Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Revolut Data Breach via Fake Government Data Request: Defending Against Emergency Data Request (EDR) Fraud
Introduction Revolut, one of the world's largest fintech platforms, has disclosed a data breach with an uncomfortable root cause: no malware...
Hawley Probe of OpenAI Over Hugging Face Breach: Defending Against AI Supply Chain and Token Exposure Risk
Congressional Scrutiny Meets a Real Defensive Problem Senator Josh Hawley (R-MO) has opened an inquiry into OpenAI following the Hugging Fac...
ShinyHunters Claims Florida DMV 'DAVID' Database Breach: Detection and Response Guide for Government Data Custodians
What Happened The ShinyHunters extortion gang has publicly claimed it breached DAVID — the Driver and Vehicle Information Database operated ...
OneTouchPoint Data Breach Settlement: Ransomware Defense Lessons for Healthcare Third-Party Vendors
Introduction OneTouchPoint Corp., a Wisconsin-based mailing and printing vendor serving healthcare organizations, has agreed to a multi-mill...
Mathspace Breach via Metabase: How Attackers Looted 1M+ Records Through an Exposed BI Platform — Detection and Hardening Guide
Introduction Online mathematics learning platform Mathspace disclosed over the weekend that attackers gained access to its Metabase internal...
IDScan Breach and Class Action Fallout: Defending Driver's License PII Stores Against Bulk Exfiltration
The Breach Is Over. The Litigation — and the Defensive Lesson — Is Just Beginning. Multiple class action lawsuits have now been filed agains...
Manchester Airports Group Breach: 8.8M Records Leaked via Third-Party Database — Detection and Third-Party Risk Remediation Guide
Introduction Manchester Airports Group (MAG) — operator of Manchester, London Stansted, and East Midlands airports — has confirmed a data br...
IDScan Breach: 153 Million Driver's Licenses Allegedly Stolen — Third-Party PII Exposure Response Guide
What Happened Multiple class-action lawsuits have been filed against IDScan, an identity verification company whose technology is embedded i...
Hasbro Data Breach: Employee PII Exposed in Cyberattack — Detection and Response Guide for Defenders
Introduction Hasbro — the toy and game giant behind brands like Monopoly, Magic: The Gathering, and Dungeons & Dragons — has disclosed a dat...