Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ShinyHunters Claims Florida DMV 'DAVID' Database Breach: Detection and Response Guide for Government Data Custodians
What Happened The ShinyHunters extortion gang has publicly claimed it breached DAVID — the Driver and Vehicle Information Database operated ...
Infostealer Logs Expose Replayable AI Session Tokens: Detecting and Remediating Stolen Google, Anthropic, and LLM API Credentials
Introduction A growing volume of infostealer logs circulating on criminal marketplaces contains something defenders haven't traditionally pr...
Veradigm Patient Data Breach: Defending Healthcare Orgs Against Third-Party Vendor Compromise and The Gentlemen Ransomware
Veradigm, a major healthcare technology and data analytics company serving providers, payers, and life sciences organizations, has disclosed...
Tenable CyberAgents Exchange AI Inspector: What Defenders Need to Know About Securing Community-Built AI Agents
Introduction The AI agent ecosystem is repeating a mistake the software industry already paid for once. Open registries — npm, PyPI, Docker ...
ICS Patch Tuesday: Schneider Electric, Siemens, AVEVA, and Rockwell Automation Advisories — Defender's Patching and Detection Guide
Introduction This month's coordinated ICS Patch Tuesday brought security advisories from four of the biggest names in industrial automation:...
CVE-2026-44756: SAP Kernel CVSS 10.0 Unauthenticated RCE — Detection and Remediation Guide
Introduction SAP's September 2026 Security Patch Day delivered what every enterprise defender dreads: a maximum-severity, unauthenticated re...
DeepSeek Harness Sandbox Escape: AI Agents Can Disable Their Own File Sandbox — Detection and Hardening Guide
Introduction Security researchers have disclosed a design-level flaw in DeepSeek Harness, DeepSeek's open-source framework for running AI co...
Indirect Prompt Injection: Defending AI Agents Against Hidden Malicious Instructions — Detection and Hardening Guide
The Threat Hiding in Plain Text SecurityWeek recently highlighted a threat class that every security team deploying autonomous AI agents nee...
LiteLLM Under Attack: Defending Against Default-Key Auth Bypass, Unauthenticated MCP Sessions, and Root-Level Code Execution in Cloud AI Gateways
LiteLLM Under Attack: Defending Against Default-Key Auth Bypass, Unauthenticated MCP Sessions, and Root-Level Code Execution in Cloud AI Gat...