Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Chinese Spy Proxy Networks, Router Backdoors, and Off-Task AI Agents: A Defender's Playbook for This Week's Threats
Introduction This week's recap is a masterclass in a lesson I have been delivering to clients for over a decade: the boring parts of your en...
China-Nexus Actors Targeted DoJ, NASA, Federal Reserve, and DoE: What the DoJ Correction Means for Defenders
Introduction On Friday, the U.S. Department of Justice issued a correction to a prior statement: several U.S. government agencies — includin...
Securing Cloud Assets in the Age of AI: What Every Enterprise Defender Needs to Do Now
Introduction Dark Reading's upcoming virtual event — What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI — lands ...
FulcrumSec Manchester Airports Group Breach: 86 GB Data Theft — Detection, Hardening, and Incident Response Guide
Introduction Manchester Airports Group (MAG) — operator of Manchester, London Stansted, and East Midlands airports — has become the latest h...
TerminalFix ClickFix Campaign: Defending Against Fake CAPTCHA Lures, DLL Sideloading, and Reverse Tunnel Persistence
Introduction Microsoft Threat Intelligence has published analysis of TerminalFix, a multistage intrusion campaign that combines three techni...
CVE-2026-74232 & CVE-2026-74233: ZBT Router Factory Implants (SPEAKINGSTONE / DARKLANTERN) — Detection, Hunting, and Remediation Guide
ZBT Router Factory Implants: Unauthenticated Root on Your Network Edge VulnCheck's unpatched vulnerability research team has disclosed two p...
Android 17 OS-Wide ECH Rollout: What Encrypted Client Hello Means for SOC Visibility and How to Adapt Your Defenses
Introduction Google announced on Thursday that Android 17 will ship with a slate of new network security protections, headlined by operating...
Cosmos EVM Balance-Handling Flaw (GHSA-7g4w-cg88-2cq2) Exploited Across Six Blockchains — Defender's Response Guide
Introduction Cosmos Labs has disclosed that a critical balance-handling vulnerability in the shared Cosmos EVM module — tracked as GHSA-7g4w...
AI in Security Operations 2026: What the Data Says — and How Defenders Should Operationalize It
Forty percent of security teams now use AI in their operations every single day. Another 56% are actively testing it. Only 4% have no adopti...