Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
DeadLock Ransomware Uses Blockchain Smart Contracts to Survive Takedowns — Detection and Disruption Playbook
Introduction Ransomware operators have spent the last decade fighting a losing war against infrastructure takedowns. Law enforcement seizes ...
737 Malicious Chrome VPN Extensions Caught Proxying User Traffic — Detection, Hunting, and Removal Guide
Introduction A newly disclosed campaign has put a hard number on a problem many of us in IR have been quietly tracking for years: 737 free V...
LiteLLM PyPI Supply-Chain Attack: 2,100+ Organizations Exposed — Detection, Hunt Queries, and Credential Rotation Guide
What Happened In March 2026, two malicious releases of LiteLLM — one of the most widely deployed Python libraries for brokering calls to lar...
Wesco Data Theft Extortion: ExfilSquad Breach — Detection and Response Guide for Supply-Chain Defenders
Wesco Confirms Security Incident After ExfilSquad Claims Data Theft Wesco — a Fortune-level global supply chain and distribution company ser...
Malicious SIM Cards Can Execute Attacker Code on Cellular IoT Modems — Detection and Hardening Guide
Introduction Security researchers at the University of Birmingham and firmware security firm Fuzzware have demonstrated something defenders ...
Only Half of UK Manufacturers Have a Cyber Incident Response Plan — Building IR Readiness Before the Breach
Half of UK Manufacturers Are Flying Blind on Incident Response New research from Make UK, the manufacturers' organisation, has exposed a dan...
Gunra Ransomware Hits Government and Critical Infrastructure — Detection, Hardening, and Response Guide
Introduction Joint warnings from U.S. federal agencies and South Korea's National Police Agency have put government and critical infrastruct...
BdThemes Supply-Chain Compromise: Rogue WordPress Admin Accounts — Detection and Remediation Guide
BdThemes Supply-Chain Compromise: Rogue WordPress Admin Accounts — Detection and Remediation Guide A threat actor compromised the upstream i...
Sherlock Holmes, the Original Social Engineer: Defense Lessons for Modern Security Teams
Introduction A recent Dark Reading piece makes a point that anyone who has run a red team engagement already knows instinctively: Sherlock H...