Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Stolen AI Logins at 80,000+ Organizations: Detecting Infostealer Credential Theft, Shadow AI, and LLMjacking Before Attackers Monetize Your Accounts
Introduction A new analysis of infostealer malware logs has exposed something that should be on every CISO's radar in 2026: AI account crede...
Soldier-Turned-Extortionist Sentenced to 70 Months: Defending Tech and Telecom Firms Against Credential-Driven Data Extortion
A Uniform Didn't Stop Him — And Your Perimeter Won't Either A former U.S. Army soldier has been sentenced to 70 months in federal prison for...
Rydox Marketplace Admin Pleads Guilty: Detecting and Containing the Credential Theft Pipeline Feeding Cybercrime Markets
Introduction A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that trafficked in stolen personal...
CARBONATO Docker Botnet: Detecting and Defending Against the AI-Powered Credential Theft Operation Targeting Exposed Docker Daemons
The CARBONATO Operation: Why Your Docker Hosts Are the Target Security researchers at ThreatDown recently uncovered an operation that should...
Dark Caracal GoCaracal Framework + Russian Evilginx OAuth Phishing Clusters: OTX Pulse Analysis — Credential Theft Detection Pack
Dark Caracal Reloaded + Russian OAuth Phishing Clusters: Credential Theft Intelligence Brief Two pulses published to AlienVault OTX on 2026-...
RemotePanel + BoundSiphon: ClickFix-Delivered Dual-Payload Toolkit for Persistent Access & Browser Credential Theft — OTX Detection Pack
Threat Summary A single but high-signal OTX pulse published by AlienVault (TLP:WHITE) documents a previously undocumented dual-payload intru...
MacSync macOS Stealer + HookBot/ERMAC Android Banking Leak: OTX Pulse Analysis — Credential-Theft Detection Pack
MacSync macOS Stealer + HookBot/ERMAC Android Banking Leak: OTX Pulse Analysis — Credential-Theft Detection Pack Threat Summary Two OTX puls...
CARBONATO Docker Botnet + PavinLoader/Amatera Stealer: OTX Pulse Analysis — Exposed Daemon Exploitation & ClickFix Credential Theft Detection Pack
Executive Overview Two concurrent OTX pulses published 2026-09-24 expose a converging credential-theft ecosystem: CARBONATO, a Docker-centri...
CLOSEDQUORUM: AI-Voting Windows Malware Targets Credentials and Crypto Wallets — Detection and Defense Guide
Introduction On September 22, Cisco Talos disclosed a Windows malware family tracked as CLOSEDQUORUM that represents a genuine architectural...