Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-88771 Citrix NetScaler Pre-Auth Command Injection: pitboss/NSPPE Web Shell and Credential-Theft Hunt Pack
Threat Summary Live OTX pulse data from AlienVault and LevelBlue THOR indicates active exploitation of CVE-2026-88771, a critical pre-authen...
Packagist iOS Spyware Chain (CVE-2025-31277/CVE-2025-43529) + RMM Phishing Credential Theft: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two converging campaigns surfaced in this morning's OTX feed, and together they paint a clear picture of where credential and...
ClickFix-Custom-GPT Malvertising Chain Delivers Lumma, SectopRAT & AMOS + JSCeal V8 Bytecode Stealer: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two AlienVault OTX pulses published 2026-09-29/30 converge on a single theme dominating the credential-theft landscape in lat...
DarkSword Exploit Chain via Fake iPhone Duo Preorder Pages: OTX Pulse Analysis — Safari Zero-Click Detection Pack
Threat Summary A newly surfaced OTX pulse documents an active drive-by exploitation campaign weaponizing the hype around a purported "iPhone...
Fake VPN Chrome Extension Proxy Farm: OTX Pulse Analysis — Enterprise Browser Traffic Interception Detection Pack
Threat Summary AlienVault OTX flags a coordinated cluster of 31 Russian-language Chrome extensions impersonating VPN access for RuTracker, Y...
The Stealer Factory: Python-Based MaaS Infostealer Builder — OTX Pulse Analysis with Enterprise Detection Pack
Threat Summary AlienVault OTX pulse analysis dated 2026-09-28 exposes an active Malware-as-a-Service (MaaS) infostealer builder documented b...
Kothamine RAT, Python MaaS Stealer Factory & ShinyHunters/UNC6240 PeopleSoft Exploitation: OTX Pulse Analysis — Enterprise Detection Pack
Kothamine RAT, Python MaaS Stealer Factory & ShinyHunters/UNC6240 PeopleSoft Exploitation Three concurrent OTX pulses published on 2026-09-2...
Lunex Stealer BYOVD Chain, Operation Master AdaptixC2 Pipeline & PureRAT Japan Campaign: OTX Pulse Analysis — Enterprise Infostealer Detection Pack
Threat Summary This week's OTX pulse cluster paints a coherent picture of a maturing credential-theft economy: five distinct operations, all...
APT-C-36 (Blind Eagle) GitHub Loader Campaign: AsyncRAT, DcRat, Remcos & XWorm Deployment Pipeline — OTX Detection Pack
Threat Summary Live OTX pulse data from AlienVault and LevelBlue SpiderLabs exposes the operational infrastructure of APT-C-36 (Blind Eagle)...