Latest Insights
We Followed the Wallet: Tracking GlassWorm Through Nine C2 Rotations
TL;DR Introduction On April 24, 2026, a Solana wallet executed a transaction that cost less than a fraction of a cent. To anyone watching the blockchain as a whole, it was noise in millions of daily memos moving through the network. For our team, this was a signal we had been waiting for. The wallet…
Beyond Risky Sign-Ins: Behavioural Analysis for AiTM Attack Detection
Social engineering attacks are at an all-time high, amplified by the accessibility of phishing toolkits and open-source Artificial Intelligence (AI) offerings. This is reflected in the fact that 98% of cyberattacks leverage social engineering techniques to exploit the human element to achieve their end objectives.[1] What began as Business Email Compromise (BEC), campaigns that facilitated…
RCE in PIXERA TWO Media Server (CVE-2026-7703, CVE-2026-7704)
The PIXERA TWO Media Server is an Audio-Visual (AV) solution widely adopted to create large-scale, high-quality visual experiences in live events, stage productions, and creative projects. PIXERA servers are typically deployed in internal or isolated networks as part of professional AV setups, where performance and stability are critical. The following advisory presents two (2) vulnerabilities…