Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Shai-Hulud ChainDrop npm Worm + AWS Bedrock Token-Jacking: OTX Pulse Analysis — Credential Theft Detection Pack
Shai-Hulud ChainDrop npm Worm + AWS Bedrock Token-Jacking: OTX Pulse Analysis Two fresh OTX pulses paint a converging picture: credentials a...
ECLIPSE Ransomware Gang: 5 New Leak-Site Listings Across Manufacturing, Professional Services & Transportation — Campaign Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-09 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
Integrity Technology Group Email Theft Campaign: Detection and Hardening Guide for Defenders
Introduction On October 8, 2026, the FBI — alongside partner agencies from six other countries — publicly attributed a sustained email theft...
USN-8904-1: Multi-Subsystem Linux Kernel Vulnerabilities on Ubuntu Azure Images — Patching, Detection, and Hardening Guide
USN-8904-1: Multi-Subsystem Linux Kernel Vulnerabilities on Ubuntu Azure Images Introduction Canonical has published USN-8904-1, a security ...
USN-8887-2: Ubuntu Linux Kernel (AWS) Security Update — Patch, Detect, and Harden Your Cloud Fleet
Introduction Canonical has released USN-8887-2, a kernel security update for the Ubuntu linux-aws kernel flavor — the kernel build shipping ...
Anthropic's Critical Infrastructure Defense Program: What Claude-Powered Security Means for Defenders and OSS Maintainers
Introduction Anthropic has announced a critical infrastructure defense program built around a long-term commitment to two of the most unders...
CrowdStrike + Anthropic Critical Infrastructure Defense Program: What SOC Leaders Need to Know and Do Now
CrowdStrike and Anthropic Bring Frontier AI to Critical Infrastructure Defense CrowdStrike has announced a strategic program with Anthropic ...
Forensic Reconstruction of AI Coding Agents: Detection, Artifact Locations, and IR Playbook for Claude Code, Codex, Gemini CLI, and OpenCode
Introduction A quiet shift has occurred in enterprise endpoints over the last 18 months: developers and engineers are running autonomous and...
SonicWall SMA1000 Pre-Auth SSRF (CVSS 10.0): Detection and Remediation Guide for Defenders
Introduction SonicWall has shipped hotfixes for four vulnerabilities in its SMA1000 series secure mobile access appliances — the SSL VPN gat...