Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Secret Blizzard’s Kazuar: Evolving into a Modular P2P Botnet — Detection and Defense
Introduction The threat landscape has shifted again. The Russian nation-state actor Secret Blizzard (APT29), known for its stealthy long-ter...
Living Off the Pipeline: Detecting Poisoned Pipeline Execution in CI/CD Environments
Living Off the Pipeline: Detecting Poisoned Pipeline Execution in CI/CD Environments Introduction The concept of \"Living off the Land\" (Lo...
Simcenter Femap Datakit RCE: Detecting IPT File Exploitation (Versions < 2512.0003)
Introduction CISA has released ICS Advisory ICSA-26-134-05 regarding a critical vulnerability in Siemens Simcenter Femap, a widely used engi...
Siemens Ruggedcom Rox MX5000: Critical Third-Party Vulnerabilities — Detection and Remediation Guide
Siemens Ruggedcom Rox MX5000: Critical Third-Party Vulnerabilities — Detection and Remediation Guide Introduction Defenders managing Operati...
SecurityScorecard Driftnet Acquisition — Leveraging Automated Reconnaissance for Supply Chain Resilience
Introduction In the modern threat landscape, your perimeter is no longer defined by your firewall, but by the security posture of every vend...
CVE-2025-29101: Siemens RuggedCom ROS Remote Code Execution — Detection and Hardening
CVE-2025-29101: Siemens RuggedCom ROS Remote Code Execution — Detection and Hardening Introduction CISA has released ICSA-26-134-12, alertin...
Siemens gWAP Unauthenticated RCE via Axios (ICSA-26-134-01): Detection and Remediation
Introduction A critical security advisory (ICSA-26-134-01) has been released for Siemens gPROMS Web Applications Publisher (gWAP), a solutio...
Agentic AI vs. Zombie Assets: Automating Cloud Risk Remediation
In the rush to the cloud, organizations accumulate digital debris. Abandoned test environments, forgotten S3 buckets, and orphaned EC2 insta...
CVE-2026-13408: Siemens ROS# Remote Code Execution — ICS Defense & Detection
Introduction CISA has released advisory ICSA-26-134-08 detailing a critical security vulnerability affecting Siemens SIMATIC ROS (Robot Oper...