Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ClingSTUN Proxy Backdoor + Fake MP4 NetSupport Loader: OTX Pulse Analysis — Edge Device Hijacking & Encrypted RAT Delivery
Threat Summary Two active AlienVault OTX pulses paint a picture of a criminal ecosystem increasingly focused on two complementary objectives...
SilkParasite SpiceRAT C2 Cluster + skynox7 Proxyjacking Campaign: OTX Pulse Analysis — Edge Device & Central Asia Detection Pack
Threat Summary Two pulses published to AlienVault OTX on 2026-10-16 illuminate complementary halves of the modern intrusion economy: state-a...
N0N Ransomware Gang: 26 Leak-Site Claims in Two Days — Sector Targeting Analysis, Detection Rules & Pre-Detonation Hunt Content
Classification: TLP:CLEAR | Publication Date: 2026-10-17 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
BAE Systems Cyber Incident Halts US Bankruptcy Court Notices — Third-Party Incident Response and Detection Playbook
When Your Vendor Goes Dark: The BAE Systems Incident A cyber incident at BAE Systems — the defense and aerospace contractor that operates cr...
Burger King Japan Data Breach: 11.18 Million Customer Records Exposed — Detection and Hardening Guide for Customer-Data Servers
Attackers gained access to a server operated by Burger King Japan containing 11.18 million customer records, in one of the largest retail/QS...
AOMEI Backupper Supply Chain Attack: Update Server Tampering Delivered Backdoors — Detection and Remediation Guide
Introduction Between May and July 2026, threat actors repeatedly tampered with the files served by AOMEI Backupper's own update infrastructu...
Mid Florida Dermatology Data Breach: 85K Patients Exposed — Healthcare Detection and Response Playbook
Introduction Mid Florida Dermatology & Plastic Surgery has disclosed a data breach affecting approximately 85,000 patients, joining Kannarr ...
WordPress 6.9.10 Security Release: Stored XSS in Comments Admin and WP_Http DoS — Fedora 43 Patching and Detection Guide
WordPress 6.9.10 Closes Stored XSS and HTTP Client DoS — What Defenders Need to Know The WordPress security team has shipped version 6.9.10,...
ConnectWise Cloud Backup Credential Compromise: 173 M365 Tenants Breached — Detection and Remediation Guide
Introduction Security researchers are tracking an active campaign in which unknown threat actors have abused a compromised Microsoft 365 cre...