Exploitation
Wiz has introduced Continuous Vulnerability Assessment (CVA), a capability designed to detect organizational exposure to newly published vul...
CVE-2025-12768 & CVE-2026-12661: Rockwell Historian ME Remote Code Execution — Detection and Remediation Guide
Introduction CISA has published ICS advisory ICSA-26-244-06 covering two memory-corruption vulnerabilities in Rockwell Automation Historian ...
Nutex Health Ransomware Breach: Detection and Response Guidance After Gang Claims Theft of Patient, Employee, and Financial Data
What Happened Nutex Health, a Houston-based operator of micro-hospitals and hospital outpatient departments, has disclosed to the U.S. Secur...
Nimbus Manticore Recruitment Lures: Detecting Cross-Platform Node.js RATs on Linux and macOS
Executive Summary Kaspersky has attributed two previously undocumented malware families to Nimbus Manticore, the Iranian state-aligned threa...
Aesto Health Breach: 9.5M Records Stolen from AWS — Detection and Cloud Hardening Guide for Healthcare Defenders
The Breach at a Glance Aesto Health, a healthcare technology company, has disclosed a data breach impacting approximately 9.5 million indivi...
Oracle Linux 10 libxml2 Security Update ELSA-2026-60394-0: Patching and Validation Guide for Defenders
Introduction Oracle has published ELSA-2026-60394-0, a moderate-severity security update for the libxml2 library on Oracle Linux 10, with up...
13 Malicious Packagist Composer Packages Deploy iOS Spyware — Detection and Removal Guide
Thirteen Trojanized Composer Themes Are Turning PHP Sites Into Spyware Distribution Points Supply-chain compromises through open-source pack...
Grav CMS 2.0.7 Critical Code Execution PoC Published — Detection, Hunting, and Hardening Guide
Grav CMS 2.0.7 Code Execution Flaw: What Defenders Need to Know A public proof-of-concept exploit for a critical code execution vulnerabilit...
Wolf CMS 0.8.3.1 Code Execution Exploit Published — Detection and Remediation for Legacy CMS Exposure
Introduction A public proof-of-concept exploit for a critical code execution vulnerability in Wolf CMS 0.8.3.1 has been published to Exploit...