Our insights

Security insights that Cut Through the Noise. 

Timely breakdowns of breaches, vulnerabilities, and policy shifts, alongside practical write-ups on risk and compliance - the same plain-language approach we bring to every client engagement.

Illustration representing LetsDefend Infosec's insights and write-ups
All posts Cybercrime Data Breaches Data Privacy Law Enforcement Operations Malware Nation-State Threats Phishing Policy & Compliance Threat Actors Threat Intelligence Vulnerabilities
Latest
Vulnerabilities 28 Sep 2026 · 5 min read

Citrix NetScaler ADC & Gateway Critical RCE Vulnerabilities Actively Exploited

Citrix disclosed two critical remote code execution flaws in NetScaler ADC and NetScaler Gateway that are being exploited in the wild. Patches have been released, but one vulnerability affects every deployment, including default configurations.

Read article
Nation-State Threats
17 Sep 2026 5 min read

Iranian State-Linked Actors Deploy CHOSEN BRICK Windows Malware Against Global Dissidents

Government alerts reveal that Iranian-linked hackers are fielding a Windows-based strain named CHOSEN BRICK to surveil dissidents, activists, and journalists worldwide. The brief examines the threat, its technical footprint, and steps organizations can take to defend against it.

#Malware #State-Sponsored Threats #Surveillance
LetsDefend Infosec Read more
Data Privacy
17 Sep 2026 4 min read

Anthropic Tests Claude Money: AI‑Powered Personal Finance Feature Under Review

Anthropic is piloting Claude Money, a new capability that lets users link bank accounts directly to the Claude AI. The feature aims to let the model “understand your money,” raising immediate questions about data handling, privacy, and potential misuse.

#AI #Finance #Privacy
LetsDefend Infosec Read more
Law Enforcement Operations
10 Sep 2026 4 min read

DOJ Takes Down Xinbi Guarantee Scam Marketplace and Freezes $52.8 Million

The U.S. Department of Justice announced a coordinated operation that seized Xinbi Guarantee’s Telegram channels, confiscated two crypto wallets, froze $52.8 million, and deployed a strike force to Madagascar to dismantle 13 scam compounds linked to Chinese organized crime.

#Law Enforcement #Cryptocurrency #Scam Operations
LetsDefend Infosec Read more
Nation-State Threats
10 Sep 2026 4 min read

China‑Aligned Threat Groups Actively Exploit Zero‑Day Chain Across Multiple Sectors

Multiple China‑aligned threat groups have rapidly weaponized a series of undisclosed zero‑day flaws, targeting a broad set of organizations. The campaign is ongoing and expected to expand, underscoring the need for heightened vigilance and rapid mitigation.

#Threat Intelligence #Zero-Day Vulnerabilities #China
LetsDefend Infosec Read more
Vulnerabilities
10 Sep 2026 4 min read

Mythos Vulnerability Firehose Reveals Critical Disclosure Lag

Project Glasswing’s analysis shows that only a small fraction of the Mythos vulnerabilities have been disclosed and an even smaller portion remediated, exposing a human bottleneck in the security pipeline.

#Vulnerabilities #Disclosure #Remediation
LetsDefend Infosec Read more
Data Breaches
10 Sep 2026 5 min read

AdaptHealth Data Breach Exposes 4.1 Million Records, Linked to ShinyHunters

AdaptHealth confirmed that a cyberattack discovered in July exposed the personal data of 4.1 million individuals. The breach has been attributed to the ShinyHunters threat group, raising concerns for the healthcare sector and its patients.

#Data Breach #Healthcare #Threat Actors
LetsDefend Infosec Read more
Vulnerabilities
10 Sep 2026 4 min read

Cisco Secure FMC Authentication Bypass (CVE‑2026‑20079) Actively Exploited

Cisco has confirmed that CVE‑2026‑20079, a maximum‑severity authentication bypass in its Secure Firewall Management Center (FMC) software, is currently being leveraged in active attacks. The brief examines the technical nature of the flaw, the scope of impact, and immediate steps organizations should take.

#Cisco #Vulnerabilities #Authentication Bypass
LetsDefend Infosec Read more
Threat Intelligence
8 Sep 2026 5 min read

PEEP Toolkit Turns Chrome and Edge Into Post-Compromise Backdoors

Researchers have uncovered PEEP, a Chromium‑based post‑exploitation toolkit that masquerades as a bookmarks extension. It injects itself into Chrome and Edge profiles, bypasses store checks, and enables host command execution.

#Vulnerabilities #Browser Security #Threat Intelligence
LetsDefend Infosec Read more
Threat Intelligence
8 Sep 2026 4 min read

BigBear 2.0 Phishing‑as‑a‑Service Bypasses MFA at 258 Organizations

A phishing‑as‑a‑service platform dubbed BigBear 2.0 has actively bypassed multi‑factor authentication, stealing over 5,000 Microsoft 365 credentials across 258 victims. This brief outlines the operation, technical approach, impact, and immediate mitigations.

#Phishing-as-a-Service #MFA Bypass #Microsoft 365
LetsDefend Infosec Read more