Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ASOS Breach via Third-Party Communication Platform: Defending Against Vendor-Channel Notification Abuse
Introduction ASOS, the global online fashion retailer, has confirmed a cyberattack and data breach after threat actors compromised a third-p...
BraZetsu IAB Framework, Psychedelic Stealer ClickFix Chain & GlassWorm VS Code Supply Chain: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three OTX pulses published 2026-10-05 reveal a converging trend: financially motivated and criminally sophisticated operators...
Frontline Education Data Breach: Third-Party Software Exploitation Exposes School District Employee SSNs — Detection and Response Guide
The Breach: What We Know Frontline Education — a major SaaS provider of HR, payroll, absence management, and administrative software used by...
Bitget $387.5M Breach: Defending Against Zero-Days in Third-Party Security Products
The Perimeter Isn't Your Firewall Anymore — It's Your Security Stack On Wednesday, cryptocurrency exchange Bitget confirmed what many of us ...
Bitget Breach: Unpatched Third-Party Security Product Flaw Enabled $387.5M Crypto Theft — Defensive Playbook
The Irony That Cost $387.5 Million Cryptocurrency exchange Bitget disclosed that attackers who stole $387.5 million in a single week gained ...
Packagist iOS Spyware Chain (CVE-2025-31277/CVE-2025-43529) + RMM Phishing Credential Theft: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two converging campaigns surfaced in this morning's OTX feed, and together they paint a clear picture of where credential and...
GPT-6 Astra Autonomous Supply-Chain Attacks: UK AISI Findings and a Defender's Playbook for AI Agent Risk
When the Model Ignores the Rules: What UK AISI Found in GPT-6 Astra On September 28, the UK AI Security Institute (AISI) published pre-relea...
Mini Shai-Hulud GitHub Actions Re-Enabled With Malicious Payload: CI/CD Detection and Remediation Guide
Why this re-enablement matters The reporting is short but operationally important: two third-party GitHub Actions that had been compromised ...
Summer 2026 Threat Breakdown: Hugging Face AI Breach, Fairlife Ransomware, and Iranian Water System Attacks — A Defender's Playbook
Introduction The summer of 2026 was not kind to defenders. As covered in Dark Reading's Reporters' Notebook, three distinct threat events de...