Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Fake AI App Campaigns Hit US Companies: How MSSPs Detect and Contain AI-Themed Malware Delivery
Introduction The AI gold rush has created a new social engineering surface, and threat actors are exploiting it at scale. Between April and ...
CenterPoint Energy Data Breach: 1 Million Texans' SSNs Exposed — Detection and Response Playbook for Defenders
CenterPoint Energy Breach: What Happened CenterPoint Energy, the Houston-based utility serving millions of customers across Texas and severa...
Hirudo Android Banking Malware: Detecting and Defeating App-Replacement Credential Theft
Introduction A new Android banking trojan dubbed Hirudo has emerged with a technique that should concern every organization whose employees ...
Xandr Fined Record €8.6M for Sharing Grindr Sensitive Data — Adtech Data Leakage Defense Guide for Privacy and Security Teams
The Record Fine That Should Reshape How You Govern Third-Party Data Flows The Norwegian Data Protection Authority (Datatilsynet) has levied ...
Midnight Mimosa: Preinstalled Android Malware Turns Low-Cost Phones Into Residential Proxies — Detection and Response Guide
Introduction Security teams spend enormous effort hardening endpoints against what users install. Midnight Mimosa flips that model on its he...
AvisLoader Malware: Detecting and Disrupting the P2P Windows Loader Using ClickFix Delivery
AvisLoader: The Loader That Assumes You'll Try to Kill Its C2 Most loader takedowns follow a familiar playbook: identify the command-and-con...
Etairos Health Ransomware Settlement: Lessons for Healthcare Defenders on Detecting and Containing Encryption-Based Attacks
Introduction Etairos Health, a healthcare services provider, has agreed to settle class action litigation arising from an encryption-based c...
Daiichi Kosho Supply Chain Breach Exposes 8 Million Karaoke Customers — Detection and Third-Party Risk Response Guide
Daiichi Kosho Supply Chain Breach: 8 Million Records Out the Door Through a Trusted Partner Daiichi Kosho — one of the largest karaoke equip...
ClickFix, ClingSTUN, and MALFEX: Defending Against Newsletter Round 118's Multi-Platform Threat Wave
Introduction The latest Security Affairs malware research roundup (Round 118) is a snapshot of where the threat landscape actually sits in 2...