Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ClearFake WebDAV Chain Delivers Amatera Stealer + Malicious Firefox Wallet Extensions: OTX Pulse Analysis — Enterprise Detection Pack
ClearFake WebDAV Chain Delivers Amatera Stealer + Malicious Firefox Wallet Extensions: OTX Pulse Analysis Threat Summary Two concurrent OTX ...
ClearFake, PhantomPolia & FortiBleed: EtherHiding Stealer Chains and 86K+ Compromised FortiGate Credentials — OTX Detection Pack
Threat Summary Five concurrent OTX pulses paint a single, coherent picture: credential theft at industrial scale, increasingly laundered thr...
INCRANSOM Ransomware Gang: 5 New Leak-Site Listings Across Education, Manufacturing & Transportation — Unverified Claims, Detection Rules & Hunting Queries
Classification: TLP:CLEAR | Publication Date: 2026-10-08 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
$10M Reward for HAFNIUM Operator Zhang Yu: Defending Microsoft Exchange Against Silk Typhoon Tradecraft — Detection and Hardening Guide
Introduction The U.S. State Department's Rewards for Justice program is offering up to $10 million for information leading to the identifica...
Oracle Health Breach Hits Nearly 20 Million Patients: Detection and Hardening Guide for Legacy Cerner Environments
Introduction The Oracle Health breach — the intrusion into legacy Cerner systems that surfaced in early 2025 — has metastasized into one of ...
Microsoft FORGE Lab's Frontier AI Vulnerability Research: 3 Defensive Lessons for Scaling Bug Hunting from Windows to the Linux Kernel
Introduction Microsoft Security's FORGE Lab has published findings from its frontier AI vulnerability research program, detailing how the te...
16 Malicious Firefox Extensions Impersonating Rabby and OKX Wallets: Detection and Removal Guide
Introduction Security researchers have identified a coordinated cluster of 16 malicious Mozilla Firefox extensions designed to steal cryptoc...
Fake ChatGPT, Gemini, and Claude Ad Portals Steal Credentials and MFA Codes: Detection and Defense Guide
Introduction Researchers have disclosed an active, human-operated social engineering platform that impersonates advertising and business pro...
Shai-Hulud Worm Compromises tensorlake npm SDK (v0.5.144) — Detection and Remediation Guide for Credential-Theft Supply Chain Attacks
A Weaponized npm Package Just Landed in Developer Toolchains — Again Security researchers at Socket have confirmed that version 0.5.144 of t...