Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Fake Bank of America Phishing Drops Malicious ScreenConnect RMM: Detection, Hunting, and Removal Guide
Introduction A newly reported social engineering campaign is impersonating Bank of America to push victims into downloading and executing a ...
AWS, Google, and Vercel AI Agent Flaws Bypass Model Guardrails — Detection and Hardening Guide
Introduction Security researchers have disclosed a class of architectural flaws in agent infrastructure from Amazon Web Services, Google, an...
Russian Cybercrime Groups Hijack Hotel Wi-Fi to Steal Traveler Credentials — Detection and Defense Guide
Russian Cybercrime Groups Are Weaponizing Hotel Wi-Fi — What Defenders Need to Know A campaign attributed to Russian cybercrime groups is ac...
CISA KEV Alert: Active Exploitation of Langflow, N-able N-central, and Apache Tomcat — 72-Hour Detection and Remediation Guide
CISA Adds Langflow, N-central, and Apache Tomcat Flaws to KEV — Three-Day Federal Deadline Signals Active Campaigns When CISA adds vulnerabi...
khunt Toolkit Compiled Inside Oracle: Detecting and Blocking SQL Injection to Windows SYSTEM Escalation
A recent intrusion investigated by Huntress shows a technique every defender running Oracle behind a web application needs to understand: at...
Varonis Agent IBAC: Defending Against AI Agent Intent Drift — Detection and Enforcement Guide
The Problem: AI Agents Are Only as Safe as Their Boundaries Enterprise AI agents are being deployed with exactly the access they need to be ...
CVE-2026-63077: JetBrains TeamCity Unauthenticated RCE Under Active Exploitation — Detection and Remediation Guide
Introduction CISA has added CVE-2026-63077 to its Known Exploited Vulnerabilities (KEV) catalog, confirming what many of us in incident resp...
BINDCLOAK Modular Backdoor + MIXEDKEY Loader: OTX Pulse Analysis — Middle East Government Campaign Detection Pack
BINDCLOAK Modular Backdoor + MIXEDKEY Loader: OTX Pulse Analysis Threat Summary AlienVault's follow-on pulse to the Zscaler-documented campa...
npm Supply Chain Compromise: keyv & cacheable Packages Poisoned with Ethereum C2 Credential Stealer — OTX Pulse Analysis
npm Supply Chain Compromise: keyv & cacheable Packages Poisoned with Ethereum C2 Credential Stealer Threat Summary AlienVault OTX pulse data...