Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Armored Likho Threat Actor: Detecting BusySnake Stealer in Critical Infrastructure
Introduction A newly discovered threat actor named Armored Likho has been actively targeting government agencies and the electric power sect...
PolinRider Campaign: Defending Against North Korean Supply Chain Attacks in npm, Go, and Chrome
Introduction The threat landscape for software development environments has deteriorated significantly with the emergence of the PolinRider ...
New Metasploit Modules: Peyara Remote Mouse RCE and SMB Session Upgrades
Introduction This week’s Metasploit Framework update introduces capabilities that significantly lower the barrier for post-exploitation late...
PamStealer macOS Malware: Detecting Fake Maccy Apps and PAM Attacks
Introduction Security operations teams must be on high alert for PamStealer, a newly identified macOS information stealer actively targeting...
NetNut Proxy Botnet Disruption: Defending Against Residential IP Abuse
Introduction This week, the Google Threat Intelligence Group (GTIG), in coordination with the FBI and Lumen, announced a significant blow to...
GPT-5.5-Cyber and the Collapse of the Fuzzing Barrier: Defending OSS Against AI-Driven Discovery
Introduction The "Patch the Planet" initiative—a collaboration between Trail of Bits and OpenAI—has dropped a field report that should send ...
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain Introduction Security Arsenal is tracking a...
BioShocking: Defending AI Agents Against Gamification-Based Prompt Injection
BioShocking: Defending AI Agents Against Gamification-Based Prompt Injection Introduction Security Arsenal is tracking a concerning developm...
RustDuck Botnet: Detection and Hunting for Rust-Based IoT DDoS Malware
RustDuck Botnet: Detection and Hunting for Rust-Based IoT DDoS Malware Introduction Since February 2026, security researchers at QiAnXin's X...