Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ACR Stealer & ClickFix: Detecting Browser Token Theft and M365 Data Exfiltration
Introduction Defenders are currently facing a renewed and highly effective infection chain using "ClickFix" social engineering to deploy the...
Unit 42 2026 Global IR Report: Defending Against AI-Augmented Attack Automation
Introduction The release of the Unit 42 2026 Global Incident Response Report marks a definitive shift in the threat landscape. We are no lon...
GoldenEyeDog Code-Signing Abuse: Detecting Stolen Certificates from DigiCert Breach
GoldenEyeDog Code-Signing Abuse: Detecting Stolen Certificates from DigiCert Breach Introduction The July 2026 breach of DigiCert represents...
Abbott Laboratories Breach: Defending Legacy Diagnostic Systems Against Extortion
Abbott Laboratories Breach: Defending Legacy Diagnostic Systems Against Extortion Introduction Abbott Laboratories is actively managing two ...
HollowByte: OpenSSL Memory Exhaustion Flaw — Detection and Mitigation Strategies
Introduction A critical vulnerability, dubbed HollowByte, has been identified impacting OpenSSL servers. This flaw allows unauthenticated at...
Leveraging Real-Time Intelligence to Disrupt APT Infrastructure and C2
Introduction Advanced Persistent Threats (APT) remain the most dangerous adversaries in the modern cybersecurity landscape. As we move throu...
Google Cloud 'Agentic Defense' Strategy: Automating Response to AI Attacks
Google Cloud 'Agentic Defense' Strategy: Automating Response to AI Attacks In 2026, the battlefield between attackers and defenders has shif...
CVE-2026-9292: Rockwell FactoryTalk DataMosaix Stored XSS — Detection and Mitigation
Introduction Defenders in the Critical Manufacturing and Information Technology sectors must immediately prioritize patching for a newly ide...
Siemens ROX II Trilogy: Detecting and Containing the Chained Root Access Exploit
Introduction Unit 42 has released a critical technical analysis detailing a "Trilogy" of chained vulnerabilities affecting Siemens ROX II ru...