Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CISA AA26-281a: Chinese State-Linked Actors Blending Automated Scanning and Hands-On Intrusion to Hit Exchange and Exfiltrate Email — Detection and Defense Guide
CISA AA26-281a: Chinese State-Linked Actors Blending Automated Scanning and Hands-On Intrusion to Hit Exchange and Exfiltrate Email On Octob...
CVE-2023-22894: Strapi Exploitation Confirmed by CISA KEV — Detection and Remediation Guide for 2026
Introduction On October 8, 2026, CISA added CVE-2023-22894 — a cleartext storage of sensitive information vulnerability in the Strapi headle...
CISA KEV Alert: Active Exploitation of Apache Struts Dynamic Method Invocation Command Injection (CVE-2016-3081) — Detection and Remediation Guide
Introduction On October 8, 2026, CISA added CVE-2016-3081 — a command injection vulnerability in Apache Struts 2 — to the Known Exploited Vu...
ISC BIND TKEY DoS Re-Exploited in 2026: KEV Detection and Remediation Guide
What happened and why it matters now On 2026-10-08, CISA added CVE-2015-5477, an ISC BIND data-processing error in the handling of TKEY DNS ...
Redis Rogue-Replication Miner, Hagaseca Android RAT Loader, DarkSword/Coruna iOS Exploit Platform: OTX Detection Pack
Redis Rogue-Replication Miner, Hagaseca Android RAT Loader, DarkSword/Coruna iOS Exploit Platform: OTX Detection Pack Threat Summary These t...
'Raabby WaIIet' Malicious Firefox Extension Campaign: Cryptocurrency Seed Phrase Theft via Cloudflare Workers C2 — OTX Detection Pack
Threat Summary A coordinated supply-chain-style campaign has been identified in the Mozilla Firefox Add-ons ecosystem: 16 malicious browser ...
FortiBleed FortiGate Credential Harvesting + Shai-Hulud npm Worm & AWS Bedrock Key-Jacking: OTX Detection Pack
Threat Summary Four concurrent OTX pulses published on 2026-10-07/08 reveal a maturing, multi-front credential-theft ecosystem in which stol...
QILIN Ransomware Gang: 14 New Leak-Site Claims Posted — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-08 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
Cisco Critical NX-OS Flaws Allow Nexus Switch Takeover: Patching and Detection Guidance for SOC Teams
Cisco has disclosed critical-severity vulnerabilities in NX-OS, the operating system running its Nexus data center switch line, that can all...