Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
MSHTA LOLBIN Abuse: Detecting Silent Stealers and Loaders via Legacy Windows Utility
MSHTA LOLBIN Abuse: Detecting Silent Stealers and Loaders via Legacy Windows Utility Introduction Attackers are increasingly weaponizing msh...
TeamPCP Supply Chain Campaign: Checkmarx Jenkins Plugin & Mini Shai-Hulud Worm
TeamPCP Supply Chain Campaign: Checkmarx Jenkins Plugin & Mini Shai-Hulud Worm Introduction The TeamPCP threat actor has significantly escal...
Early Social Engineering Detection: Closing the Gap Between Email Delivery and Business Disruption
Introduction Recent analysis reveals a critical gap in many Security Operations Centers (SOCs): social engineering emails that appear clean ...
CVE-2024-40898: DirtyDecrypt Linux Root Escalation — Detection and Hardening Guide
Introduction A critical local privilege escalation (LPE) vulnerability in the Linux kernel, tracked as CVE-2024-40898 and dubbed "DirtyDecry...
CVE-2021-23017: Critical NGINX Vulnerability — Detection and Remediation Guide
CVE-2021-23017: Critical NGINX Vulnerability — Detection and Remediation Guide Introduction This week, the security community reacted with u...
Azure Backup for AKS Silent Fix: Hardening and Detection Guide
Introduction A critical dispute has emerged regarding the security posture of Azure Backup for Azure Kubernetes Service (AKS). A leading sec...
TanStack 'Mini Shai-Hulud' Supply Chain Attack: IOC Analysis and macOS Hardening
Introduction OpenAI recently confirmed that two of its corporate macOS devices were compromised during the TanStack supply chain attack, dub...
Active Funnel Builder Exploit: WooCommerce Checkout Skimming Detection & Hardening
Active Funnel Builder Exploit: WooCommerce Checkout Skimming Detection & Hardening Introduction A critical security vulnerability in the Fun...
LoLBin TTPs: Detecting Abuse of PowerShell, Certutil, and WMIC Based on Bitdefender Analysis
Introduction Bitdefender's recent analysis, "What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface," delivers...