Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
LLMjacking via GCP Phishing: Gemini API Abuse & Cloud Billing Hijack Campaign — OTX Detection Pack
LLMjacking via GCP Phishing: Gemini API Abuse & Cloud Billing Hijack Campaign Threat Summary OTX pulse data published by AlienVault on 2026-...
Wazza Device Code Phishing Kit + GCP LLMjacking Campaign: OTX Pulse Analysis — Microsoft 365 & Cloud Credential Theft Detection Pack
Wazza Device Code Phishing Kit + GCP LLMjacking Campaign: OTX Pulse Analysis Threat Summary Two converging credential-theft campaigns surfac...
APT28 'Swallowtail' Espionage Campaign: Hookedge Backdoor Hits NATO Defense Firms — OTX Pulse Detection Pack
APT28 'Swallowtail' Espionage Campaign: Hookedge Backdoor Hits NATO Defense Firms Threat Summary AlienVault OTX pulse data confirms an activ...
ConnectWise Cloud Backup / SkyKick M365 Credential Abuse: OTX Detection Pack — Microsoft Graph Token Access Across Hundreds of Tenants
ConnectWise Cloud Backup / SkyKick M365 Credential Abuse: OTX Detection Pack — Microsoft Graph Token Access Across Hundreds of Tenants Excer...
TraderTraitor FLATROOF/ROOFDECK, QuartzLine PDF Backdoor & SkyKick M365 Credential Abuse: OTX Pulse Detection Pack — 2026-10-19
Threat Summary Four concurrent OTX pulses paint a coherent picture of the current credential-theft and access-broker ecosystem: adversaries ...
PolinRider Infostealer: Compromised GitHub Accounts Poison Packagist Supply Chain — OTX Detection Pack
PolinRider Infostealer: Compromised GitHub Accounts Poison Packagist Supply Chain Threat Summary AlienVault OTX pulse data confirms an activ...
Settra Ransomware + MeshAgent RMM: BYOVD Recovery-Inhibition Campaign — OTX Detection Pack
Settra Ransomware + MeshAgent RMM: BYOVD Recovery-Inhibition Campaign — OTX Detection Pack Threat Summary The pulse describes Settra, a rans...
PaperCut NG/MF AI-Orchestrated Exploitation: CVE-2026-81578/82078, Chisel SOCKS5, AD Credential Theft — OTX Detection Pack
Threat Summary AlienVault OTX pulse data describes an exposed attacker workbench at 45.142.193[.]132 containing AI-agent instructions, explo...
KGB RAT, KREMLIN, Variola & ARMORY CASTLE: OTX Pulse Analysis — Infostealer, Browser Hijack, and Zero-Day Exploitation Detection Pack
KGB RAT, KREMLIN, Variola & ARMORY CASTLE: OTX Pulse Analysis — Infostealer, Browser Hijack, and Zero-Day Exploitation Detection Pack This e...