Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Warlock Ransomware Still Exploiting ToolShell SharePoint Flaws — Detection and Remediation Guide for Unpatched On-Prem Servers
Introduction More than a year after the ToolShell SharePoint zero-day chain dominated headlines in mid-2025, the Warlock ransomware operatio...
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack Threat Summary Two li...
Kimsuky XenoRAT, Longlegs Warlock Ransomware & Municipal Webshell Campaigns: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three concurrent threat streams dominate this OTX pull, and together they sketch a familiar but accelerating pattern: state-n...
CVE-2026-87902: WordPress get_page_template() Exploited Within Hours — Detection and Remediation Guide
Introduction Within hours of public disclosure, threat actors began actively exploiting CVE-2026-87902, a critical vulnerability in WordPres...
China-Linked APT Groups Exploit Three-Zero-Day Chain at Scale: Detection and Hardening Guide for Edge and Web-Facing Systems
Introduction Proofpoint has reported that multiple China-aligned espionage threat groups are simultaneously exploiting a chained sequence of...
JFrog Artifactory Chained Exploit Grants Admin Access: Detection, Hunting, and Remediation for Self-Hosted Servers
Chained JFrog Artifactory Flaws Hand Attackers the Keys to Your Build Pipeline Between August 15 and September 8, researchers at Wiz observe...
Suspected Chinese-Speaking Operator Breaches Philippine Nuclear and Naval Targets via Exposed ownCloud and WordPress — Detection and Hardening Guide
Introduction Security researchers at Hunt.io uncovered an intrusion campaign in which a suspected Chinese-speaking operator compromised a Ph...
Critical Avada WordPress Theme Flaw Enables Unauthenticated Zero-Click RCE — Detection, Hunting, and Remediation Guide
Introduction A critical vulnerability chain in Avada, one of the most widely deployed commercial WordPress themes (ThemeFusion's flagship pr...
Microsoft SharePoint RCE Chain Under Active Attack: Detection and Remediation Guide for On-Premises Servers
Introduction Threat intelligence firm Defused has confirmed that attackers are actively targeting a chain of two Microsoft SharePoint vulner...