Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
GRIMWEDGE Chrome 0-Day Chain, Vwork Work-Profile Evasion & PREY-0058 MFA-Bypass Extortion: OTX Pulse Analysis — Enterprise Detection Pack
GRIMWEDGE Chrome 0-Day Chain, Vwork Work-Profile Evasion & PREY-0058 MFA-Bypass Extortion Classification: TLP:WHITE | Pulse Date: 2026-09-10...
The MFA Identity Trap: How Attackers Pass Authentication and What Defenders Must Detect Instead
When "Authenticated" Doesn't Mean "Trusted" A hard truth is circulating through the security community, crystallized in a recent SecurityWee...
Passkey Attacks Can Expose Synced FIDO2 Keys and Bypass Phishing-Resistant MFA: Detection and Hardening Guide
Overview Security researchers are describing a new class of attacks against passkeys that undermine two assumptions many organizations made ...
Fake IT Help Desk Phishing Campaign Hits Blackstone, Bridgewater, KKR: Detecting and Defeating MFA Credential Theft
Fake IT Help Desks Are Stealing MFA Credentials from Wall Street's Biggest Firms A coordinated phishing campaign operating under the aliases...
Defending Against Device Code Phishing: The 2026 OAuth Bypass Threat
Defending Against Device Code Phishing: The 2026 OAuth Bypass Threat Device code phishing has emerged as the fastest-growing social engineer...
Real-Time Insurance Account Hijacking: Defending Against AiTM Social Engineering
Introduction The traditional model of credential harvesting—tricking a user into divulging credentials and storing them for future use—is ef...
Clover Health Social Engineering Incident: Defending Against Human-Centered Breaches
Clover Health Social Engineering Incident: Defending Against Human-Centered Breaches Introduction Clover Health Investments recently filed a...
Scattered Spider TfL Breach: Defending Against Social Engineering and MFA Bypass
Introduction The recent sentencing of two high-profile members of the Scattered Spider (aka 0ktapus) collective to five years and six months...
Identity Attacks Overtake Exploits: Defending Against the Rise of MFA Bypass Ransomware
Introduction The paradigm has shifted. For years, we fortified our perimeters against exploits and unpatched vulnerabilities. But according ...