Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Self-Generated Prompt Injections in AI Compaction Summaries: Defending Claude Code and Coding Agents Against Persistence Attacks
A New Persistence Layer: When the AI Writes Its Own Malware Instructions Simon Willison's September 2026 write-up on self-generated prompt i...
Brevo Supply Chain Attack: Compromised API Key and Malicious Cloudflare Worker Injected Skimmers Into 100,000 Websites — Detection and Remediation Guide
Introduction A supply chain compromise at Brevo — the email marketing and CRM platform formerly known as Sendinblue — has resulted in malici...
Mirage2FA PhaaS Session Hijacking + BlackCore Influence-for-Hire: OTX Pulse Analysis — Enterprise Detection Pack
Mirage2FA PhaaS Session Hijacking + BlackCore Influence-for-Hire: OTX Pulse Analysis Two pulses surfaced on AlienVault OTX this week that, w...
Mirage2FA PhaaS Kit: Microsoft 365 Session Hijacking via AiTM — OTX Pulse Analysis & Detection Pack
Mirage2FA PhaaS Kit: Microsoft 365 Session Hijacking via AiTM — OTX Pulse Analysis & Detection Pack Threat Summary Live OTX pulse data confi...
N0N Ransomware Gang: 10 Victims Posted in 24 Hours — Cross-Sector Campaign Analysis & Detection Engineering
N0N Ransomware Gang: 10 Victims Posted in 24 Hours — Cross-Sector Campaign Analysis & Detection Engineering Classification: TLP:AMBER | Repo...
Community Dental Care Data Breach Settlement: Defensive Lessons and Detection Guidance for Healthcare PHI Exposure
Another Healthcare Breach, Another Settlement — and the Same Root Causes Community Dental Care, a nonprofit Medicaid dental provider operati...
USN-8730-3: Ubuntu Linux Kernel Azure Vulnerability — IPv6 and Netfilter Patching, Detection, and Hardening Guide
Introduction Canonical has published USN-8730-3, a security update for the Azure-optimized Linux kernel (linux-azure) addressing vulnerabili...
Identity Visibility in 2026: Why Stolen Credentials Still Beat Your Perimeter — and How to Fix the Blind Spots
The Foundation Most Security Programs Still Get Wrong Stolen and misused credentials remain one of the most frequently reported initial acce...
LLMs in Security Writing: A Defender's Governance Guide for AI-Assisted Content Workflows
Introduction A recent piece by Thomas Ptacek — amplified by Simon Willison's widely-read weblog — articulates a discipline that security org...