Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ACR Stealer & ClickFix: Detecting Browser Token Theft and M365 Data Exfiltration
Introduction Defenders are currently facing a renewed and highly effective infection chain using "ClickFix" social engineering to deploy the...
GoldenEyeDog Code-Signing Abuse: Detecting Stolen Certificates from DigiCert Breach
GoldenEyeDog Code-Signing Abuse: Detecting Stolen Certificates from DigiCert Breach Introduction The July 2026 breach of DigiCert represents...
HollowByte: OpenSSL Memory Exhaustion Flaw — Detection and Mitigation Strategies
Introduction A critical vulnerability, dubbed HollowByte, has been identified impacting OpenSSL servers. This flaw allows unauthenticated at...
Leveraging Real-Time Intelligence to Disrupt APT Infrastructure and C2
Introduction Advanced Persistent Threats (APT) remain the most dangerous adversaries in the modern cybersecurity landscape. As we move throu...
Google Cloud 'Agentic Defense' Strategy: Automating Response to AI Attacks
Google Cloud 'Agentic Defense' Strategy: Automating Response to AI Attacks In 2026, the battlefield between attackers and defenders has shif...
Siemens ROX II Trilogy: Detecting and Containing the Chained Root Access Exploit
Introduction Unit 42 has released a critical technical analysis detailing a "Trilogy" of chained vulnerabilities affecting Siemens ROX II ru...
Scattered Spider TfL Breach: Defending Against Social Engineering and MFA Bypass
Introduction The recent sentencing of two high-profile members of the Scattered Spider (aka 0ktapus) collective to five years and six months...
CVE-2026-54798: Siemens SICAM 8 ICS Vulnerabilities — Detection and Remediation
Critical Vulnerabilities in Siemens SICAM 8: Analysis and Defensive Strategy Introduction Operational Technology (OT) defenders are on high ...
GPT-Red and the Hardening of GPT-5.6 Sol: Defending Against Automated Prompt Injection
Introduction OpenAI has dropped a curtain on its internal security operations with the disclosure of GPT-Red, an automated red-teaming model...