Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Critical MarkLogic Server Privilege Escalation: Delegated Manager-to-Admin Flaws — Patch 11.3.7 / 12.1.0 Now
Introduction Progress Software has disclosed 31 vulnerabilities in MarkLogic Server — its enterprise multi-model NoSQL database — and five o...
Norway Fines Microsoft-Owned Xandr $9.6M Over Grindr Data Sharing — Defending Against Unlawful Ad-Tech Data Flows
Introduction Norway's Data Protection Authority (Datatilsynet) has fined Xandr — the advertising technology company owned by Microsoft — NOK...
Bring Your Own Agent: Detecting and Containing Unmanaged AI Agents (Meta Muse, Instinct) in Your Enterprise
Bring Your Own Agent: The Shadow AI Problem Has an Autonomous Face Now The personal AI agent rollout is going about as smoothly as most of u...
ShinyHunters Crackdown: Defending SaaS and Cloud Platforms Against Vishing-Driven Data Extortion Campaigns
The Net Tightens — But the Playbook Is Still in Circulation The FBI's continued pressure campaign against ShinyHunters has produced another ...
AI Agents Are Reshaping Cybersecurity on Both Sides of the Line — A Defender's Playbook for 2026
The AI Arms Race Is No Longer Theoretical Security Affairs' third AI-Cybersecurity newsletter roundup makes one thing abundantly clear: arti...
FBI Strikes Back at ShinyHunters: Defending SaaS and Cloud Data Against OAuth Abuse and Extortion Campaigns
Introduction Dark Reading's recent editorial roundup highlighted two stories that should be on every CISO's radar this week: law enforcement...
ASOS Breach: How a Single Compromised SaaS Identity Becomes a Network Intrusion — Detection and Hardening Guide
Introduction The breach at British online retailer ASOS is the latest proof point for a pattern we've been tracking across IR engagements fo...
Criminal IP AITEM: Closing the Gap Between Attack Surface Discovery and Response — A Defender's Playbook
The Problem AITEM Is Trying to Solve Criminal IP has introduced AITEM (AI-powered Threat Exposure Management), positioning it as the next ev...
Flax Typhoon MicroScan/FishHub Disrupted: Detect and Evict Chinese State-Sponsored C2 in Critical Infrastructure
Introduction The FBI’s seizure of seven domains attributed to the Chinese state-sponsored actor tracked as Flax Typhoon is a useful disrupti...