Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Head Mare Exploits TrueConf Server Flaws to Push PhantomCore via Trojanized Installers — Detection and Remediation Guide
Introduction Kaspersky's incident response team has confirmed that the threat actor Head Mare is once again weaponizing vulnerabilities in u...
Child Care Resource Center 9-Year Employee Data Leak: Insider Risk Detection and Remediation Guide
Introduction Child Care Resource Center (CCRC), a California-based organization serving families and child care providers, has disclosed a d...
Loma Linda University Health & UCLA Health Data Breaches: PHI Exposure Detection and HIPAA Response Guide
Two Major California Health Systems Disclose Data Security Incidents Loma Linda University Health and UCLA Health — two of California's larg...
Levi Strauss Social Engineering Breach: Defending Against Helpdesk Scams and Corporate Data Exfiltration
Introduction Levi Strauss & Co. has disclosed a cyberattack in which a threat actor used social engineering to gain access to the computers ...
Unlimited Technology Systems Breach: 3.8 Million Healthcare Records Exfiltrated From Commercial Data Center — Detection and Hardening Guide
Introduction Unlimited Technology Systems, a U.S.-based healthcare technology company, has disclosed a data breach affecting more than 3.8 m...
Head Mare Hacktivists Trojanize TrueConf Client Installers: Detection and Hardening Guide for Exposed Video Conferencing Servers
Head Mare Hacktivists Trojanize TrueConf Client Installers: Detection and Hardening Guide The hacktivist group Head Mare has been compromisi...
Microsoft 365 AitM Phishing Campaign: Detecting Session Hijacking and Payroll-Focused Account Takeover
Microsoft 365 AitM Phishing Campaign: Detection and Response Guide Security researchers have flagged an active, widespread email-driven soci...
ClickFix macOS Campaign Delivers Go-Based Crypto Stealer: Detection and Defense Guide for SOC Teams
Introduction The ClickFix social-engineering playbook — which has been hammering Windows environments with fake CAPTCHA and 'fix this error'...
Inside 250 OCR HIPAA Investigations: The Compliance Failures That Trigger Fines and How Healthcare Defenders Can Avoid Them
Introduction Most healthcare security leaders have read the HIPAA Security Rule. Far fewer have watched the Office for Civil Rights (OCR) di...