Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
PolinRider Campaign: Defending Against North Korean Supply Chain Attacks in npm, Go, and Chrome
Introduction The threat landscape for software development environments has deteriorated significantly with the emergence of the PolinRider ...
New Metasploit Modules: Peyara Remote Mouse RCE and SMB Session Upgrades
Introduction This week’s Metasploit Framework update introduces capabilities that significantly lower the barrier for post-exploitation late...
PamStealer macOS Malware: Detecting Fake Maccy Apps and PAM Attacks
Introduction Security operations teams must be on high alert for PamStealer, a newly identified macOS information stealer actively targeting...
NetNut Proxy Botnet Disruption: Defending Against Residential IP Abuse
Introduction This week, the Google Threat Intelligence Group (GTIG), in coordination with the FBI and Lumen, announced a significant blow to...
GPT-5.5-Cyber and the Collapse of the Fuzzing Barrier: Defending OSS Against AI-Driven Discovery
Introduction The "Patch the Planet" initiative—a collaboration between Trail of Bits and OpenAI—has dropped a field report that should send ...
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain Introduction Security Arsenal is tracking a...
BioShocking: Defending AI Agents Against Gamification-Based Prompt Injection
BioShocking: Defending AI Agents Against Gamification-Based Prompt Injection Introduction Security Arsenal is tracking a concerning developm...
QILIN Ransomware: 19 New Victims & Surge in Business Services Targeting — Detection Rules for CVE Exploitation
QILIN Ransomware Gang: 19 New Victims Posted — Sector Targeting Analysis & Detection Rules Intelligence Level: Urgent Source: Ransomware.liv...
RustDuck Botnet: Detection and Hunting for Rust-Based IoT DDoS Malware
RustDuck Botnet: Detection and Hunting for Rust-Based IoT DDoS Malware Introduction Since February 2026, security researchers at QiAnXin's X...