Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ExfilSquad Extortion Group Confirmed Holding Data From 13 Organizations — Detection and Hardening Guide for Data Exfiltration Defense
ExfilSquad Publishes Stolen Data From 13 Victims: What Defenders Need to Do Now Researchers have confirmed that the extortion group ExfilSqu...
Board-Level Technology Risk: Why Executives Underestimate Cyber Threats and How CISOs Can Fix the Governance Gap
Introduction A recent Dark Reading analysis asks a question every CISO has lived through: why do so many boards of directors underestimate t...
Jewelbug APT Hack-for-Hire Operations: Defending Against Chinese State-Adjacent Intrusion and Crypto Fraud TTPs
Introduction Threat intelligence researchers at Broadcom's Symantec division have published findings linking Jewelbug — a China-aligned adva...
OAuth Token Theft in Google Workspace: Detecting and Breaking the Modern Attack Chain
Introduction The defensive playbook most organizations run against Google Workspace compromise is built around a single assumption: the atta...
€30M Commerzbank Fraud via Service Provider Exploit: Third-Party Detection and Hardening Guide
A €30M Reminder That Your Perimeter Includes Your Providers Law enforcement in Brazil arrested four cybercriminals, and three additional sus...
Clop Claims 89GB Data Theft from Shell: Defending Against Mass Extortion-Style Exfiltration
Shell Investigates Clop's Claim of 89GB Data Theft — What Defenders Must Do Now Shell has confirmed it is investigating a potential security...
Trivy Supply-Chain Compromise: How a Poisoned GitHub Action Exposed 2,500 Organizations — Detection and Remediation Guide
The Real Patient Zero: Trivy, Not LiteLLM When the LiteLLM supply-chain attack broke, the initial narrative pointed at poisoned PyPI package...
Apple Threat Notifications: Defending Against Mercenary Spyware Targeting iPhones
Apple Threat Notifications: What They Mean and How to Respond Apple has issued a fresh wave of Threat Notifications to iPhone users it belie...
Insider Data Theft and Extortion: Lessons from the Brightly Software Contractor Sentencing — Detection and Prevention Guide
A former data analyst contractor for Brightly Software has been sentenced to two years in federal prison for stealing his employer's data an...