Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Microsoft Teams IT Support Scams: Detecting and Blocking External Chat Social Engineering Attacks
Microsoft Teams IT Support Scams: Detecting and Blocking External Chat Social Engineering Attacks Introduction Cybersecurity researchers hav...
NIST, CISA, and NSA: Runaway AI Agents Are Incidents — Identity Telemetry and Response Playbooks for 2026
The Incident You Haven't Rehearsed Yet A joint guide from NIST, CISA, and NSA — covered this week by BleepingComputer — formalizes something...
Capcom CAPCOM ID Breach: 11.7 Million Emails Exposed — Credential Stuffing Defense Guide
Capcom CAPCOM ID Breach: 11.7 Million Emails Exposed — Credential Stuffing Defense Guide Japanese gaming company Capcom has disclosed a majo...
Capcom Data Breach: Defending Identity Infrastructure After the 2026 Gaming Giant Compromise
Japanese gaming giant Capcom has confirmed unauthorized access to its online account system, resulting in the exposure of users' personal in...
Token-Spraying Attacks on Microsoft 365: Detecting and Defeating Session-Token BEC Campaigns
The Threat: Stolen Session Tokens, Sprayed at Scale Security researchers have identified a widespread campaign in which threat actors are at...
LiteLLM Supply-Chain Compromise: Malicious PyPI Package and Docker Images Steal Cloud Credentials — Detection and Response Guide
LiteLLM Release Pipeline Compromised: What Defenders Need to Do Right Now The LiteLLM project — one of the most widely deployed open-source ...
FortiGate & GlobalProtect Perimeter Breach Campaign: 70,000 Credentials Exposed — Detection, Containment, and Remediation Guide
FortiGate & GlobalProtect Perimeter Breach Campaign: 70,000 Credentials Exposed — Detection, Containment, and Remediation Guide Introduction...
SafePay Ransomware: 600+ Organizations Breached via Stolen VPN Credentials — Joint FBI/CISA Advisory Defense Guide
SafePay Ransomware Hits 600+ Organizations — What the Joint Advisory Means for Your SOC This week, CISA, the FBI, the U.S. Secret Service, G...
Rapid7 Q3 2026: Attackers Exploiting Vulnerabilities Within 3 Days — How to Compress Your Patch Cycle Before Attackers Do
The Three-Day Clock Is Already Running Rapid7's Q3 2026 Quarterly Threat Landscape Report puts a hard number on what most of us in IR have f...