Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Fake OpenAI, SpaceX, and Anthropic Event Lures Fuel AiTM Phishing Campaigns Targeting Microsoft and Google Accounts — Detection and Hardening Guide
Introduction A coordinated social engineering campaign is using fraudulent event invitations impersonating OpenAI, SpaceX, and Anthropic to ...
ASOS Breach: How a Single Compromised SaaS Identity Becomes a Network Intrusion — Detection and Hardening Guide
Introduction The breach at British online retailer ASOS is the latest proof point for a pattern we've been tracking across IR engagements fo...
Browser-Based Attacks in 2026: Detection and Defense Guide for the Six Techniques Breaching Enterprise Perimeters
The Browser Is the New Perimeter — and Attackers Know It If your incident response statistics from the last 18 months look anything like our...
N0va Phishkit AiTM Campaigns Target US and EU Enterprises: Detection and Identity Hardening Guide
Introduction A new phishing kit tracked as N0va is actively targeting organizations across North America and Europe, and it represents the l...
KREMLIN Banking Malware (REF9334): Detecting and Removing Malicious Chrome and Edge Extensions Stealing Session Tokens
Introduction Elastic Security Labs has disclosed a previously undocumented Brazilian banking malware operation, tracked as REF9334, that del...
Infostealer Logs Expose Replayable AI Session Tokens: Detecting and Remediating Stolen Google, Anthropic, and LLM API Credentials
Introduction A growing volume of infostealer logs circulating on criminal marketplaces contains something defenders haven't traditionally pr...
Knight Office M365 AiTM Kit + Tampered Exodus Modular RAT: OTX Pulse Analysis — Session Token Theft and Credential Access Detection Pack
Knight Office M365 AiTM Kit + Tampered Exodus Modular RAT: OTX Pulse Analysis — Session Token Theft and Credential Access Detection Pack Exc...
Infostealers Targeting Claude Accounts: Session Token Theft Detection and Response Guide
Infostealers Are Harvesting Claude Sessions — Your AI Accounts Are Now Part of the Attack Surface A threat actor has been caught using multi...
The MFA Identity Trap: How Attackers Pass Authentication and What Defenders Must Detect Instead
When "Authenticated" Doesn't Mean "Trusted" A hard truth is circulating through the security community, crystallized in a recent SecurityWee...