Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Massachusetts AG HIPAA Settlement with Transformative Healthcare: Phishing, Email Compromise, and MassHealth Fraud — A Defender's Playbook
What Happened The Massachusetts Attorney General's office has reached a settlement with Transformative Healthcare LLC — one of the Commonwea...
Debian 12 Linux Kernel 6.12.113-1 Update Fixes Privilege Escalation, DoS, and Information Leak Flaws — Patch and Verification Guide
Debian Ships linux-6.12.113-1 for Bookworm: Local Root, DoS, and Info Leak Fixes Land Together Debian's LTS security team has released an up...
Shadow AI Containment: Detecting and Governing Unsanctioned AI Tools Across Your Enterprise
Introduction Shadow AI is no longer a handful of employees pasting text into a public chatbot. In 2026, unsanctioned AI usage has metastasiz...
OpenCode MCP Code Execution Flaw — Detection, Patching to v1.18.33, and Hardening Guide
Introduction Developers using the OpenCode AI coding agent on Windows or Windows Subsystem for Linux (WSL) were exposed to arbitrary code ex...
Shadow AI Agents Are Your Newest Insider Threat: How to Govern, Detect, and Contain Unmanaged AI Identities
There is a strong chance that, right now, an AI agent is running on a laptop somewhere in your environment. It stores API keys and database ...
Fedora PHP Update Patches Two Critical Code Execution Flaws (CVE-2026-109618, CVE-2026-109619) — Patch and Detection Guide
Fedora has released an urgent PHP security update (Fedora 44 advisory php-2026-a9eba4bbc3) addressing two critical code execution vulnerabil...
ARTEX AI Agent Attacks on Okta, Entra ID, and AWS Cognito: Storm-0940 Detection and Hardening Guide
Introduction Wiz Research has published findings on an active campaign in which an AI-driven attack agent — designated ARTEX — is being oper...
k0t Edge Credential Harvesting + LiteLLM Supply Chain Infostealer Wave: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Five concurrent pulses published to AlienVault OTX on 2026-10-22 paint a coherent picture: credential theft is the dominant a...
N0N Ransomware Gang: 24 Leak-Site Listings in One Week — Healthcare & Technology Sector Targeting Analysis with Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-22 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...