Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Fake Roblox Cheats, npm RAT Clusters, and DarkSword Panels: Defending Against the Latest Malware Distribution Campaigns
Introduction The latest Security Affairs malware newsletter (Round 109) highlights three campaigns that should be on every SOC's radar this ...
RovoBlast: One-Click Atlassian Rovo AI Attack Exposed Confluence, Jira, and SharePoint Data — Detection and Hardening Guide
Introduction Varonis researchers have disclosed an attack technique dubbed RovoBlast that targeted Atlassian Rovo, the AI assistant embedded...
UNC6671 Vishing Campaign Targets Personal Phones to Bypass MFA and Steal SaaS Data — Detection and Hardening Guide
Introduction A data extortion group tracked as UNC6671 is running an active voice phishing (vishing) campaign against financial services, pr...
Beacon CRM Breach: 1,500 Charities' Data Exfiltrated — Third-Party Detection and Response Playbook
A Vendor Breach With Your Name on the Breach Notification Beacon, a CRM platform serving the non-profit sector, has notified approximately 1...
Fake IT Help Desk Phishing Campaign Hits Blackstone, Bridgewater, KKR: Detecting and Defeating MFA Credential Theft
Fake IT Help Desks Are Stealing MFA Credentials from Wall Street's Biggest Firms A coordinated phishing campaign operating under the aliases...
Meta AI Model Security Incident: Defending AI Evaluation Pipelines and Third-Party Dependencies
Meta Joins OpenAI and Anthropic in Reporting AI Security Incident Meta has disclosed that one of its AI models surfaced a third-party securi...
Cisco Catalyst SD-WAN and IOS XE Critical Flaws: Three CVSS 9.8 Bugs — Detection, Hardening, and Remediation Guide
Cisco Ships Fixes for 12 SD-WAN and IOS XE Flaws — Three of Them Are CVSS 9.8 Cisco has released security updates addressing a dozen vulnera...
4,400+ Rockwell PLCs Exposed Online — 22 Found in Cities Hit by Water Utility Cyberattacks: Exposure Discovery, Detection, and Hardening Guide
What Happened On August 3, Forescout researchers completed an internet-wide scan and counted 4,407 Rockwell Automation programmable logic co...
AWS, Google, and Vercel AI Agent Flaws Bypass Model Guardrails — Detection and Hardening Guide
Introduction Security researchers have disclosed a class of architectural flaws in agent infrastructure from Amazon Web Services, Google, an...