Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-68980: Apache NiFi Critical Flaw — Detection and Hardening Guide
Apache NiFi is a cornerstone technology for many enterprises, automating the flow of data between systems. Today, we are analyzing CVE-2026-...
CVE-2026-68979: Apache NiFi Critical Authorization Bypass — Detection and Hardening Guide
Apache NiFi, the linchpin of automated data flow for many enterprises, is currently exposed to a critical vulnerability identified as CVE-20...
ScreenConnect RMM Abuse via WsgiDAV Staging & Cloudflare Tunnels: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary The AlienVault OTX pulse for 2026-08-05 highlights a sophisticated active campaign leveraging the abuse of legitimate ScreenC...
The Gentlemen's EtherRAT & Shai-Hulud npm Supply Chain: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Intelligence indicates two concurrent high-severity campaigns targeting enterprise environments. The Gentlemen ransomware aff...
Supply Chain & Blockchain C2: Shai-Hulud, SmartLoader, and EtherRAT Campaigns — OTX Analysis
Intelligence Briefing Date: 2026-08-05 Source: AlienVault OTX Live Pulse Data Category: Infostealer & Credential Theft Campaigns Threat Summ...
New XCSSET macOS Variant: Defending Against Compromised Xcode Projects
Introduction Security Arsenal is actively tracking a significant resurgence of the XCSSET malware, specifically engineered to target macOS d...
Google ADK AI Workflows Vulnerability: Prompt Injection Detection and Remediation Guide
Google ADK AI Workflows Vulnerability: Prompt Injection Detection and Remediation Guide Introduction Google has taken immediate action by de...
FTC/State Action on Him & Hers: Defending Against Unauthorized Telehealth Data Sharing
FTC/State Action on Him & Hers: Defending Against Unauthorized Telehealth Data Sharing Introduction The Federal Trade Commission (FTC), alon...
CVE-2026-9198: Langflow RCE Actively Exploited — Detection and Hardening Guide
Introduction On August 5, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-9198 to its Known Exploited ...