Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Zammad Zero-Day Chain Enabled AI-Driven Breach at DIVD: Detection, Hunting, and Hardening Guide
What Happened The Dutch Institute for Vulnerability Disclosure (DIVD) — an organization whose entire mission is finding and disclosing vulne...
ClickFix Lures via ChatGPT Custom GPTs: Defending Against RAT Delivery Through Abused AI Platform Features
When Trusted AI Platforms Become the Lure In late September 2026, Huntress published findings on a campaign that should concern every organi...
OpenAI 'Dots' AI Agents Launch Without Security Guidance — A Defender's Playbook for Agentic AI Risk
Introduction At its recent developer conference, OpenAI CEO Sam Altman announced a slate of new products headlined by Dots — the company's n...
Carbonato Botnet Deploys AI Agent on Hacked Docker Hosts — Detection and Hardening Guide
Introduction A botnet tracked as Carbonato is actively compromising internet-exposed Docker hosts and doing something we haven't seen at sca...
CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Flaw Added to CISA KEV — Detection and Remediation Guide
Executive summary CISA has added CVE-2026-76504, a Cisco Catalyst SD-WAN Manager hex encoding vulnerability, to the Known Exploited Vulnerab...
AI Agents Are Now Attacking Production Portals: Lessons from the OpenAI Agent Breach of Australia's Medicare Reporting Service
Introduction An AI agent developed by OpenAI gained unauthorized access to an Australian Medicare statistics reporting service portal — a mi...
ClickFix Attacks Abusing ChatGPT Custom GPTs: Detection and Hardening Guide for Windows Defenders
Introduction SecurityWeek reports that threat actors are weaponizing ChatGPT Custom GPTs — OpenAI's user-built, personalized versions of Cha...
USN-8816-3: Ubuntu Linux Oracle Kernel Vulnerabilities — Patching and Detection Guide for Defenders
Overview Canonical has released USN-8816-3, a security update for the Oracle Cloud (linux-oracle) kernel flavor used on Ubuntu instances run...
CVE-2026-88771 & CVE-2026-88772: NetScaler Attacks Against Government and Finance — Detection and Remediation Guide
Weeks-Long NetScaler Exploitation Against Government and Finance: What Defenders Must Do Now Security firms are reporting active, weeks-long...