Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CISA KEV Flash: 6 CVEs Added — Progress LoadMaster, JetBrains TeamCity & N-able N-central Under Active Attack
CISA KEV Flash: 6 CVEs Added — Progress LoadMaster, JetBrains TeamCity & N-able N-central Under Active Attack The CISA Known Exploited Vulne...
Webmail CSS Injection Attacks: Defending Against Credential Theft, Session Hijacking, and AI Email Tool Manipulation
Introduction A new class of attack demonstrated by PortSwigger researcher Gareth Heyes should force every organization running webmail — or ...
SilverFox, Mustang Panda & Amaranth-Dragon Converge on Indonesian BFSI: ValleyRAT, LOTUSLITE, and Amaranth Loader Campaign Analysis — OTX Detection Pack
SilverFox, Mustang Panda & Amaranth-Dragon Converge on Indonesian BFSI: ValleyRAT, LOTUSLITE, and Amaranth Loader Campaign Analysis Threat S...
Ransomware Surge in July: Detection and Hardening Guidance for Finance, Technology, and Healthcare Defenders
Introduction The brief reprieve many security operations teams felt in Q2 is over. According to new tracking data from Comparitech, ransomwa...
Ransom Cartel Creator Sentenced to 16 Years: Defending Against Ransomware-as-a-Service Operations
Introduction On August 5, a federal judge in Alexandria, Virginia sentenced Maksim Silnikau to 16 years in prison for creating and operating...
Windows Hello for Business Key Abuse: Defending Against Malware-Driven Persistent Entra ID Access
Windows Hello for Business Key Abuse: Defending Against Malware-Driven Persistent Entra ID Access Introduction Entra ID security researcher ...
Swiss Government SharePoint Breach: 200 Accounts Compromised — Detection and Hardening Guide for On-Prem SharePoint Defenders
Swiss Federal SharePoint Breach: What Happened and Why It Matters Switzerland's federal IT office has confirmed that attackers exploited sec...
Fake Bank of America Phishing Drops Malicious ScreenConnect RMM: Detection, Hunting, and Removal Guide
Introduction A newly reported social engineering campaign is impersonating Bank of America to push victims into downloading and executing a ...
Ransom Cartel Ransomware Creator Sentenced to 16 Years — Defensive Lessons and Detection Guide for Enterprise SOCs
Introduction Maksim Silnikau, the creator and administrator of the Ransom Cartel ransomware operation, has been sentenced to 16 years in pri...