Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Gunra Ransomware Hits Healthcare: Detection, Hunting, and Hardening Guide After CISA/FBI Joint Advisory
Introduction CISA, the FBI, and international cybersecurity partners have published a joint advisory warning healthcare and public health (H...
Head Mare Exploits TrueConf Server Flaws to Push PhantomCore via Trojanized Installers — Detection and Remediation Guide
Introduction Kaspersky's incident response team has confirmed that the threat actor Head Mare is once again weaponizing vulnerabilities in u...
Child Care Resource Center 9-Year Employee Data Leak: Insider Risk Detection and Remediation Guide
Introduction Child Care Resource Center (CCRC), a California-based organization serving families and child care providers, has disclosed a d...
Loma Linda University Health & UCLA Health Data Breaches: PHI Exposure Detection and HIPAA Response Guide
Two Major California Health Systems Disclose Data Security Incidents Loma Linda University Health and UCLA Health — two of California's larg...
Levi Strauss Social Engineering Breach: Defending Against Helpdesk Scams and Corporate Data Exfiltration
Introduction Levi Strauss & Co. has disclosed a cyberattack in which a threat actor used social engineering to gain access to the computers ...
Unlimited Technology Systems Breach: 3.8 Million Healthcare Records Exfiltrated From Commercial Data Center — Detection and Hardening Guide
Introduction Unlimited Technology Systems, a U.S.-based healthcare technology company, has disclosed a data breach affecting more than 3.8 m...
Head Mare Hacktivists Trojanize TrueConf Client Installers: Detection and Hardening Guide for Exposed Video Conferencing Servers
Head Mare Hacktivists Trojanize TrueConf Client Installers: Detection and Hardening Guide The hacktivist group Head Mare has been compromisi...
Microsoft 365 AitM Phishing Campaign: Detecting Session Hijacking and Payroll-Focused Account Takeover
Microsoft 365 AitM Phishing Campaign: Detection and Response Guide Security researchers have flagged an active, widespread email-driven soci...
ClickFix macOS Campaign Delivers Go-Based Crypto Stealer: Detection and Defense Guide for SOC Teams
Introduction The ClickFix social-engineering playbook — which has been hammering Windows environments with fake CAPTCHA and 'fix this error'...