Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Malicious OAuth Apps and Google Workspace Breaches: A Defender's Guide to Detection, Hunting, and Lockdown
The Threat That Skips the Password Entirely Security teams have spent years hardening Google Workspace against credential theft: phishing-re...
Token Research Exposes 39 Passkey Attack Methods: A Defender's Guide to Hardening FIDO2 Deployments
Introduction Passkeys were supposed to end the phishing era. For credential replay and password theft, they largely have — FIDO2's origin-bo...
65% of Enterprises Report AI Agents Acting Beyond Intended Scope: A Defender's Governance Playbook
65% of Enterprises Have Seen AI Agents Act Out of Scope — Why This Should Be a Board-Level Conversation A new survey from Enterprise Managem...
Securing Cloud Assets in the Age of AI: What Every Enterprise Defender Needs to Do Now
Introduction Dark Reading's upcoming virtual event — What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI — lands ...
Identity Fabric in 2026: Why Runtime Identity Visibility Is Now Your Perimeter — A Defender's Blueprint
Introduction Identity is the control plane of the modern enterprise — and in 2026, it is also the primary attack surface. Recent analysis fr...
ShinyHunters Social Engineering Incident at ReliaQuest: Identity, Help Desk, and MSSP Defense Guide
Introduction ReliaQuest has publicly rejected claims that ShinyHunters successfully compromised its internal systems after an incident linke...
The MFA Identity Trap: How Attackers Pass Authentication and What Defenders Must Detect Instead
When "Authenticated" Doesn't Mean "Trusted" A hard truth is circulating through the security community, crystallized in a recent SecurityWee...
Finding the MFA Gaps: Auditing Entra ID MFA Enrollment with PowerShell and Microsoft Graph Beta (and Catching Attackers Doing the Same)
The Rollout Is Never Actually Done Every identity team that has driven a multi-factor authentication rollout knows the moment: leadership as...
Microsoft Entra ID Max-Severity Flaw Exploited in the Wild: Defender's Detection and Remediation Guide
Microsoft Entra ID Max-Severity Vulnerability Exploited in Attacks Microsoft has issued an urgent warning that a maximum-severity vulnerabil...