Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ASOS Breach via Third-Party Communication Platform: Defending Against Vendor-Channel Notification Abuse
Introduction ASOS, the global online fashion retailer, has confirmed a cyberattack and data breach after threat actors compromised a third-p...
Clover Health and AngMar Management Breaches Expose 250,000 Patient Records — Detection and Defense Guide for Healthcare SOCs
Two separate breaches disclosed this week — one at Clover Health Investments in New Jersey and one at AngMar Management Services in Texas — ...
Frontline Education Data Breach: Third-Party Software Exploitation Exposes School District Employee SSNs — Detection and Response Guide
The Breach: What We Know Frontline Education — a major SaaS provider of HR, payroll, absence management, and administrative software used by...
Saber Healthcare and Buchalter Data Breaches: HIPAA Detection, Containment, and Third-Party Risk Hardening Guide
Introduction Two new breach disclosures — one from Saber Healthcare, an Ohio-based skilled nursing and senior care operator, and one from Bu...
Bitget Breach: Unpatched Third-Party Security Product Flaw Enabled $387.5M Crypto Theft — Defensive Playbook
The Irony That Cost $387.5 Million Cryptocurrency exchange Bitget disclosed that attackers who stole $387.5 million in a single week gained ...
FBI Staff Medical Records Breach: Detecting Bulk PHI Theft and Third-Party Exposure Before Records Surface
FBI Agents' Blood Tests and Doctors' Notes Surface After Breach — What Defenders Must Do Now Medical records belonging to FBI personnel — in...
Labcorp's $2.3M AMCA Settlement: Third-Party Breach Detection and Vendor Risk Hardening Guide
Labcorp's $2.3M Settlement Is Really About Your Vendor Risk Program A coalition of 44 state attorneys general has agreed to settle a multist...
BigCommerce Merchant Breach via Compromised Ribon App Credentials: Defending Against Third-Party Script Injection and Web Skimming
What Happened Ecommerce platform BigCommerce has notified multiple merchants that their storefronts were breached after attackers compromise...
Abandoned CDN Domain Re-Registered — Defending Against Dangling DNS and Supply-Chain Script Hijacking
An Abandoned CDN Domain Is Now Controlled by a Stranger — and Your Site May Still Be Calling It In July 2025, a domain that once belonged to...