Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Amazon Kiro Prompt Injection via Kiro Powers — Detection and Mitigation Guide for Agentic IDE Data Exfiltration
Introduction Security researchers at Mindgard have disclosed a prompt injection vulnerability in Amazon Kiro, AWS's agentic AI-powered integ...
American Vision Partners $1.75M HIPAA Breach Settlement: Detection and Hardening Guide for Healthcare Defenders
Introduction Medical Management Resource Group LLC, doing business as American Vision Partners — one of the largest eye care practice manage...
ShinyHunters Leaks 7.1 Million Baxter International Records: Healthcare Breach Detection and Response Guide
Introduction ShinyHunters has claimed responsibility for an intrusion at Baxter International and is now leaking roughly 7.1 million records...
GLOBAL SECRET GROUP Ransomware: 3 US Victims Posted in 24 Hours — Transportation, Retail & Government/Defense Targeting Analysis with Detection Rules
GLOBAL SECRET GROUP Ransomware: 3 US Victims Posted in 24 Hours — Transportation, Retail & Government/Defense Targeting Analysis with Detect...
LACMA Data Breach Exposed Social Security and Medical Data: Incident Response Lessons and Detection Guidance for Defenders
LACMA Data Breach: When a Museum Becomes a PII Custodian The Los Angeles County Museum of Art (LACMA) has disclosed a data breach from last ...
Nutex Health Data Breach: Defending Healthcare Networks Against Server-Side Data Exfiltration
Another Hospital Operator, Another Exfiltration — This Time It's Nutex Health Nutex Health, a Houston-based operator of micro-hospitals and ...
Cryptographic Context Injection: Zero-Click Grok Chat History Theft — Detection and Defense Guide for AI-Integrated Environments
Introduction Adversa AI researcher Rony Utevsky has disclosed a new attack technique dubbed Cryptographic Context Injection, demonstrated ag...
KAZU Ransomware Gang: 9 Healthcare & Professional Services Victims Posted in Single-Day Surge — Targeting Analysis & Detection Rules
KAZU Ransomware Gang: Single-Day Nine-Victim Surge Targets Healthcare Across Six Countries Classification: TLP:CLEAR | Report Date: 2026-08-...
SickKids Data Breach: Third-Party Software Flaw Exposes Employee PII — A Defender's Playbook for Vendor Risk
Introduction Toronto's Hospital for Sick Children (SickKids) has disclosed a cybersecurity incident that exposed the personal information of...