Our insights

Security insights that Cut Through the Noise. 

Timely breakdowns of breaches, vulnerabilities, and policy shifts, alongside practical write-ups on risk and compliance - the same plain-language approach we bring to every client engagement.

Illustration representing LetsDefend Infosec's insights and write-ups
All posts Cybercrime Data Breaches Law Enforcement Operations Nation-State Threats Phishing Policy & Compliance Threat Intelligence Vulnerabilities
Latest
Law Enforcement Operations 10 Sep 2026 · 4 min read

DOJ Takes Down Xinbi Guarantee Scam Marketplace and Freezes $52.8 Million

The U.S. Department of Justice announced a coordinated operation that seized Xinbi Guarantee’s Telegram channels, confiscated two crypto wallets, froze $52.8 million, and deployed a strike force to Madagascar to dismantle 13 scam compounds linked to Chinese organized crime.

Read article
Vulnerabilities
7 Sep 2026 3 min read

N-able Issues Emergency Hotfix for Actively Exploited RCE Flaw in N-central RMM

N-able released an emergency hotfix for a maximum‑severity remote code execution vulnerability in its N-central remote monitoring and management platform. The flaw is currently being actively exploited, prompting urgent patch deployment.

#Vulnerabilities #Remote Code Execution #RMM
LetsDefend Infosec Read more
Vulnerabilities
7 Sep 2026 5 min read

MikroTik Routers Hijacked via Unauthenticated SSH Access

Attackers are exploiting internet‑exposed SSH on MikroTik routers to obtain full administrative control without credentials. CERT Polska warned on September 5, and the activity has been observed since at least September 2.

#MikroTik #SSH #Exploitation
LetsDefend Infosec Read more
Phishing
7 Sep 2026 4 min read

ASCII Smuggling with Invisible Unicode Characters Fuels New Phishing Bypass

Threat actors are now embedding invisible Unicode characters in email bodies to hide malicious links, a technique known as ASCII smuggling. This method slips past conventional email security filters, demanding updated detection strategies.

#Phishing #Email Security #Threat Intelligence
LetsDefend Infosec Read more
Threat Intelligence
7 Sep 2026 4 min read

REVSTEALER Deploys Persistent Modules That Disable Defender and Launch Crypto Miner

Elastic Security Labs uncovered four new modules linked to the REVSTEALER Windows stealer. One module disables Windows Update and Microsoft Defender before starting a cryptocurrency miner, persisting after the original stealer removes itself.

#Threat Intelligence #Malware #Windows
LetsDefend Infosec Read more
Vulnerabilities
2 Sep 2026 4 min read

Unauthenticated RCE Chain in GeoNetwork Patched in Latest Releases

Two linked flaws in the open‑source GeoNetwork platform allowed unauthenticated remote code execution. Patches arrived in versions 4.4.12 and 4.2.17 on July 8 2026, mitigating the risk for government and agency geoportals.

#Vulnerabilities #Open Source #Geospatial
LetsDefend Infosec Read more
Cybercrime
2 Sep 2026 3 min read

Russian Hacker Extradited for Massive Excel Malware Campaign

A Russian national, Searzhudin Tamirlanovich Aktulaev, was extradited from Cyprus and charged by the U.S. Department of Justice for a 2016‑2017 operation that leveraged 255 fake freelance‑platform accounts to deliver malware‑laden Excel attachments to roughly 80,000 victims.

#Threat Intel #Malware #Cybercrime
LetsDefend Infosec Read more
Vulnerabilities
2 Sep 2026 3 min read

Chrome and Firefox Release Critical Updates to Patch Dozens of Vulnerabilities

Google Chrome and Mozilla Firefox have issued updates that address multiple use‑after‑free, sandbox escape, and privilege escalation bugs. Applying the patches immediately reduces exposure to a range of high‑impact threats.

#Chrome #Firefox #Vulnerabilities
LetsDefend Infosec Read more
Vulnerabilities
1 Sep 2026 4 min read

Tectonic Lending Platform Exploited for $74 Million: Impact on the Cronos Blockchain

A price‑manipulation attack on Tectonic allowed an attacker to borrow $74 million, forcing a temporary halt on the Cronos blockchain. The incident highlights systemic risks in DeFi lending and the need for tighter oracle safeguards.

#DeFi #Lending Platforms #Blockchain Security
LetsDefend Infosec Read more
Threat Intelligence
1 Sep 2026 3 min read

Guildma (Astaroth) Malware Spread Through Brazilian Portuguese Phishing Email

On September 1, 2026, the SANS Internet Storm Center reported a Guildma (Astaroth) malware infection that arrived via a Brazilian Portuguese email. This brief analyzes the confirmed details, assesses the impact, and outlines immediate steps for organizations to reduce exposure.

#Malware #Phishing #Threat Intelligence
LetsDefend Infosec Read more