{"id":61692,"date":"2026-11-02T22:55:17","date_gmt":"2026-11-02T22:55:17","guid":{"rendered":"https:\/\/www.theregister.com\/a\/5307086"},"modified":"2026-11-02T22:55:17","modified_gmt":"2026-11-02T22:55:17","slug":"max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/","title":{"rendered":"Max-severity bug in widely used OT programming tool exploited to deliver Linux malware"},"content":{"rendered":"
<\/div>\n
<\/p>\n

security <\/p>\n

<\/a> <\/p>\n

Your industrial IoT gateway isn’t exposed to the internet, right? RIGHT?! <\/p>\n<\/p><\/div>\n

<\/p>\n

Unknown criminals are exploiting a maximum-severity vulnerability in Node-RED, a flow-based programming tool that is widely used in critical infrastructure, to deploy a flow that downloads and runs a Linux bot.<\/p>\n

Node-RED is commonly used for workflow automation in industrial control systems (ICS) and operational technology (OT) environments. It\u2019s built on top of Node.js and is used in commercial products including Siemens SIMATIC IoT2050<\/a>. In August, Siemens assigned the vulnerability identifier \u2013 CVE-2026-58115<\/a> \u2013 to describe the bug and explain its perfect 10-out-of-10 CVSS rating.<\/p>\n

Affected Siemens devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that can execute system commands on the device. This means unauthenticated remote attackers can create malicious flows, which is what VulnCheck researchers began documenting last Friday.<\/p>\n

\u201cOn October 30, 2026, one of our canaries caught an attacker exploiting CVE-2026-58115,\u201d VulnCheck researcher Patrick Garrity warned<\/a> in a Monday advisory, adding that two Node-RED built-in nodes make this vulnerability \u201ctrivial to weaponize.\u201d<\/p>\n

One is an inject node, which fires a message either on a schedule or once at startup. The second, an exec node, can run shell commands. \u201cWire one to the other and the flow executes a command as soon as it is deployed, with no further interaction,\u201d Garrity said.<\/p>\n

Plus, these exploits come as criminals increasingly look to target internet-exposed OT <\/a> and ICS devices<\/a>, allowing their cyberattacks<\/a> to impact the physical world and produce real-life harm. Case in point: the ongoing refrigeration controller hacks across Europe<\/a> and the attacks on wa<\/a>ter systems<\/a> across at least 12 US states<\/a> over the summer.<\/p>\n

The activity observed by VulnCheck came from a single IP address, 4.201.105[.]116, which sits in Microsoft\u2019s AS8075 network and geolocates to Brazil. \u201cIt didn’t just scan us. It sent the complete exploit, flow and dropper, in a single POST \/flows,\u201d Garrity wrote. <\/p>\n

While there\u2019s a lot that the researchers don\u2019t yet know about the attacks – they didn\u2019t retrieve a binary or staged scripts to analyze – the filename, bot-linux-amd64, indicates that the malware targets Linux running on AMD64 processors. It also suggests the malware operator may have other builds. \u201cWe did not fetch the binary, so we can’t say what it does once running,\u201d Garrity noted.<\/p>\n

Between October 30 and November 1, the researchers saw this IP address target the same Node-RED vulnerability 16 times, and log 125 hits against eight different CVEs across their wider canary network. Among the targets of the attack were a seven-year-old Apache Solr flaw tracked as CVE-2019-17558 \u2013 affecting Camunda, Gitea, MLflow, Traefik, and Joomla, alongside Node-RED. All this suggests \u201copportunistic mass scanning rather than a targeted attack,\u201d according to the researcher.<\/p>\n

One of these hits delivered a different payload pointing to a separate server (85.215.73[.]250), which VulnCheck now tracks – but doesn\u2019t have any telemetry other than the URL. \u201cBecause the download host is a different machine from the one that sent the exploit, the likely setup is a scan-and-infect arrangement: the hosts that find and exploit vulnerable instances pull the implant from a separate, dedicated server,\u201d Garrity wrote.<\/p>\n

The mix of old and new bugs across unrelated products indicates \u201copportunistic mass scanning rather than a targeted attack,\u201d Garrity wrote. <\/p>\n

\u201cIf you run Node-RED anywhere, including inside OT environments, check today whether it\u2019s reachable from outside your network, apply updates where available and implement detections to reduce the risk of exploitation,\u201d he added<\/a> in a LinkedIn post.<\/p>\n

While the bug has been added to VulnCheck\u2019s Known Exploited Vulnerabilities (KEV) catalog, it hasn\u2019t appeared (as of press time) in the US Cybersecurity and Infrastructure Security Agency\u2019s KEV.\u00ae<\/p>\n<\/p><\/div>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Your industrial IoT gateway isn’t exposed to the internet, right? RIGHT?! READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":61693,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[307],"class_list":["post-61692","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register","tag-security"],"yoast_head":"\nMax-severity bug in widely used OT programming tool exploited to deliver Linux malware 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Max-severity bug in widely used OT programming tool exploited to deliver Linux malware 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-02T22:55:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/image.theregister.com\/5307102.jpg?imageId=5307102&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Max-severity bug in widely used OT programming tool exploited to deliver Linux malware\",\"datePublished\":\"2026-11-02T22:55:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/\"},\"wordCount\":638,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware.jpg\",\"keywords\":[\"Security\"],\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/\",\"name\":\"Max-severity bug in widely used OT programming tool exploited to deliver Linux malware 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware.jpg\",\"datePublished\":\"2026-11-02T22:55:17+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware.jpg\",\"width\":100,\"height\":56},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Max-severity bug in widely used OT programming tool exploited to deliver Linux malware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Max-severity bug in widely used OT programming tool exploited to deliver Linux malware 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/","og_locale":"en_US","og_type":"article","og_title":"Max-severity bug in widely used OT programming tool exploited to deliver Linux malware 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2026-11-02T22:55:17+00:00","og_image":[{"url":"https:\/\/image.theregister.com\/5307102.jpg?imageId=5307102&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Max-severity bug in widely used OT programming tool exploited to deliver Linux malware","datePublished":"2026-11-02T22:55:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/"},"wordCount":638,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/11\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware.jpg","keywords":["Security"],"articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/","url":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/","name":"Max-severity bug in widely used OT programming tool exploited to deliver Linux malware 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/11\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware.jpg","datePublished":"2026-11-02T22:55:17+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/11\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/11\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware.jpg","width":100,"height":56},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.threatshub.org\/blog\/tag\/security\/"},{"@type":"ListItem","position":3,"name":"Max-severity bug in widely used OT programming tool exploited to deliver Linux malware"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61692","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=61692"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61692\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/61693"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=61692"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=61692"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=61692"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}