Threat Landscape Briefing – September 2026

In this month’s briefing we explore:

• Evooo1Bot Expands Beyond Traditional Mirai Threats – Carlos Rivera (01:45)
  • FortiGuard Labs has identified a previously undocumented Linux botnet family named Evooo1Bot.
  • Discover how Info-Tech can help you: Assess and Manage Security Risks.
• Borrowed Trust: Phishing with NPM Package Mirrors – Bob Wilson (12:17)
  • Researchers with OX Security recently reported on a new phishing technique that abuses the npm software registry.
  • Learn how Info-Tech’s research can help you: Defend Against Defects and Technical Debt in Your AI-Generated Code.
• City-Forum Campaign Targeted Salesforce and ServiceNow Guest Portals – Ahmad Jowhar (23:39)
  • Security researchers identified an ongoing data theft campaign, dubbed “City-Forum,” that targeted Salesforce Experience Cloud sites and ServiceNow Service Portals across organizations worldwide.
  • Explore Info-Tech’s guidance: Develop a Comprehensive IAM Improvement Strategy.