Our insights

Security insights that Cut Through the Noise. 

Timely breakdowns of breaches, vulnerabilities, and policy shifts, alongside practical write-ups on risk and compliance - the same plain-language approach we bring to every client engagement.

Illustration representing LetsDefend Infosec's insights and write-ups
All posts Cybercrime Data Breaches Data Privacy Law Enforcement Operations Malware Nation-State Threats Phishing Policy & Compliance Threat Actors Threat Intelligence Vulnerabilities
Latest
Vulnerabilities 28 Sep 2026 · 5 min read

Citrix NetScaler ADC & Gateway Critical RCE Vulnerabilities Actively Exploited

Citrix disclosed two critical remote code execution flaws in NetScaler ADC and NetScaler Gateway that are being exploited in the wild. Patches have been released, but one vulnerability affects every deployment, including default configurations.

Read article
Vulnerabilities
2 Sep 2026 3 min read

Chrome and Firefox Release Critical Updates to Patch Dozens of Vulnerabilities

Google Chrome and Mozilla Firefox have issued updates that address multiple use‑after‑free, sandbox escape, and privilege escalation bugs. Applying the patches immediately reduces exposure to a range of high‑impact threats.

#Chrome #Firefox #Vulnerabilities
LetsDefend Infosec Read more
Vulnerabilities
1 Sep 2026 4 min read

Tectonic Lending Platform Exploited for $74 Million: Impact on the Cronos Blockchain

A price‑manipulation attack on Tectonic allowed an attacker to borrow $74 million, forcing a temporary halt on the Cronos blockchain. The incident highlights systemic risks in DeFi lending and the need for tighter oracle safeguards.

#DeFi #Lending Platforms #Blockchain Security
LetsDefend Infosec Read more
Threat Intelligence
1 Sep 2026 3 min read

Guildma (Astaroth) Malware Spread Through Brazilian Portuguese Phishing Email

On September 1, 2026, the SANS Internet Storm Center reported a Guildma (Astaroth) malware infection that arrived via a Brazilian Portuguese email. This brief analyzes the confirmed details, assesses the impact, and outlines immediate steps for organizations to reduce exposure.

#Malware #Phishing #Threat Intelligence
LetsDefend Infosec Read more
Data Breaches
1 Sep 2026 4 min read

Anthropic Claude Accounts Compromised via Infostealer Session Theft

A threat actor leveraged multiple infostealer tools to harvest session data, enabling unauthorized access to Anthropic Claude user accounts. While the actor’s identity and the number of victims remain unknown, the incident underscores the risk of session‑token theft against AI services.

#Anthropic #Claude #Infostealer
LetsDefend Infosec Read more
Policy & Compliance
24 Aug 2026 5 min read

Record 8‑Year Federal Sentence Highlights Growing Threat of ATM Jackpotting

Juan Manuel Gouveia‑Aguilera received an eight‑year federal prison term for an ATM jackpotting operation that cost victims millions. The case sets a precedent for how aggressively U.S. courts will treat financial‑crime cyber offenses.

#ATM Security #Fraud #Legal
LetsDefend Infosec Read more
Vulnerabilities
24 Aug 2026 6 min read

Android Car Systems Hijacked into Proxy Botnet

Hackers are deploying malware against Android-based automotive infotainment platforms, converting compromised vehicles into proxy nodes for a botnet. This briefing outlines the incident, technical underpinnings, affected assets, and actionable mitigations.

#Malware #Botnet #Automotive Security
LetsDefend Infosec Read more
Threat Intelligence
24 Aug 2026 4 min read

Round 111: Threat Landscape Across Windows, Linux, and macOS

Round 111, published on August 23, 2026, spotlights emerging activity from Akira ransomware, Evooo1Bot Linux botnet, StubMaker RubyGems infostealer, MacSync Stealer infrastructure, and the hybrid Manic malware.

#Malware #Ransomware #Linux Botnet
LetsDefend Infosec Read more
Policy & Compliance
23 Aug 2026 4 min read

TikTok Settles $400 Million DOJ Child Privacy Lawsuit

TikTok has agreed to pay $400 million to the U.S. Department of Justice, resolving a 2024 lawsuit alleging violations of child privacy laws. The settlement includes an immediate $300 million payment and a conditional $100 million payment.

#TikTok #Legal #Privacy
LetsDefend Infosec Read more
Vulnerabilities
23 Aug 2026 5 min read

ToxicPanda Android Malware Expands Capabilities and Threat Landscape

ToxicPanda's Android malware has upgraded its arsenal, now targeting 349 apps, supporting 167 remote commands, and leveraging VPN permissions to block Google Play. Learn what this means for Android security and how to protect your devices.

#Malware #Android #Threat Intelligence
LetsDefend Infosec Read more