Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
RHYSIDA Ransomware Gang: 3 New Leak-Site Claims — US Professional Services & Government Targeting Analysis and Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-10 | Source: ransomware.live leak-site monitoring | Nature of data: Unverified threat-...
FBI Arrests Negotiation Firm Co-Founder in ShinyHunters Probe: Third-Party IR Risk and Data Exfiltration Defense Guide
When the People You Hire to Fight Extortionists Become the Extortionists In my 15+ years running incident response engagements, I've told cl...
ARTEX AI and Claude Agents Weaponized Against South Korean Banks: Detecting AI-Orchestrated Intrusion Tooling in Your Environment
The Attack: AI Tooling Crosses the Line from Assistant to Operator Earlier this month, South Korea's financial sector was hit by a series of...
Debian DSA-6550-1: Ghostscript Document-Processing RCE and DoS — Detection, Patching, and Hardening Guide
Introduction Debian has issued security advisory DSA-6550-1 addressing multiple vulnerabilities in Ghostscript, the GPL-licensed PostScript ...
Ransomware Affiliate Betrayal, WhatsApp RAT, and Malicious Dev Packages: A Defender's Playbook for the Latest ThreatsDay Roundup
When the Criminals Can't Trust Each Other Either This week's ThreatsDay roundup is a useful reminder that operational security failures are ...
Flax Typhoon MicroScan/FishHub Disrupted: Detect and Evict Chinese State-Sponsored C2 in Critical Infrastructure
Introduction The FBI’s seizure of seven domains attributed to the Chinese state-sponsored actor tracked as Flax Typhoon is a useful disrupti...
Pixel 10 Remote Exploits at Pwn2Own Ireland 2026: What Defenders Must Do Before Patches Ship
Introduction On October 8, 2026, at Pwn2Own Ireland in Cork, three independent research teams demonstrated working remote compromises of Goo...
ChromeOS Stable Update 16805.33.0 Patches Kernel GPU Use-After-Free and crosvm Sandbox Weakening — Patch and Hunt Guide
ChromeOS 16805.33.0: Kernel Memory Corruption and VM Sandbox Weakening Fixed in Stable Channel Google has pushed ChromeOS 16805.33.0 (browse...
Shadow AI Agents: Finding and Governing the Third-Party AI Your SSO Can't See (2026 State of Agent Security)
The Identity Stack Only Governs What Authenticates Through It The 2026 State of Agent Security Report landed on a number every CISO and SOC ...