Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Node.js LOLBin Abuse, PaperCut MF Zero-Days & AI-Orchestrated Intrusions: AdaptixC2, AsukaStealer, GLUTTON OTX Pulse Analysis — Enterprise Detection Pack
Executive Threat Summary Three concurrent OTX pulses paint a consistent picture: initial access brokers and state-adjacent operators are ind...
RemusStealer EtherHiding C2, StreamRat Banking Trojan & PamStealer macOS Campaign: OTX Pulse Analysis — Infostealer Detection Pack
Threat Summary Five OTX pulses published this cycle collectively paint a picture of a maturing infostealer-as-a-service economy that has mov...
CVE-2026-88771 Citrix NetScaler Pre-Auth Command Injection: pitboss/NSPPE Web Shell and Credential-Theft Hunt Pack
Threat Summary Live OTX pulse data from AlienVault and LevelBlue THOR indicates active exploitation of CVE-2026-88771, a critical pre-authen...
CVE-2026-73570: Zimbra Collaboration Suite Command Injection Actively Exploited — Detection and Remediation Guide
CVE-2026-73570: Unauthenticated Command Injection in Zimbra Is Being Weaponized Right Now If you run Zimbra Collaboration Suite (ZCS) expose...
Packagist iOS Spyware Chain (CVE-2025-31277/CVE-2025-43529) + RMM Phishing Credential Theft: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two converging campaigns surfaced in this morning's OTX feed, and together they paint a clear picture of where credential and...
French Tax Authority (DGFiP) Breach: Stolen Credentials Exfiltrated Data for Seven Weeks — Detection and Defense Guide
Introduction France's tax administration — the Direction générale des Finances publiques (DGFiP) — has confirmed that an attacker used stole...
The Stealer Factory: Python-Based MaaS Infostealer Builder — OTX Pulse Analysis with Enterprise Detection Pack
Threat Summary AlienVault OTX pulse analysis dated 2026-09-28 exposes an active Malware-as-a-Service (MaaS) infostealer builder documented b...
Kothamine RAT, Python MaaS Stealer Factory & ShinyHunters/UNC6240 PeopleSoft Exploitation: OTX Pulse Analysis — Enterprise Detection Pack
Kothamine RAT, Python MaaS Stealer Factory & ShinyHunters/UNC6240 PeopleSoft Exploitation Three concurrent OTX pulses published on 2026-09-2...
JadePuffer Agentic AI Attacks on Azure: Detection, Hunting, and Hardening Guide for Cloud Defenders
The Shift Nobody Wanted: Autonomous Agents as Intrusion Operators In 15 years of incident response, I've watched attackers industrialize eve...