Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
SkyW4lker Device-Code Phishing Kit + Poseidon RAT AI Harness Takeover: OTX Pulse Analysis — Enterprise Detection Pack
SkyW4lker Device-Code Phishing Kit + Poseidon RAT AI Harness Takeover: OTX Pulse Analysis — Enterprise Detection Pack Threat Summary Three c...
Microsoft 365 Token-Replay Attacks: Defending Against AitM Session Hijacking and Credential Theft
Introduction In early October 2026, security researchers at Huntress disclosed a widespread campaign targeting Microsoft 365 environments. B...
M365 AiTM Token Replay Campaign: 79 Organizations Compromised — Enterprise Detection Pack
Threat Summary An unidentified threat actor conducted a ten-week campaign between July and September 2026 targeting Microsoft 365 tenants. T...
Token-Spraying Attacks on Microsoft 365: Detecting and Defeating Session-Token BEC Campaigns
The Threat: Stolen Session Tokens, Sprayed at Scale Security researchers have identified a widespread campaign in which threat actors are at...
Storm-0940 ConnectWise Supply Chain Compromise: Detecting and Remediating ARTEX-Driven Microsoft 365 Credential Abuse
Storm-0940 Weaponizes Agentic AI Against the ConnectWise Supply Chain Microsoft's Threat Intelligence team has disclosed a large-scale natio...
ConnectWise Supply-Chain Attack: Defending Microsoft 365 Tenants Against Compromised API Secret Abuse
Introduction A supply-chain attack against ConnectWise — one of the most widely deployed MSP/TSP platforms in the managed services ecosystem...
Wazza Device Code Phishing Kit + GCP LLMjacking Campaign: OTX Pulse Analysis — Microsoft 365 & Cloud Credential Theft Detection Pack
Wazza Device Code Phishing Kit + GCP LLMjacking Campaign: OTX Pulse Analysis Threat Summary Two converging credential-theft campaigns surfac...
ConnectWise Cloud Backup Suspended After M365 Tenant Compromise — Hunting Malicious OAuth App Identities in Your Tenant
ConnectWise Suspends Cloud Backup After Application Identity Compromise ConnectWise disclosed on Saturday that unknown threat actors gained ...
ConnectWise Cloud Backup Supply-Chain Attack: Detecting and Remediating Compromised Microsoft 365 Tenants
ConnectWise Cloud Backup Supply-Chain Attack: What Happened and What You Must Do Now ConnectWise has shut down customer access to its Cloud ...