Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2024-21762 FortiGate SSL-VPN Exploitation + MeshCentral RMM Persistence: Thai Telecom Intrusion — OTX Detection Pack
CVE-2024-21762 FortiGate Exploitation + MeshCentral Persistence: Thai Telecom Intrusion Analysis Threat Summary An AlienVault OTX pulse publ...
3BB Intrusion: Attacker Abused MeshCentral RMM for Root Access and Subscriber Credential Theft — Detection and Response Guide
3BB Intrusion: Attacker Abused MeshCentral RMM for Root Access and Subscriber Credential Theft — Detection and Response Guide The Short Vers...
RMM Social Engineering Campaign Hits 46 Countries — US Is Top Target: Detection and Defense Guide
Introduction What researchers initially assessed as a Canada-focused phishing operation — built around Canada Revenue Agency (CRA) tax-form ...
Microsoft Teams Help-Desk Vishing + RMM Lateral Movement: OTX Pulse Detection Pack
Microsoft Teams Help-Desk Vishing + RMM Lateral Movement: OTX Pulse Detection Pack Threat Summary AlienVault OTX pulse activity modified 202...
ScreenConnect RMM Abuse + SockTz AI-Enabled Intrusions + Teams Help Desk Vishing: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three concurrent OTX pulses reveal a converging trend across crimeware operators: the weaponization of trusted software and l...
H1 2026 Malware & Vulnerability Trends: Defending Against Trusted Tool Abuse, AI-Driven Attacks, and Supply Chain Compromise
The Threat Landscape Has Shifted — And Your Detections Need to Shift With It Recorded Future's H1 2026 malicious software and vulnerability ...
TVRAT and DarkVNC Campaign Infected 80,000 Freelancers — Detection and Defense Guide for SOC Teams
The Indictment and Why It Matters to Every Enterprise SOC A federal grand jury in California has indicted a Russian national for orchestrati...
DPRK Job Fraud Expands to Healthcare and Sales: Insider Threat Detection and Hiring Controls for Defenders
The Insider Threat Is No Longer Confined to Your Engineering Org For the past several years, the security community has tracked the DPRK IT ...
RMM Phishing Campaign (Fake CRA T4 / SSA Lures): Living-Off-the-Land RMM Abuse — OTX Pulse Detection Pack
Threat Summary This OTX pulse (AlienVault, TLP:WHITE, modified 2026-08-26) documents a phishing operation that began as a Canada Revenue Age...