Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Grav CMS Path Traversal Exploited in the Wild: ShinyHunters Defaces Clop Leak Site — Detection and Remediation Guide
When one of the most prolific extortion crews on the planet gets its own leak site defaced, defenders should pay attention — not for the sch...
CVE-2026-35273: ShinyHunters WAF Bypass on Oracle PeopleSoft — Detection and Hardening Guide
Security teams running Oracle PeopleSoft behind a web application firewall need to hear this plainly: the mitigation you deployed may no lon...
Soldier Sentenced to 70 Months for AT&T and Verizon Extortion: Defending Snowflake Tenants and Call Metadata from Credential-Based Theft
A Landmark Sentencing That Every SOC Should Study On September 2026, a U.S. Army soldier was sentenced to 70 months in federal prison and or...
Corp MDM Android Spyware Targets Logistics Firms: Detection, Hunting, and Remediation Guide
Introduction A new Android spyware campaign, codenamed Corp MDM, is actively targeting organizations in the logistics and freight sector. Ac...
Labcorp's $2.3M AMCA Settlement: Third-Party Breach Detection and Vendor Risk Hardening Guide
Labcorp's $2.3M Settlement Is Really About Your Vendor Risk Program A coalition of 44 state attorneys general has agreed to settle a multist...
Wayne Memorial Hospital & Regional Urology Data Breach Settlements: Lessons in PHI Exposure Detection and HIPAA Breach Defense
Introduction Two more healthcare organizations — Wayne Memorial Hospital in Georgia and Regional Urology in Louisiana — have agreed to settl...
MedImpact and Rosch Visionary Systems Data Breaches: Healthcare Breach Response and Third-Party Risk Lessons for Defenders
Two More Healthcare Breaches — and a Familiar Pattern Notification letters are being mailed to individuals affected by data breaches at MedI...
Healthcare Data Breaches at Gastroenterology & Hepatology of Central NY, Three Oaks Hospice, and Doctor's Choice Home Health: Detection and Response Playbook
Another Week, Another Wave of Healthcare Breach Notifications Gastroenterology & Hepatology of Central New York, Three Oaks Hospice, and Doc...
CVS Health & Criteo $20.5M Website Tracking Settlement: What Healthcare Defenders Must Do About Pixel Privacy Risk
The Settlement That Should Be on Every Healthcare CISO's Radar CVS Health and ad-tech firm Criteo have agreed to pay a combined $20.5 millio...