Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
French Tax Authority (DGFiP) Breach: 680,000 Records Exposed via Compromised Credentials — Detection and Hardening Guide
680,000 Taxpayer Records Walked Out the Front Door — With Valid Credentials France's tax authority, the Direction Générale des Finances Publ...
LiteLLM Supply-Chain Attack (SANDCLOCK/TeamPCP): Credential Exposure Across 2,000+ Repos — Detection and Remediation Guide
Introduction The compromise of LiteLLM — the widely adopted open-source LLM proxy and gateway — is shaping up to be one of the most conseque...
Blind Eagle (APT-C-36) Evolved Toolkit: AsyncRAT, njRAT & LimeRAT via AutoIt RunPE and DuckDNS C2 — OTX Detection Pack
Threat Summary Between May and July 2026, the OTX community and LevelBlue SpiderLabs tracked Blind Eagle (APT-C-36) across multiple exposed ...
Starland RAT + WLDR PowerShell Implant: UAT-11795 ClickFix Campaign — OTX Pulse Analysis & Enterprise Detection Pack
Starland RAT + WLDR PowerShell Implant: UAT-11795 ClickFix Campaign — OTX Pulse Analysis & Enterprise Detection Pack Threat Summary A newly ...
Starland RAT + WLDR Implant & Spirals Ransomware: OTX Pulse Analysis — UAT-11795 ClickFix Campaign and Rust-Based Double Extortion Detection Pack
Starland RAT + WLDR Implant & Spirals Ransomware: UAT-11795 ClickFix Campaign and Rust-Based Double Extortion Detection Pack Two freshly pub...
Tomorrowland 2026 Fake Ticket Shop Network: Phishing & Payment Fraud Infrastructure — OTX Pulse Analysis and Detection Pack
Tomorrowland 2026 Fake Ticket Shop Network: Phishing & Payment Fraud Infrastructure Threat Summary Live OTX pulse data published by AlienVau...
Miasma Worm v3 npm Supply-Chain Attack + Tomorrowland Credential-Harvesting Scam Network: OTX Pulse Analysis — Detection Pack
Miasma Worm v3 npm Supply-Chain Attack + Tomorrowland Credential-Harvesting Scam Network: OTX Pulse Analysis Two AlienVault OTX pulses publi...
PATCHCORD, SHEETCORD & Evooo1Bot: Google Sheets C2 Espionage + Linux Botnet Credential Theft — OTX Detection Pack
Threat Summary This week's AlienVault OTX feed surfaces four distinct but operationally converging threat streams, all orbiting a common obj...
Kratos PhaaS, Multi-Stage Redirect Chains & Festival Ticket Fraud: OTX Pulse Analysis — M365 Credential Theft Detection Pack
Kratos PhaaS, Multi-Stage Redirect Chains & Festival Ticket Fraud: OTX Pulse Analysis Three concurrent OTX pulses published today reveal a c...