Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
NVIDIA NemoClaw Ollama Poisoning: Detect and Block Malicious Webpage Control of Local AI Models
NVIDIA NemoClaw Ollama Poisoning: Detect and Block Malicious Webpage Control of Local AI Models Oasis Security has disclosed a weakness chai...
The 5% Problem: How to Detect and Contain AI Super-Users Hardcoding Unvetted Tools Into Your Business
The Real AI Threat Isn't the Casual ChatGPT User Security teams have spent the past two years building acceptable-use policies for generativ...
AI Coding Tools Are Flooding Your Backlog: How to Control Remediation Debt Before It Controls You
Introduction Your developers are shipping faster than ever — and your vulnerability backlog is growing faster than your security team can bu...
Weekly Threat Recap: Defending Against AI-Assisted PLC Attacks, GitLab Compromise, and Stripe API Key Leaks
Introduction This week's recap from The Hacker News reads like a checklist of everything that keeps a SOC lead up at night — not because the...
UAT-10147 SPECTRE Campaign: Defending Windows and Linux Web Servers Against AI-Scaled Attacks, EDR Bypass, and Kernel Rootkits
Introduction A newly disclosed cybercrime group tracked as UAT-10147 is conducting a global campaign against internet-facing Windows and Lin...
Manic, Grandoreiro, and ToxicPanda 2.0 Banking Trojans: Detection and Defense Guide for SOC Teams
Threat researchers have put three active banking trojan operations under the microscope this cycle: Manic, a banking trojan with full spywar...
ToxicPanda Android Banking Trojan Abuses VPN Permissions and Blocks Google Play — Detection and Response Guide
ToxicPanda's Evolution: VPN Abuse, Play Protect Blocking, and a 349-App Target List The ToxicPanda Android banking trojan — a family we've t...
Microsoft Classic Outlook Theme for New Outlook: Change Management and Security Implications for M365 Admins
Introduction Microsoft has begun rolling out a Classic Outlook theme for users of Outlook on the web and the New Outlook for Windows, per re...
9,300 Leaked AWS Access Keys Still Active: Detection and Remediation Guide for Exposed IAM Credentials
Introduction Security researchers have confirmed that more than 9,300 Amazon Web Services access keys exposed publicly between August 2022 a...