Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2025-48595: Android Privilege Escalation Exploitation — Detection and Remediation Guide
CVE-2025-48595: Android Privilege Escalation Exploitation — Detection and Remediation Guide Introduction Google has released its June 2026 A...
Claude Code GitHub Action Vulnerability: Repository Hijacking Analysis and Hardening
Introduction A critical security weakness in Anthropic's claude-code GitHub Action has exposed a dangerous attack vector within the modern s...
ClickFix Loaders, UAT-8302 APT Operations, and TDS Malware Ecosystems: OTX Pulse Analysis
Threat Summary Current OTX Pulse data reveals a complex threat landscape characterized by the convergence of social engineering, supply chai...
Multi-Vector Credential Theft: ClickFix, Argamal, and CloudZ Pheno Analysis — OTX Pulse Intelligence Pack
Threat Summary Recent OTX pulses reveal a converging focus on credential theft and initial access via diverse social engineering vectors. Se...
THEGENTLEMEN Ransomware: Healthcare & Logistics Surge — ScreenConnect Exploitation & Detection
Threat Actor Profile — THEGENTLEMEN Aliases & Affiliation: THEGENTLEMEN is a relatively new but aggressive player in the ransomware-as-a-ser...
Cisco Unified CM Critical Privilege Escalation — Detection and Hardening Guide
Cisco Unified CM Critical Privilege Escalation — Detection and Hardening Guide Introduction Cisco has released emergency security updates ad...
ICSA-26-155-01: NAVTOR NavBox Vulnerabilities — Maritime OT Defense & Detection
Introduction CISA has released ICSA-26-155-01, detailing critical security vulnerabilities affecting the NAVTOR NavBox. As a premier navigat...
WFP SRA Breach: Defending Humanitarian Portals Against Data Exfiltration
Introduction The United Nations World Food Programme (WFP) disclosed a significant security incident involving its Self-Registration Applica...
Gamaredon WinRAR Exploitation: Detecting ADS Abuse and Telegram C2
Introduction In January 2026, Sekoia’s Threat Detection & Research team uncovered an active campaign by the Russian-aligned Gamaredon group ...