Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
TVRAT and DarkVNC Campaign Infected 80,000 Freelancers — Detection and Defense Guide for SOC Teams
The Indictment and Why It Matters to Every Enterprise SOC A federal grand jury in California has indicted a Russian national for orchestrati...
Counterfeit Installer Campaign: Detecting and Blocking Trojanized Software Downloads with Microsoft Defender XDR
What Happened Microsoft Defender Experts has published findings on an active, ongoing campaign in which threat actors impersonate legitimate...
13 Malicious Packagist Composer Packages Deploy iOS Spyware — Detection and Removal Guide
Thirteen Trojanized Composer Themes Are Turning PHP Sites Into Spyware Distribution Points Supply-chain compromises through open-source pack...
UAC-0099 'GuardBreaker' Attack: Russia-Aligned Actors Weaponize LLM Safety Filters to Blind AI-Assisted Malware Analysis — Detection and Defense Guide
Introduction ESET researchers have disclosed a novel anti-analysis technique — dubbed GuardBreaker — deployed by the Russia-aligned threat a...
DPRK Job Fraud Expands to Healthcare and Sales: Insider Threat Detection and Hiring Controls for Defenders
The Insider Threat Is No Longer Confined to Your Engineering Org For the past several years, the security community has tracked the DPRK IT ...
Chinese Spy Proxy Networks, Router Backdoors, and Off-Task AI Agents: A Defender's Playbook for This Week's Threats
Introduction This week's recap is a masterclass in a lesson I have been delivering to clients for over a decade: the boring parts of your en...
China-Nexus Actors Targeted DoJ, NASA, Federal Reserve, and DoE: What the DoJ Correction Means for Defenders
Introduction On Friday, the U.S. Department of Justice issued a correction to a prior statement: several U.S. government agencies — includin...
Securing Cloud Assets in the Age of AI: What Every Enterprise Defender Needs to Do Now
Introduction Dark Reading's upcoming virtual event — What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI — lands ...
FulcrumSec Manchester Airports Group Breach: 86 GB Data Theft — Detection, Hardening, and Incident Response Guide
Introduction Manchester Airports Group (MAG) — operator of Manchester, London Stansted, and East Midlands airports — has become the latest h...