Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
DEV#POPPER npm Supply Chain RAT, SectopRAT Fake Claude Installers & 19-Extension Wallet Drainer: OTX Pulse Analysis — Blockchain C2 & Credential Theft Detection Pack
Threat Summary A cluster of five OTX pulses published in late August 2026 reveals a converging trend across the infostealer and credential-t...
SILENTRANSOMGROUP: 10 Victims Posted in 48 Hours — Multi-Country Extortion Campaign, Initial Access CVEs & Detection Engineering
SILENTRANSOMGROUP: 10 Victims Posted in 48 Hours — Multi-Country Extortion Campaign, Initial Access CVEs & Detection Engineering Classificat...
CISA KEV Flash: 11 CVEs Added — Citrix NetScaler, Zimbra, Linux Kernel & Microsoft SQL Server Under Active Attack
CISA KEV Flash: 11 CVEs Added to the Known Exploited Vulnerabilities Catalog Between August 20 and August 26, 2026, CISA added eleven vulner...
CastleLoader/NeedleStealer, MCP AI-Agent Exploitation and RecruitTrap Mobile OAuth Theft: OTX Enterprise Detection Pack
CastleLoader/NeedleStealer, MCP AI-Agent Exploitation and RecruitTrap Mobile OAuth Theft Threat Summary The three pulses collectively show c...
KRYBIT Ransomware Gang: 13 Victims in 48 Hours — Cross-Sector Campaign Analysis, CVE Exploitation Ties & Detection Rules
KRYBIT Ransomware Gang: 13 Victims in 48 Hours — Cross-Sector Campaign Analysis, CVE Exploitation Ties & Detection Rules Classification: TLP...
GoGRPC Backdoor + Teams Vishing IAB Campaign and Sliver Intrusions on Philippine Nuclear/Defense Targets: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two distinct but equally urgent threat streams surfaced in AlienVault OTX telemetry today. Together they map the full modern ...
Dark Caracal GoCaracal Framework + Tortoiseshell TWOSTROKE Backdoor: Dual APT Campaign OTX Analysis — Enterprise Detection Pack
Dual APT Campaign Intelligence: GoCaracal Modular Framework and TWOSTROKE Backdoor Activity This briefing synthesizes two concurrent advance...
GoCaracal + Bandook C2, MCP Secrets Abuse, and RecruitTrap OAuth Phishing: OTX Pulse Detection Pack — 2026-08-26
GoCaracal + Bandook C2, MCP Secrets Abuse, and RecruitTrap OAuth Phishing: OTX Pulse Detection Pack — 2026-08-26 Threat Summary Three concur...
RMM Phishing Campaign (Fake CRA T4 / SSA Lures): Living-Off-the-Land RMM Abuse — OTX Pulse Detection Pack
Threat Summary This OTX pulse (AlienVault, TLP:WHITE, modified 2026-08-26) documents a phishing operation that began as a Canada Revenue Age...