Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
UAC-0099 'GuardBreaker' Attack: Russia-Aligned Actors Weaponize LLM Safety Filters to Blind AI-Assisted Malware Analysis — Detection and Defense Guide
Introduction ESET researchers have disclosed a novel anti-analysis technique — dubbed GuardBreaker — deployed by the Russia-aligned threat a...
DPRK Job Fraud Expands to Healthcare and Sales: Insider Threat Detection and Hiring Controls for Defenders
The Insider Threat Is No Longer Confined to Your Engineering Org For the past several years, the security community has tracked the DPRK IT ...
Chinese Spy Proxy Networks, Router Backdoors, and Off-Task AI Agents: A Defender's Playbook for This Week's Threats
Introduction This week's recap is a masterclass in a lesson I have been delivering to clients for over a decade: the boring parts of your en...
China-Nexus Actors Targeted DoJ, NASA, Federal Reserve, and DoE: What the DoJ Correction Means for Defenders
Introduction On Friday, the U.S. Department of Justice issued a correction to a prior statement: several U.S. government agencies — includin...
Securing Cloud Assets in the Age of AI: What Every Enterprise Defender Needs to Do Now
Introduction Dark Reading's upcoming virtual event — What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI — lands ...
FulcrumSec Manchester Airports Group Breach: 86 GB Data Theft — Detection, Hardening, and Incident Response Guide
Introduction Manchester Airports Group (MAG) — operator of Manchester, London Stansted, and East Midlands airports — has become the latest h...
TerminalFix ClickFix Campaign: Defending Against Fake CAPTCHA Lures, DLL Sideloading, and Reverse Tunnel Persistence
Introduction Microsoft Threat Intelligence has published analysis of TerminalFix, a multistage intrusion campaign that combines three techni...
CVE-2026-74232 & CVE-2026-74233: ZBT Router Factory Implants (SPEAKINGSTONE / DARKLANTERN) — Detection, Hunting, and Remediation Guide
ZBT Router Factory Implants: Unauthenticated Root on Your Network Edge VulnCheck's unpatched vulnerability research team has disclosed two p...
Android 17 OS-Wide ECH Rollout: What Encrypted Client Hello Means for SOC Visibility and How to Adapt Your Defenses
Introduction Google announced on Thursday that Android 17 will ship with a slate of new network security protections, headlined by operating...