Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ConnectWise Cloud Backup Suspended After M365 Tenant Compromise — Hunting Malicious OAuth App Identities in Your Tenant
ConnectWise Suspends Cloud Backup After Application Identity Compromise ConnectWise disclosed on Saturday that unknown threat actors gained ...
ConnectWise Cloud Backup Supply-Chain Attack: Detecting and Remediating Compromised Microsoft 365 Tenants
ConnectWise Cloud Backup Supply-Chain Attack: What Happened and What You Must Do Now ConnectWise has shut down customer access to its Cloud ...
ConnectWise Cloud Backup Credential Compromise: 173 M365 Tenants Breached — Detection and Remediation Guide
Introduction Security researchers are tracking an active campaign in which unknown threat actors have abused a compromised Microsoft 365 cre...
ShinyHunters Crackdown: Defending SaaS and Cloud Platforms Against Vishing-Driven Data Extortion Campaigns
The Net Tightens — But the Playbook Is Still in Circulation The FBI's continued pressure campaign against ShinyHunters has produced another ...
FBI Strikes Back at ShinyHunters: Defending SaaS and Cloud Data Against OAuth Abuse and Extortion Campaigns
Introduction Dark Reading's recent editorial roundup highlighted two stories that should be on every CISO's radar this week: law enforcement...
Shadow AI Agents: Finding and Governing the Third-Party AI Your SSO Can't See (2026 State of Agent Security)
The Identity Stack Only Governs What Authenticates Through It The 2026 State of Agent Security Report landed on a number every CISO and SOC ...
ShinyHunters Arrest After FBI Breach: Defending Against SaaS Data Theft and Extortion Campaigns
Introduction FBI Director Kash Patel announced Friday the arrest of another suspected member of the ShinyHunters extortion group, believed t...
ShinyHunters Arrest in Amsterdam: What Defenders Must Do Now to Stop SaaS Data Theft and Extortion
ShinyHunters Arrest in Amsterdam: What Defenders Must Do Now to Stop SaaS Data Theft and Extortion Dutch national police (Politie Landelijke...
Real-World Google Workspace Breaches: Defensive Lessons on Social Engineering and Malicious OAuth Apps
Introduction Tomorrow's webinar on real-world Google Workspace breaches, covered by BleepingComputer, arrives at a moment when identity-laye...