Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ShinyHunters Arrest in Amsterdam: Defending Your SaaS Estate Against OAuth Consent Phishing and Bulk Data Theft
What Happened Dutch police have confirmed that a 24-year-old Amsterdam man arrested earlier this month was detained as part of the ongoing i...
Placeholder Domains Weaponized Across 1,700 Repos: Supply-Chain Defense, Service Account Hardening, and Citrix Patch Guidance
Introduction This week's threat landscape is a case study in forgotten assumptions becoming live attack surface. The standout story: a domai...
Soldier-Turned-Extortionist Sentenced to 70 Months: Defending Tech and Telecom Firms Against Credential-Driven Data Extortion
A Uniform Didn't Stop Him — And Your Perimeter Won't Either A former U.S. Army soldier has been sentenced to 70 months in federal prison for...
Rydox Cybercrime Marketplace Admin Pleads Guilty: How to Hunt for Stolen Credential Abuse in Your Environment
Rydox Admin Pleads Guilty — Why Your SOC Should Care Ardit Kutleshi, a 28-year-old Kosovo national, pleaded guilty to building and operating...
x47.c Windows Botnet Weaponizes xAI Grok API for AI-Driven Persistence — Detection and Response Guide
Introduction SecurityWeek recently reported on a new Windows botnet tracked as x47.c that represents a meaningful evolution in how commodity...
Microsoft Deprecates Windows Deployment Services After Windows Server 2025 — WDS Attack Surface Audit and Migration Guide for Defenders
Introduction Microsoft has confirmed it will deprecate the Windows Deployment Services (WDS) server role, with Windows Server 2025 being the...
Bitget $351.6M Hot Wallet Theft: Defending Crypto Exchange Infrastructure Against Suspected DPRK Backend Compromise
Executive Summary On September 24, 2026, at 18:31 UTC, cryptocurrency exchange Bitget detected unauthorized transfers from a subset of its h...
THEGENTLEMEN Ransomware Gang: 4 New Leak-Site Claims — Sector Targeting Analysis & Detection Engineering
Classification: TLP:CLEAR | Publication Date: 2026-09-26 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
Anthropic Claude Opus 5.5 Shrugs Off AI Writing Tells — Why Your Phishing Detection Playbook Needs a Rethink
The Linguistic Canary Is Going Quiet New analysis of Anthropic's Claude Opus 5.5 shows the model shedding the stylistic fingerprints that ma...