Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Hasbro Employee Data Breach: Defending HR and Payroll Systems from PII Exfiltration
Hasbro Confirms Employee Data Breach — What Defenders Should Take From It Hasbro, one of the world's largest toy and game companies, has dis...
Berlin State Network Breach: Defending Government Networks Against Data Theft and Extortion After Confirmed Exfiltration
Berlin Refuses to Pay: Anatomy of a Government Network Compromise Berlin's state government has confirmed it is the target of an extortion a...
Executive SSNs for Sale: Defending Against Identity-as-a-Service Dark Web Marketplaces — Detection and Response Guide
Overview Rapid7's threat research team recently published findings on what they describe as an "Identity-as-a-Service" economy operating acr...
Qilin Ransomware Breach at ATF Confirmed as 'Major Incident' — Detection and Response Guide for Defenders
Qilin Claims, ATF Confirms: A 'Major Incident' at a Federal Law Enforcement Agency The Bureau of Alcohol, Tobacco, Firearms and Explosives (...
Boston Scientific Cyberattack: Healthcare and MedTech SOC Playbook for Global IT Disruption
Boston Scientific Cyberattack: What Defenders Should Do Now Boston Scientific disclosed that a cyberattack disrupted portions of its IT envi...
Dark Caracal's GoCaracal Espionage Framework: Detection, Hunting, and Defense Guide for SOC Teams
Introduction Dark Caracal — the long-running cyber espionage group previously tied to the Crosswalk and Operation Manul campaigns and widely...
CISA Red Team Breached Two Critical Infrastructure Orgs — Detection Engineering Lessons from a Double Domain Compromise
When the Red Team Owns the Domain — and Nobody Notices CISA has published the results of two red team assessments it ran simultaneously agai...
LACMA Data Breach Exposed Social Security and Medical Data: Incident Response Lessons and Detection Guidance for Defenders
LACMA Data Breach: When a Museum Becomes a PII Custodian The Los Angeles County Museum of Art (LACMA) has disclosed a data breach from last ...
E4del and PINHOLE RATs: Detecting FTP Banner Dead Drop Resolvers Before C2 Resolution
Threat actors have found a new place to hide their command-and-control addresses: inside the welcome banners of public FTP servers. A newly ...