Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Teams Helpdesk Impersonation + Node.js MSI Implant: Human-Operated Intrusion Chain — OTX Pulse Analysis & Detection Pack
Teams Helpdesk Impersonation + Node.js MSI Implant: Human-Operated Intrusion Chain — OTX Pulse Analysis & Detection Pack Threat Summary A ne...
XCSSET v40 Supply Chain Surge + SakDriver Kernel Rootkit + Teams Help Desk Intrusion: OTX Detection Pack
Threat Summary Three concurrent OTX pulses published 2026-09-02 paint a picture of adversaries moving up and down the trust stack simultaneo...
TVRAT and DarkVNC Campaign Infected 80,000 Freelancers — Detection and Defense Guide for SOC Teams
The Indictment and Why It Matters to Every Enterprise SOC A federal grand jury in California has indicted a Russian national for orchestrati...
TerminalFix ClickFix Variant: Fake Cloudflare CAPTCHAs Push Reverse-Tunnel Malware via Windows Terminal — Detection and Defense Guide
Introduction Microsoft's threat intelligence team has disclosed a new evolution of the ClickFix social-engineering technique, dubbed Termina...
ShinyHunters Social Engineering Incident at ReliaQuest: Identity, Help Desk, and MSSP Defense Guide
Introduction ReliaQuest has publicly rejected claims that ShinyHunters successfully compromised its internal systems after an incident linke...
Epic MyChart Phishing Campaign Hits U.S. Health Systems: Detection and Defense Guide for Healthcare Security Teams
Epic MyChart Phishing Campaign: What Healthcare Defenders Need to Know More than a dozen U.S. health care systems have issued warnings to pa...
Vanilla Tempest ClickFix Cluster: Supper Malware + DLL Sideloading via MSI & NodeJS — OTX Detection Pack
Threat Summary A live AlienVault OTX pulse authored by the AlienVault research team documents a coordinated ClickFix campaign cluster attrib...
SysScan Fake AV Scam Network + RecruitTrap Mobile Credential Phishing: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two distinct but complementary social-engineering campaigns surfaced in OTX telemetry on 2026-08-25, and together they paint ...
ShinyHunters Impersonates Security Staff to Breach ReliaQuest: Detecting and Defeating Help Desk Social Engineering
Introduction ReliaQuest — a well-known managed detection and response provider — has publicly confirmed that one of its own employees was ta...