Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ClearFake, PhantomPolia & FortiBleed: EtherHiding Stealer Chains and 86K+ Compromised FortiGate Credentials — OTX Detection Pack
Threat Summary Five concurrent OTX pulses paint a single, coherent picture: credential theft at industrial scale, increasingly laundered thr...
Oracle Health Breach Hits Nearly 20 Million Patients: Detection and Hardening Guide for Legacy Cerner Environments
Introduction The Oracle Health breach — the intrusion into legacy Cerner systems that surfaced in early 2025 — has metastasized into one of ...
Shai-Hulud Worm Compromises tensorlake npm SDK (v0.5.144) — Detection and Remediation Guide for Credential-Theft Supply Chain Attacks
A Weaponized npm Package Just Landed in Developer Toolchains — Again Security researchers at Socket have confirmed that version 0.5.144 of t...
Fake AI Ads BitB Phishing Platform + Akira Ransomware RDP Intrusion: OTX Pulse Analysis — Enterprise Detection Pack
Fake AI Ads BitB Phishing Platform + Akira Ransomware RDP Intrusion: OTX Pulse Analysis Threat Summary Two concurrent OTX pulses from 2026-1...
Fake AI Ads Browser-in-the-Browser + AWS Bedrock Token-Jacking: OTX Pulse Detection Pack
Threat Summary The two OTX pulses describe a converging credential-theft problem rather than a single named intrusion set. The first campaig...
CL-STA-1178 Blinder Tunnel + ShelbyLoader V2, Fake AI Ads Phishing Platform, and AWS Bedrock Token-Jacking: OTX Pulse Analysis — Credential Theft Detection Pack
CL-STA-1178 Blinder Tunnel + ShelbyLoader V2, Fake AI Ads Phishing Platform, and AWS Bedrock Token-Jacking: OTX Pulse Analysis Intelligence ...
Fake ChatGPT, Gemini, Claude, and Perplexity Sites Steal Ad Accounts and MFA Codes — Detection and Defense Guide
Introduction A newly identified phishing campaign is targeting advertising account managers by impersonating the AI tools they use every day...
CloudSyncD: Fake Zoom macOS Installer Hides Stolen Passwords in Zero-Width Unicode — Detection and Removal Guide
Introduction Jamf Threat Labs has disclosed a new macOS backdoor dubbed CloudSyncD, delivered through a trojanized Zoom installer. The campa...
TA419 AitM Phishing Campaign Targets U.S. AI Policy Experts: Detection and Defense Guide for Microsoft 365 Tenants
Introduction A China-nexus cyber espionage group tracked as TA419 has been attributed to a series of adversary-in-the-middle (AitM) social e...