Our insights

Security insights that Cut Through the Noise. 

Timely breakdowns of breaches, vulnerabilities, and policy shifts, alongside practical write-ups on risk and compliance - the same plain-language approach we bring to every client engagement.

Illustration representing LetsDefend Infosec's insights and write-ups
All posts Cybercrime Data Breaches Law Enforcement Operations Nation-State Threats Phishing Policy & Compliance Threat Intelligence Vulnerabilities
Vulnerabilities
10 Sep 2026 4 min read

Mythos Vulnerability Firehose Reveals Critical Disclosure Lag

Project Glasswing’s analysis shows that only a small fraction of the Mythos vulnerabilities have been disclosed and an even smaller portion remediated, exposing a human bottleneck in the security pipeline.

#Vulnerabilities #Disclosure #Remediation
LetsDefend Infosec Read more
Vulnerabilities
10 Sep 2026 4 min read

Cisco Secure FMC Authentication Bypass (CVE‑2026‑20079) Actively Exploited

Cisco has confirmed that CVE‑2026‑20079, a maximum‑severity authentication bypass in its Secure Firewall Management Center (FMC) software, is currently being leveraged in active attacks. The brief examines the technical nature of the flaw, the scope of impact, and immediate steps organizations should take.

#Cisco #Vulnerabilities #Authentication Bypass
LetsDefend Infosec Read more
Vulnerabilities
7 Sep 2026 3 min read

N-able Issues Emergency Hotfix for Actively Exploited RCE Flaw in N-central RMM

N-able released an emergency hotfix for a maximum‑severity remote code execution vulnerability in its N-central remote monitoring and management platform. The flaw is currently being actively exploited, prompting urgent patch deployment.

#Vulnerabilities #Remote Code Execution #RMM
LetsDefend Infosec Read more
Vulnerabilities
7 Sep 2026 5 min read

MikroTik Routers Hijacked via Unauthenticated SSH Access

Attackers are exploiting internet‑exposed SSH on MikroTik routers to obtain full administrative control without credentials. CERT Polska warned on September 5, and the activity has been observed since at least September 2.

#MikroTik #SSH #Exploitation
LetsDefend Infosec Read more
Vulnerabilities
2 Sep 2026 4 min read

Unauthenticated RCE Chain in GeoNetwork Patched in Latest Releases

Two linked flaws in the open‑source GeoNetwork platform allowed unauthenticated remote code execution. Patches arrived in versions 4.4.12 and 4.2.17 on July 8 2026, mitigating the risk for government and agency geoportals.

#Vulnerabilities #Open Source #Geospatial
LetsDefend Infosec Read more
Vulnerabilities
2 Sep 2026 3 min read

Chrome and Firefox Release Critical Updates to Patch Dozens of Vulnerabilities

Google Chrome and Mozilla Firefox have issued updates that address multiple use‑after‑free, sandbox escape, and privilege escalation bugs. Applying the patches immediately reduces exposure to a range of high‑impact threats.

#Chrome #Firefox #Vulnerabilities
LetsDefend Infosec Read more
Vulnerabilities
1 Sep 2026 4 min read

Tectonic Lending Platform Exploited for $74 Million: Impact on the Cronos Blockchain

A price‑manipulation attack on Tectonic allowed an attacker to borrow $74 million, forcing a temporary halt on the Cronos blockchain. The incident highlights systemic risks in DeFi lending and the need for tighter oracle safeguards.

#DeFi #Lending Platforms #Blockchain Security
LetsDefend Infosec Read more
Vulnerabilities
24 Aug 2026 6 min read

Android Car Systems Hijacked into Proxy Botnet

Hackers are deploying malware against Android-based automotive infotainment platforms, converting compromised vehicles into proxy nodes for a botnet. This briefing outlines the incident, technical underpinnings, affected assets, and actionable mitigations.

#Malware #Botnet #Automotive Security
LetsDefend Infosec Read more
Vulnerabilities
23 Aug 2026 5 min read

ToxicPanda Android Malware Expands Capabilities and Threat Landscape

ToxicPanda's Android malware has upgraded its arsenal, now targeting 349 apps, supporting 167 remote commands, and leveraging VPN permissions to block Google Play. Learn what this means for Android security and how to protect your devices.

#Malware #Android #Threat Intelligence
LetsDefend Infosec Read more