Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Beacon CRM Breach: AWS Keys Leaked in Public JavaScript — Detect and Remediate
Beacon CRM breach: why an exposed AWS key is a cloud-wide incident SecurityWeek reports that more than 1,000 charities were impacted by the ...
Akira Ransomware Affiliate Uses Safe Mode with Networking to Bypass EDR — Detection and Hardening Guide
The EDR Bypass That Almost Worked In a recent Akira ransomware intrusion investigated by incident responders, an affiliate executed one of t...
Exposed AWS Access Key Behind Beacon CRM Breach Affecting 1,500+ UK Charities — Detection, Key Hygiene, and Remediation Guide
Exposed AWS Access Key Behind Beacon CRM Breach Affecting 1,500+ UK Charities — Detection, Key Hygiene, and Remediation Guide Introduction B...
Ransomware Hits Colombian Justice Ministry Ahead of Presidential Transition: Detection, Response, and Hardening Guide
Introduction Colombia's Ministry of Justice and Law (MinJusticia) confirmed a ransomware-driven cyber incident just days before a presidenti...
WindRelay NFC Relay Malware Paired with SpyNote RAT: Real-Time Android Credit Card Theft — Detection and Response Guide
Introduction A newly documented Android malware campaign pairs two highly complementary payloads: WindRelay, an NFC relay implant that captu...
Polish CHP Plant Breach via Private Cellular Network: OT Defense, Detection, and Remediation Guide
Polish CHP Plant Breach via Private Cellular Network: What Defenders Must Do Now Attackers breached a Polish combined heat and power (CHP) p...
DeadLock Ransomware Uses Blockchain Smart Contracts to Survive Takedowns — Detection and Disruption Playbook
Introduction Ransomware operators have spent the last decade fighting a losing war against infrastructure takedowns. Law enforcement seizes ...
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws: Detection and Hardening Guide for Critical Infrastructure Defenders
Introduction Cybersecurity and intelligence agencies from South Korea and the United States have issued a joint warning on Gunra, an encrypt...
StormEncryptor Ransomware: Detection and Response Guide for the Former Medusa Affiliate Campaign
Introduction A financially motivated threat actor previously operating as an affiliate of the Medusa ransomware-as-a-service (RaaS) operatio...