Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Critical MarkLogic Server Privilege Escalation: Delegated Manager-to-Admin Flaws — Patch 11.3.7 / 12.1.0 Now
Introduction Progress Software has disclosed 31 vulnerabilities in MarkLogic Server — its enterprise multi-model NoSQL database — and five o...
Danfoss Refrigeration Controller Hijacking: How Attackers Heated French Supermarkets to 50°C — OT Detection and Hardening Guide
When the Cold Chain Becomes the Attack Surface On the night of October 11, attackers remotely seized control of refrigeration and freezer sy...
CVE-2026-90460: OpenStack Keystone Delegated Authentication Privilege Escalation — Debian DSA-6554-1 Patching and Detection Guide
Introduction Debian has issued security advisory DSA-6554-1 addressing CVE-2026-90460, a vulnerability in the handling of delegated authenti...
Debian DSA-6556-1: Nagios4 CSRF, XSS, and Command Execution Flaws — Detection and Remediation Guide
Introduction Debian has issued security advisory DSA-6556-1 addressing multiple vulnerabilities in the Nagios4 monitoring system. The flaws ...
GitLab CE/EE CVSS 10.0 Unauthenticated CI/CD Regex RCE: Detection and Emergency Remediation Guide
Introduction GitLab has patched a maximum-severity flaw affecting both Community Edition (CE) and Enterprise Edition (EE) that, under certai...
Brand Deal Phishing Campaign Targeting YouTube Creators: SSO Abuse & Google Credential Theft — OTX Pulse Detection Pack
Brand Deal Phishing Campaign Targeting YouTube Creators: SSO Abuse & Google Credential Theft Threat Summary AlienVault OTX pulse data (modif...
N0N Ransomware Gang Claims 50 Victims in Coordinated Maritime & Logistics Leak-Site Campaign — Sector Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-13 | Source: ransomware.live leak-site monitoring | Nature of data: Unverified threat-...
Danfoss Refrigeration Controller Hack Defrosts French Supermarkets: OT Defense and Detection Guide
Introduction In early 2026, attackers remotely triggered defrost cycles on commercial refrigeration systems at multiple French supermarket c...
Yandex Cloud Outage After Drone Strikes on Data Centers: A Defender's Guide to Cloud Availability Resilience
When the Threat Is Kinetic: Yandex Data Centers Knocked Offline Yandex, Russia's largest cloud services provider, has confirmed that drone a...