Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
LoLBin TTPs: Detecting Abuse of PowerShell, Certutil, and WMIC Based on Bitdefender Analysis
Introduction Bitdefender's recent analysis, "What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface," delivers...
Turla's Kazuar P2P Backdoor: Detection and Eradication of a Mesh Command Network
Introduction The notorious Russian-speaking threat actor Turla (aka Venomous Bear or Uroburos) has historically been associated with some of...
Claw Chain: OpenClaw Vulnerabilities Enable Data Theft, Privilege Escalation, and Persistence — Detection and Hardening Guide
Claw Chain: OpenClaw Vulnerabilities Enable Data Theft, Privilege Escalation, and Persistence — Detection and Hardening Guide Introduction C...
Supply Chain Attack: Malicious Node-IPC Versions (v9.1.6, v9.2.3, v12.0.1) — Detection and Remediation
Introduction A critical supply chain compromise has been identified within the widely used node-ipc npm package. Security researchers at Soc...
Falcon AIDR: Detecting Prompt Injection Threats in Kubernetes AI Applications
Falcon AIDR: Detecting Prompt Injection Threats in Kubernetes AI Applications Introduction The integration of Large Language Models (LLMs) i...
Microsoft MDASH AI Uncovers 16 Windows Flaws — Patch Advisory & Verification Guide
Introduction Microsoft has officially unveiled MDASH (Multi-model Agentic Scanning Harness), a sophisticated, model-agnostic AI system desig...
ModeloRAT Campaign Analysis: Microsoft Teams to Domain Compromise Detection Guide
ModeloRAT Campaign Analysis: Microsoft Teams to Domain Compromise Detection Guide Excerpt Attackers are abusing Microsoft Teams for initial ...
Accelerating Detection Engineering: AI-Assisted Synthetic Attack Log Generation
Accelerating Detection Engineering: AI-Assisted Synthetic Attack Log Generation Introduction Detection engineering is often bottlenecked by ...
RubyGems Supply Chain Attack: Detecting and Mitigating Malicious Package Campaigns
Introduction The RubyGems repository—the foundational infrastructure for the Ruby ecosystem—is currently under a coordinated and significant...