Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Zero-Click Candiru Spyware Delivered via Malvertising: Detection and Hardening Guide for SOC Teams
The Attack: Spyware Delivered by Simply Rendering an Ad Security researchers have documented a campaign in which devices at Al Jazeera Media...
Ransomware Groups Escalate to Real-World Threats: Defending Healthcare Organizations Against Physical Intimidation and Extortion
Introduction The ransomware playbook has crossed a line that many defenders long considered theoretical: threat actors are now backing their...
Chrome 155 for Android (155.0.8059.84): Closing the Mobile Browser Patch Gap Before Attackers Exploit It
Introduction Google has released Chrome 155 (155.0.8059.84) for Android, rolling out via Google Play over the coming days. The release notes...
CVE-2026-103849: Critical BlockStrap RCE in Magento and Adobe Commerce — Detection, Hunting, and Remediation Guide
What Happened Researchers are warning that threat actors are likely to begin exploiting CVE-2026-103849, a maximum-severity vulnerability af...
CVE-2026-35029 and CVE-2026-59823: LiteLLM Gateway Defense, Detection, and Remediation Guide
CVE-2026-35029 and CVE-2026-59823: LiteLLM Gateway Defense, Detection, and Remediation Guide LiteLLM sits in a dangerous place in enterprise...
Drupal Critical RCE Patches Released — Detection, Hardening, and Remediation Guide for Defenders
Drupal's security team has released patches for two critical vulnerabilities that allow remote code execution on websites running any suppor...
ConnectWise Cloud Backup Supply-Chain Attack: Detecting and Remediating Compromised Microsoft 365 Tenants
ConnectWise Cloud Backup Supply-Chain Attack: What Happened and What You Must Do Now ConnectWise has shut down customer access to its Cloud ...
MALFEX Campaign: Malicious npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon — Detection and Response Guide
Introduction Security researchers have disclosed a new software supply chain campaign dubbed MALFEX, and one of its confirmed components is ...
ClingSTUN Proxy Backdoor + Fake MP4 NetSupport Loader: OTX Pulse Analysis — Edge Device Hijacking & Encrypted RAT Delivery
Threat Summary Two active AlienVault OTX pulses paint a picture of a criminal ecosystem increasingly focused on two complementary objectives...