Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Token-Spraying Attacks on Microsoft 365: Detecting and Defeating Session-Token BEC Campaigns
The Threat: Stolen Session Tokens, Sprayed at Scale Security researchers have identified a widespread campaign in which threat actors are at...
LiteLLM Supply-Chain Compromise: Malicious PyPI Package and Docker Images Steal Cloud Credentials — Detection and Response Guide
LiteLLM Release Pipeline Compromised: What Defenders Need to Do Right Now The LiteLLM project — one of the most widely deployed open-source ...
FortiGate & GlobalProtect Perimeter Breach Campaign: 70,000 Credentials Exposed — Detection, Containment, and Remediation Guide
FortiGate & GlobalProtect Perimeter Breach Campaign: 70,000 Credentials Exposed — Detection, Containment, and Remediation Guide Introduction...
SafePay Ransomware: 600+ Organizations Breached via Stolen VPN Credentials — Joint FBI/CISA Advisory Defense Guide
SafePay Ransomware Hits 600+ Organizations — What the Joint Advisory Means for Your SOC This week, CISA, the FBI, the U.S. Secret Service, G...
Rapid7 Q3 2026: Attackers Exploiting Vulnerabilities Within 3 Days — How to Compress Your Patch Cycle Before Attackers Do
The Three-Day Clock Is Already Running Rapid7's Q3 2026 Quarterly Threat Landscape Report puts a hard number on what most of us in IR have f...
CISA KEV Flash: 9 CVEs Added — Plex Media Server, BeyondTrust & Fortinet Under Active Attack
CISA KEV Flash: 9 CVEs Added — Plex Media Server, BeyondTrust & Fortinet Under Active Attack CISA's Known Exploited Vulnerabilities catalog ...
The Gentlemen and Qilin Ransomware Rivalry Escalates: Defender's Detection and Response Playbook
The Ransomware Market Is Consolidating — and Competition Is Making It Worse Ransomware isn't dying after the disruption of LockBit and ALPHV...
'Password1' Breach: ICO Slams Welsh Data Unit After Ransomware Exposed Children's Data — Credential Hardening & Detection Guide
The Breach That Should Never Have Happened In a case that will be cited in security awareness training for years, the UK Information Commiss...
Zeabur Breach Post-Mortem: Plaintext Credential Exposure Led to 3.2M Environment Variable Theft — Detection and Remediation Guide
The Zeabur Breach: A Textbook Case of Secrets Mismanagement Ending a Company Development platform Zeabur has announced it is shutting down f...