Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Defending Against Pro-Russian Hacktivism: Detecting CARR and Z-Pentest Operations
Introduction The recent arrest by Spain's National Police of an active member of the CyberArmy of Russia Reborn (CARR) and Z-Pentest serves ...
Maine Data Breach Portal Disruption: Defending Public Forms Against Automated Abuse
Introduction The recent shutdown of the Maine Attorney General's online data breach notification portal serves as a stark warning to securit...
Maine Breach Portal Abuse: Web Application Integrity and Input Validation Defense
Maine Breach Portal Abuse: Web Application Integrity and Input Validation Defense Introduction The State of Maine recently disabled its publ...
Labcorp $35M Settlement: Third-Party Risk and Web Compromise Defense
Introduction The recent $35 million settlement agreed to by Labcorp resolves litigation stemming from the 2018 American Medical Collection A...
Polyfill.io Supply Chain Compromise: Detecting Malicious CDN Injection and Credential Phishing
Introduction Security teams at major global brands, including Toshiba and Muji, are currently issuing urgent warnings to customers regarding...
ShinyHunters Breach: 7-Eleven Data Exfiltration Detection and Hardening
ShinyHunters Breach: 7-Eleven Data Exfiltration Detection and Hardening Introduction The threat actor group ShinyHunters has claimed respons...
Canvas LMS Availability Breach: Mitigating Service Disruption & Web Exploits
Canvas LMS Availability Breach: Mitigating Service Disruption & Web Exploits Introduction A widespread cyberattack targeting Instructure’s C...
France Identité (ANTS) Breach: Detecting IDOR Exploitation and Data Scraping
France Identité (ANTS) Breach: Detecting IDOR Exploitation and Data Scraping Introduction Recent reports detail the detention of a 15-year-o...
Defending Against Gainsight Assist Vulnerabilities: Urgent Patching for CVE-2026-31381 and CVE-2026-31382
Introduction Recent research by Rapid7 Labs has uncovered a security chain affecting the Gainsight Assist plugin and its integration with ap...