Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
NetSupport Manager RAT Hidden in Fake MP4 uuid Boxes: PowerShell Loader Campaign — OTX Detection Pack
NetSupport Manager RAT Hidden in Fake MP4 uuid Boxes: PowerShell Loader Campaign Threat Summary AlienVault OTX pulse "Fake MP4 File Carries ...
APT-C-36 GitHub Loader: AsyncRAT/DcRat/Remcos/XWorm Colombia Phishing — OTX Detection Pack
Threat Summary A live OTX pulse published by AlienVault/LevelBlue describes continued operator activity behind a GitHub-hosted loader ecosys...
APT-C-36 (Blind Eagle) GitHub Loader Campaign: AsyncRAT, DcRat, Remcos & XWorm Deployment Pipeline — OTX Detection Pack
Threat Summary Live OTX pulse data from AlienVault and LevelBlue SpiderLabs exposes the operational infrastructure of APT-C-36 (Blind Eagle)...
SNOWLIGHT Go Loader + VShell RAT: Fake Academic Resume Lure Targeting China's Defense-Tech Pipeline — OTX Pulse Detection Pack
SNOWLIGHT Go Loader + VShell RAT: Fake Academic Resume Lure Campaign Classification: TLP:WHITE | Intelligence Category: APT & Nation-State C...
AsyncAPI npm Supply-Chain Compromise: sync.js RAT via Lifecycle Hooks and IPFS Payload Delivery — OTX Detection Pack
AsyncAPI npm Supply-Chain Compromise: sync.js RAT via Lifecycle Hooks and IPFS Payload Delivery Threat Summary AlienVault OTX pulse reportin...
Moobot/Mirai Botnet Resurgence: Open Directory Exposure of 'StresD Pro+' DDoS-as-a-Service Panel — OTX Pulse Analysis & Detection Pack
Moobot/Mirai Botnet Resurgence: Open Directory Exposure of 'StresD Pro+' DDoS-as-a-Service Panel Threat Summary A single but high-value OTX ...
DARKLANTERN, SPEAKINGSTONE & ENDLESSDOORS: ZBT Router Firmware Implants in the Global Supply Chain — OTX Pulse Analysis & Detection Pack
DARKLANTERN, SPEAKINGSTONE & ENDLESSDOORS: ZBT Router Firmware Implants in the Global Supply Chain Classification: TLP:WHITE | Severity: CRI...
BARRACUDA Ransomware Gang: 3 New Leak-Site Listings — Sector Targeting Analysis, Detection Rules & Response Playbook
Classification: TLP:CLEAR | Publication Date: 2026-09-27 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
CISA KEV Flash: 10 CVEs Added — MikroTik, Microsoft SharePoint, F5 & Check Point Under Active Attack
CISA KEV Flash: 10 CVEs Added — Edge Devices, Identity Systems & CMS Platforms Under Active Exploitation Between September 21 and September ...