Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Google Chrome PLANTS Protocol: Securing HTTPS Against Quantum Threats
Google Chrome PLANTS Protocol: Securing HTTPS Against Quantum Threats Introduction The Chrome Secure Web and Networking Team has announced a...
CVE-2025-7741: Yokogawa CENTUM VP Hardcoded Password — Detection and Hardening Guide
Introduction Defenders in Critical Manufacturing and Energy sectors need to be on high alert following the release of a CISA advisory (ICSA-...
CPUID Supply Chain Breach: Detecting STX RAT in Trojanized CPU-Z and HWMonitor Installers
Executive Summary A critical supply-chain attack has been confirmed against CPUID, the developer of the ubiquitous system diagnostics tools ...
CVE-2021-22681: Rockwell Automation Logix Exploitation – IOCONTROL and IRGC Threats
Introduction The escalation from website defacement to kinetic-adjacent sabotage is complete. The Iran-affiliated threat group CyberAv3ngers...
Rapid7 MDR for Microsoft: Q1 2026 Telemetry Correlation Analysis
Introduction In Q1 2026, Rapid7 released significant updates under the "Cloud Dancer" initiative, most notably the expansion of Managed Dete...
Elastic Cloud SIEM Abused for Data Exfiltration: Detection and Hunting Guide
Introduction Huntress researchers have uncovered a concerning campaign where threat actors actively leverage security vulnerabilities to exf...
ClickFix Social Engineering Campaign: Fake Claude Installer Detection and Defense
Introduction Social engineering remains one of the most effective initial access vectors for threat actors, and the recent resurgence of "Cl...
AI-Driven MDR in 2026: Strategies for Full Telemetry Visibility and Detection Automation
Introduction In a recent episode of Rapid7’s Experts on Experts, CEO Corey Thomas highlighted a critical evolution in security operations th...
CVE-2025-59718: FortiGate SSO Login Bypass — Detection and Containment Guide
CVE-2025-59718: FortiGate SSO Login Bypass — Detection and Containment Guide Introduction Rapid7's recent Incident Response (IR) engagement ...