Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-51990: Tencent Sogou Input Method Exploited to Deploy GrayRabbit Malware — Detection and Remediation Guide
Introduction Threat actors linked to a China-aligned espionage group are actively exploiting a critical vulnerability tracked as CVE-2026-51...
AI-Driven Social Engineering: How Frontier Models Manipulate Humans and How to Defend Your Organization
Introduction In a recent interview with the Dark Reading News Desk, Fred Heiding of Menlo Park Intelligence laid out research findings that ...
Weaponized Claude Artifacts and ClickFix Lures: Detecting AI Platform Abuse in Your Environment
The Trusted Platform Problem Has Reached AI Security teams have spent years conditioning users to trust well-known domains: microsoft.com, g...
Shadow AI in the Enterprise: Detecting and Governing AI Agent Alerts Flooding Your SOC
Introduction Over the past year, a new class of alert has appeared in enterprise security operations centers — and it is growing faster than...
AI-Assisted Secrets Harvesting: How Threat Groups Abused Claude to Extract Credentials from 1.8M Android Apps — Defense Playbook
AI Is Now a Force Multiplier for Secrets Harvesting — and Your Mobile Apps Are the Target Anthropic has disclosed that multiple threat group...
Anthropic Claude Weaponized by 'Generative Threat Groups': Detecting and Defending Against AI-Automated Exploitation and Data Theft
AI-Accelerated Attacks Are No Longer Theoretical Anthropic has publicly confirmed what many of us in the IR community have been seeing in ca...
The Fragmenting Fraud Ecosystem: Detection and Monitoring Strategies for a Post-Marketplace Threat Landscape
Introduction A recent analysis from Rapid7's threat research team confirms what many of us have been watching unfold on the ground: the cybe...
JFrog Artifactory Chained Exploit Grants Admin Access: Detection, Hunting, and Remediation for Self-Hosted Servers
Chained JFrog Artifactory Flaws Hand Attackers the Keys to Your Build Pipeline Between August 15 and September 8, researchers at Wiz observe...
ThreatsDay Roundup: 200 Android Flaws, Malicious Browser Extensions, and 119K Scam Shops — A Defender's Playbook
This week's ThreatsDay roundup reads less like a collection of separate incidents and more like an indictment of a single defensive failure:...