Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
BAE Systems Cyber Incident Halts US Bankruptcy Court Notices — Third-Party Incident Response and Detection Playbook
When Your Vendor Goes Dark: The BAE Systems Incident A cyber incident at BAE Systems — the defense and aerospace contractor that operates cr...
AMCA Breach Settlement: $6.4M Third-Party Healthcare Vendor Compromise — Detection and Defense Guide
Introduction A settlement has been agreed to partially resolve litigation stemming from the cyberattack on American Medical Collection Agenc...
Photon Health and Healthcare Highways Data Breaches: Defensive Playbook for Healthcare PHI Protection
Photon Health and Healthcare Highways Data Breaches: Defensive Playbook for Healthcare PHI Protection Introduction Two more healthcare organ...
Daiichi Kosho Supply Chain Breach Exposes 8 Million Karaoke Customers — Detection and Third-Party Risk Response Guide
Daiichi Kosho Supply Chain Breach: 8 Million Records Out the Door Through a Trusted Partner Daiichi Kosho — one of the largest karaoke equip...
Nippon Columbia Malware Breach Exposes 8.7M Daiichi Kosho Karaoke Records — Third-Party Compromise Defense Guide
Introduction Daiichi Kosho — one of Japan's largest karaoke and entertainment system manufacturers, best known for its DAM karaoke platform ...
FBI Arrests Negotiation Firm Co-Founder in ShinyHunters Probe: Third-Party IR Risk and Data Exfiltration Defense Guide
When the People You Hire to Fight Extortionists Become the Extortionists In my 15+ years running incident response engagements, I've told cl...
Shadow AI Agents: Finding and Governing the Third-Party AI Your SSO Can't See (2026 State of Agent Security)
The Identity Stack Only Governs What Authenticates Through It The 2026 State of Agent Security Report landed on a number every CISO and SOC ...
ASOS Breach via Simon AI Compromise: Defending Against Third-Party SaaS Credential Theft
Introduction ASOS, the global online fashion retailer, has confirmed a data breach after attackers gained access through the compromise of S...
ASOS Push Notification Hijack: Detecting Abuse of Customer Communication Channels and Snowflake Access
Introduction This week, ASOS customers received something no retailer wants its brand attached to: a hostile push notification delivered thr...