Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Ahold Delhaize October 2025 Cyberattack: Defensive Lessons from a €250M Retail Ransomware Incident
Ahold Delhaize October 2025 Cyberattack: Defensive Lessons from a €250M Retail Ransomware Incident In October 2025, grocery giant Ahold Delh...
M365 AiTM Token Replay Campaign: 79 Organizations Compromised — Enterprise Detection Pack
Threat Summary An unidentified threat actor conducted a ten-week campaign between July and September 2026 targeting Microsoft 365 tenants. T...
INC Ransomware Double-Extortion Timeline + M365 AiTM Token Replay: OTX Pulse Detection Pack
Threat Summary Two fresh pulses from AlienVault OTX paint a picture of the modern intrusion economy operating exactly as designed: access is...
Social Engineering AI Agents: The New BEC of 2026 — Detection and Defense Guide
The New Social Engineering Target Doesn't Have a Pulse For two decades, business email compromise worked because humans are persuadable. A w...
Saber Healthcare and Buchalter Data Breaches: HIPAA Detection, Containment, and Third-Party Risk Hardening Guide
Introduction Two new breach disclosures — one from Saber Healthcare, an Ohio-based skilled nursing and senior care operator, and one from Bu...
Former US Air Force Members Sentenced in Multi-Year BEC Campaign: Detection and Hardening Guide for Defenders
Two former members of the United States Air Force have been sentenced to a combined 189 months in federal prison for their roles in a multi-...
Astrana Health Social Engineering Breach: Detection and Hardening Guide for Healthcare Defenders
When a publicly traded healthcare company files an 8-K with the SEC over a social engineering incident, the rules of the game have changed. ...
Zimbra BEC Research: 50+ Vulnerabilities Let Attackers Rewrite Mailboxes — Detection and Hardening Guide
Business Email Compromise has always been a patient crime. The classic playbook — breach a mailbox, sit quietly, map the approval chain, the...
Revolut KYC Data Breach via Fraudulent Government Email: How to Defend Against Weaponized Legal Process Requests
Introduction On September 12, 2026, Revolut confirmed that it disclosed sensitive customer data — KYC identity documents, verification selfi...