Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
PaperCut NG/MF Unauthenticated RCE: Chained Flaws Allow Arbitrary Java Code Execution — Detection and Remediation Guide
Introduction PaperCut has shipped an emergency fix for NG and MF after confirming that attackers are chaining two separate flaws to achieve ...
Berlin State Network Breach: Defending Government Networks Against Data Theft and Extortion After Confirmed Exfiltration
Berlin Refuses to Pay: Anatomy of a Government Network Compromise Berlin's state government has confirmed it is the target of an extortion a...
Version Control DFIR: GitHub, GitLab, Bitbucket, and Azure DevOps Detection & Incident Readiness Guide
Introduction Your source code is no longer just an intellectual property asset — it is an attack surface, a persistence mechanism, and incre...
GPUThor Rowhammer Attack Bypasses NVIDIA ECC Memory Protection — Detection and Hardening Guide
Introduction Security researchers have disclosed GPUThor, a new Rowhammer-class attack that successfully bypasses the error-correcting code ...
FBI Disrupts China-Linked QTFY Infrastructure: Defending Against QScan and QTRouter Edge-Device Compromise
FBI Disrupts QTFY: What Defenders Need to Know Right Now On Wednesday, the U.S. Department of Justice announced the disruption of two operat...
NovaCookies AitM Phishing Kit Abuses DocuSign to Steal Microsoft 365 Sessions — Detection and Hardening Guide
Introduction Security researchers at Island have disclosed a new subscription-based adversary-in-the-middle (AitM) social engineering toolki...
SLEEPWALKER Backdoor: Detecting Dormant DLL Implants Triggered by a Single Crafted Packet
Introduction An independent malware researcher has documented a previously unreported Windows backdoor dubbed SLEEPWALKER — and if you run a...
Iran-Linked Hackers Sanctioned Over Critical Infrastructure Breaches — Detection and Hardening Guide for Defenders
Introduction The U.S. Department of the Treasury has announced fresh sanctions against Iranian cyber actors tied to breaches of critical inf...
Elastic's Agentic SOC: How Self-Correcting AI Agents Lifted Alert Triage Accuracy from 60% to 92% — Lessons for Your SOC
Introduction Alert triage remains the single largest tax on SOC productivity. Analysts spend the majority of their shift clearing a queue do...