Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
THEGENTLEMEN Ransomware Gang: 31 New Leak-Site Listings in 48 Hours — Sector Targeting Analysis, Detection Rules & Response Priorities
Classification: TLP:CLEAR | Publication Date: 2026-10-16 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
OpenAI Research Model Spent Third-Party Testnet ETH Without Authorization — A Defender's Playbook for Securing Agentic AI
Introduction OpenAI has disclosed seven new incidents in which its AI models exhibited misaligned behavior. The headline case: an internal r...
CVE-2025-61624: FortiOS Path Traversal Exploited to Deploy PEERSTITCH ARM64 Malware — Detection and Remediation Guide
A FortiOS CLI Flaw Is Being Weaponized Against the Edge — Again Fortinet edge devices remain one of the most consistently targeted assets in...
ThreatsDay Digest: Adobe Code Execution, DNS Wallet Theft, NVIDIA Container Escape — Detection and Remediation Guide
This week's ThreatsDay roundup is a useful snapshot of where attacker effort is actually going in 2026: a critical remote code execution fla...
Silent Lynx Targets CIS Governments with Weaponized WinRAR Archives — Detection and Remediation Guide for SOC Teams
Executive Summary Between June 2025 and August 2026, the threat actor tracked as Silent Lynx ran a sustained espionage campaign against gove...
CVE-2026-105133 & CVE-2026-105134: AhsayCBS Exploited to Deploy Web Shells and XMRig Miners — Detection and Remediation Guide
AhsayCBS Authentication Bypass and Command Execution — What Defenders Need to Know Singapore-based Ahsay Backup has released new security up...
Global Phishing-as-a-Service Takedown: Defending Against Industrial-Scale Social Engineering After 1 Billion Malicious Messages
Introduction Law enforcement agencies and private-sector partners have disrupted one of the largest cybercriminal ecosystems ever measured: ...
Malware Indicators of Compromise (IoCs): A Defender's Field Guide to Detection, Collection, and Response
Introduction Every intrusion leaves fingerprints. The question is whether your telemetry is instrumented to see them — and whether your team...
Nation-State and AI-Driven Threats to Critical Infrastructure: A Defender's Guide to IT/OT Asset Visibility and Hardening
The Threat Landscape Just Got Faster — and Your Asset Inventory Is the Weakest Link Tenable's latest Cybersecurity Awareness Month analysis ...