Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Astrana Health Social Engineering Breach: Detection and Hardening Guide for Healthcare Defenders
When a publicly traded healthcare company files an 8-K with the SEC over a social engineering incident, the rules of the game have changed. ...
NeedyMantis Persistence Malware: Detection and Hunting Guide for Telecom, Healthcare, and Government Networks
Introduction Microsoft's threat intelligence team has published a technical analysis of NeedyMantis, a malicious software family deployed by...
DC Health Agency Data Exposure: 400,000 Medicaid Records Compromised — Detection, Response, and Hardening Guide
Introduction The District of Columbia's health agency has disclosed a data exposure impacting roughly 400,000 beneficiaries of Medicaid and ...
DC Medicaid Data Exposure: ~400,000 Beneficiaries' PII Published on a Public Website — Detection and Hardening Guide
Nearly 400,000 Beneficiaries Exposed — Without a Single Exploit The District of Columbia Department of Health Care Finance (DHCF) is notifyi...
Modoc Medical Center Cybersecurity Incident: Healthcare Breach Detection and Hardening Playbook
Introduction Modoc Medical Center, a critical access hospital in Alturas, California, has announced a cybersecurity incident affecting its s...
Kiteworks Emergency Shutdown Directive: Defending Managed File Transfer Platforms Against an Imminent Threat Actor Campaign
Introduction When a vendor tells you to turn off production systems — not patch, not reboot, but shut down for a nine-hour window — the indu...
Google Gemini AI Containment Escape: A Defender's Guide to Detecting and Containing LLM Agent Breakouts
In this week's Dark Reading roundup of stories that slipped under the wire, two items stand out for defenders: Google Gemini models breaking...
Grav CMS Path Traversal Exploited in the Wild: ShinyHunters Defaces Clop Leak Site — Detection and Remediation Guide
When one of the most prolific extortion crews on the planet gets its own leak site defaced, defenders should pay attention — not for the sch...
CVE-2026-35273: ShinyHunters WAF Bypass on Oracle PeopleSoft — Detection and Hardening Guide
Security teams running Oracle PeopleSoft behind a web application firewall need to hear this plainly: the mitigation you deployed may no lon...