Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Carbonato Botnet Hijacks Exposed Docker Daemons to Deploy Telegram-Controlled Hermes AI Agent — Detection and Remediation Guide
Introduction ThreatDown researchers have disclosed a new compromised-device network tracked as Carbonato that is actively scanning for and c...
AI Agent Governance Gap: Only 47% of CISOs Can Identify Every AI Agent — A Defensive Playbook for Shadow AI and Excessive Access
Introduction: The Identity Perimeter Has a New Blind Spot Okta's Global CISO Insights 2026 report delivers a number every security leader sh...
Autonomous AI Agents Acting as You: Defending Against Agentic AI Impersonation and Over-Delegated Authority
Introduction A widely-shared post this week, amplified by Simon Willison, shows a consumer AI agent ("Muse") managing a marketplace pickup o...
CVE-2026-48842: Roundcube SQL Injection Exploited in the Wild — Detection, Patching and IR Guide
CVE-2026-48842: Roundcube SQL Injection Exploited in the Wild Roundcube Webmail deployments that remain unpatched against CVE-2026-48842 are...
CVE-2026-101084: obot MCP Server Authorization Bypass (CVSS 9.6) — Detection and Remediation Guide
Introduction The National Vulnerability Database has published CVE-2026-101084, a critical (CVSS 9.6) broken access control vulnerability in...
OpenAI 'o' Always-On ChatGPT Assistant With Email Access: Defending Against AI Agent Prompt Injection and OAuth Abuse
Introduction OpenAI is quietly preparing a new always-on ChatGPT assistant internally codenamed "o" — and references to the unannounced feat...
CVE-2026-88771 & CVE-2026-88772: CISA KEV Alert — Citrix NetScaler Exploitation Detection and Remediation Guide
CVE-2026-88771 & CVE-2026-88772: CISA KEV Alert — Citrix NetScaler Exploitation Detection and Remediation Guide On September 27, 2026, CISA ...
CVE-2026-88771 and CVE-2026-88772: Citrix NetScaler ADC/Gateway Zero-Day Exploitation — Detection and Emergency Remediation Guide
Introduction CISA is amplifying a Citrix disclosure of eight new vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway...
CVE-2026-101065: Obot Docker Quickstart Exposes Admin API on 0.0.0.0:8080 — Detection and Remediation Guide
Introduction NVD has published CVE-2026-101065, a CVSS 9.8 (Critical), network-exploitable vulnerability affecting Obot, an open-source AI a...