Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
NightEagle (APT-Q-95), Hacking Cat, and Toy Ghouls Targeting Enterprises With Backdoors, Ransomware, and Wipers — Detection and Hardening Guide
Kaspersky has disclosed three distinct threat activity clusters — NightEagle (also tracked as APT-Q-95), Hacking Cat, and Toy Ghouls — activ...
CVE-2026-92209: NoMachine Redis Improper Authentication Local Privilege Escalation — Detection and Remediation Guide
CVE-2026-92209: A Local Privilege Escalation Hiding in Your Remote Access Stack The Zero Day Initiative has published ZDI-26-711, disclosing...
CVE-2026-92204: Airbyte OneDrive Connector SSRF (ZDI-26-704) — Egress Lockdown and Detection Guide
What happened The Zero Day Initiative published ZDI-26-704, an unpatched vulnerability in the Airbyte OneDrive connector identified as CVE-2...
CVE-2026-92207: MindsDB OpenBBTable Code Injection — Contain, Detect, and Hunt Until Patched
What defenders need to know now Zero Day Initiative advisory ZDI-26-707 describes CVE-2026-92207, a code-injection vulnerability in MindsDB'...
ZDI-26-708: Unpatched Microsoft Windows HTTP Proxy Local Privilege Escalation — Detection and Hardening Guide
Introduction The Zero Day Initiative has published ZDI-26-708, an advisory covering an unpatched privilege escalation vulnerability in the M...
Microsoft Emergency Out-of-Band Patch for RDS Issues: Patch Verification and Hardening Guide
Introduction Microsoft has released an emergency out-of-band (OOB) update to address multiple issues introduced by this month's Patch Tuesda...
CVE-2026-65381: Critical macOS Sandbox Escape (CVSS 10) — Detection and Remediation Guide
CVE-2026-65381: A CVSS 10 Sandbox Escape in macOS — What Defenders Need to Know Apple has patched a maximum-severity vulnerability in macOS ...
CVE-2026-87886: Acronis Backup cPanel & Plesk Privilege Escalation Added to CISA KEV — Detection and Remediation Guide
CVE-2026-87886: Acronis Backup Plugin Privilege Escalation — What Defenders Need to Know Right Now On September 16, 2026, CISA added CVE-202...
CVE-2026-76460: Cisco ISE Privileged API Exploitation in the Wild — Detection and Remediation Guide
CVE-2026-76460: Cisco ISE Under Active Attack — What Defenders Need to Do Now CISA added CVE-2026-76460 to the Known Exploited Vulnerabiliti...