Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Clop Claims 89GB Data Theft from Shell: Defending Against Mass Extortion-Style Exfiltration
Shell Investigates Clop's Claim of 89GB Data Theft — What Defenders Must Do Now Shell has confirmed it is investigating a potential security...
Trivy Supply-Chain Compromise: How a Poisoned GitHub Action Exposed 2,500 Organizations — Detection and Remediation Guide
The Real Patient Zero: Trivy, Not LiteLLM When the LiteLLM supply-chain attack broke, the initial narrative pointed at poisoned PyPI package...
Apple Threat Notifications: Defending Against Mercenary Spyware Targeting iPhones
Apple Threat Notifications: What They Mean and How to Respond Apple has issued a fresh wave of Threat Notifications to iPhone users it belie...
Insider Data Theft and Extortion: Lessons from the Brightly Software Contractor Sentencing — Detection and Prevention Guide
A former data analyst contractor for Brightly Software has been sentenced to two years in federal prison for stealing his employer's data an...
CVE-2026-64887 & CVE-2026-34492: Johnson Controls Airwall Hard-Coded Key and Path Traversal — Detection and Remediation Guide
CISA Flags Two Airwall Flaws — Hard-Coded Crypto Keys Meet Path Traversal CISA has published ICS advisory ICSA-26-225-03 covering two vulner...
Ukraine Dismantles 94 Fraudulent Call Centers: Defending Your Organization Against Vishing and Investment Scam Operations
Ukraine's Takedown of 94 Fraudulent Call Centers: What Defenders Need to Know Ukrainian law enforcement, in coordinated raids across the cou...
Akira Ransomware Affiliate Sabotages Own Attack with Failed EDR Evasion — Detection and Hardening Guide for EDR Tampering
When the Attacker's Own EDR Killer Becomes Your Best Control Huntress recently documented a case that every SOC team should study: an Akira ...
Kimwolf v7 Android/IoT Botnet: Detecting and Defending Against HTTP/2 DDoS Attacks That Mimic Legitimate Browsing
Introduction Palo Alto Networks Unit 42 has disclosed a significant evolution of the Kimwolf/AISURU botnet — version 7 — discovered in Febru...
Zoom Annotation Tool Flaws Enable Zero-Click Client Takeover: Detection, Patching, and Hardening Guide
Introduction Zoom has disclosed a set of serious vulnerabilities in its annotation feature — the tool that lets meeting participants draw, h...