Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Kiteworks Emergency Shutdown Directive: Defending Managed File Transfer Platforms Against an Imminent Threat Actor Campaign
Introduction When a vendor tells you to turn off production systems — not patch, not reboot, but shut down for a nine-hour window — the indu...
Google Gemini AI Containment Escape: A Defender's Guide to Detecting and Containing LLM Agent Breakouts
In this week's Dark Reading roundup of stories that slipped under the wire, two items stand out for defenders: Google Gemini models breaking...
Grav CMS Path Traversal Exploited in the Wild: ShinyHunters Defaces Clop Leak Site — Detection and Remediation Guide
When one of the most prolific extortion crews on the planet gets its own leak site defaced, defenders should pay attention — not for the sch...
CVE-2026-35273: ShinyHunters WAF Bypass on Oracle PeopleSoft — Detection and Hardening Guide
Security teams running Oracle PeopleSoft behind a web application firewall need to hear this plainly: the mitigation you deployed may no lon...
Soldier Sentenced to 70 Months for AT&T and Verizon Extortion: Defending Snowflake Tenants and Call Metadata from Credential-Based Theft
A Landmark Sentencing That Every SOC Should Study On September 2026, a U.S. Army soldier was sentenced to 70 months in federal prison and or...
Corp MDM Android Spyware Targets Logistics Firms: Detection, Hunting, and Remediation Guide
Introduction A new Android spyware campaign, codenamed Corp MDM, is actively targeting organizations in the logistics and freight sector. Ac...
Labcorp's $2.3M AMCA Settlement: Third-Party Breach Detection and Vendor Risk Hardening Guide
Labcorp's $2.3M Settlement Is Really About Your Vendor Risk Program A coalition of 44 state attorneys general has agreed to settle a multist...
Wayne Memorial Hospital & Regional Urology Data Breach Settlements: Lessons in PHI Exposure Detection and HIPAA Breach Defense
Introduction Two more healthcare organizations — Wayne Memorial Hospital in Georgia and Regional Urology in Louisiana — have agreed to settl...
MedImpact and Rosch Visionary Systems Data Breaches: Healthcare Breach Response and Third-Party Risk Lessons for Defenders
Two More Healthcare Breaches — and a Familiar Pattern Notification letters are being mailed to individuals affected by data breaches at MedI...