Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
GoBalance Flaw Enables .onion Address Hijacking: Detection, Key Rotation, and Remediation Guide
Introduction On October 8, Searchlight Cyber disclosed a serious cryptographic flaw in GoBalance, a load-balancing tool widely used by dark-...
THEGENTLEMEN Ransomware Gang: 33 New Leak-Site Listings — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-10 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
AnyDesk Linux Pre-Auth Root RCE Exploit Published — Detection and Remediation Guide (Version 8.0.3)
AnyDesk Linux Pre-Auth Root RCE: The Patch You Didn't Know You Needed Security researchers have published a fully working exploit for a pre-...
ARCUSMEDIA Ransomware Gang: 3 New Leak-Site Listings — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-09 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
P7 DarkSword iOS Exploit Kit: Detecting Keychain and Crypto Wallet Theft on Managed Devices
Introduction Mobile security firm iVerify has disclosed a previously unseen variant of the DarkSword iOS exploit kit — designated P7 DarkSwo...
BraZetsu Access Broker Infrastructure Exposed: Hunting Nuitka-Compiled Python Malware and Persistent C2 Patterns
Introduction The most valuable lesson from Hunt.io's recent tracking of the BraZetsu access broker isn't a hash, an IP, or a domain — it's t...
UAC-0099 ASHVEIN RAT: Detecting HTML-Weaponized C2 and .NET Infostealer Activity Against Government Targets
A New RAT in an Active Espionage Campaign Security researchers at TrendAI have attributed a previously undocumented .NET infostealer and rem...
$10M Reward for HAFNIUM Operator Zhang Yu: Defending Microsoft Exchange Against Silk Typhoon Tradecraft — Detection and Hardening Guide
Introduction The U.S. State Department's Rewards for Justice program is offering up to $10 million for information leading to the identifica...
ccTLD Registry Breach: Hackers Hijack Google Domains in Ghana, American Samoa, and Sierra Leone — DNS and Certificate Defense Guide
When attackers compromise the registry operator for an entire country-code top-level domain, every organization registered under that TLD in...