Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Chrome Zero-Day, Text-Based QR Phishing, and a Developer Supply Chain Attack: This Week's Defense Playbook
Introduction This week's recap from The Hacker News bundles four threads that share a common theme: attackers are deliberately engineering a...
Manchester Airports Group Breach: 8.8M Records Leaked via Third-Party Database — Detection and Third-Party Risk Remediation Guide
Introduction Manchester Airports Group (MAG) — operator of Manchester, London Stansted, and East Midlands airports — has confirmed a data br...
Invisible Unicode Tag Phishing Campaign Evading Microsoft 365 Email Filters: Detection and Blocking Guide
Introduction Microsoft's Security Research team is warning of an active, high-volume social engineering campaign that has pushed millions of...
Shai-Hulud Infostealer Now Scans 469 Credential Locations: Detection and Remediation Guide for Dev and CI/CD
Shai-Hulud Infostealer Now Scans 469 Credential Locations: Detection and Remediation Guide for Dev and CI/CD In early August, GitGuardian re...
CREST AI-Enabled Penetration Testing Accreditation: What the First Cohort Means for Security Buyers and Defenders
CREST Accreditation for AI-Enabled Pentesting Arrives — and Buyers Need a New Playbook CREST, the international not-for-profit accreditation...
Breeze Comet (UNC5669): Defending Brazilian Payment Systems Against a Fraud-Focused Intrusion Actor
Introduction Google Threat Intelligence Group (GTIG) and Mandiant have published attribution on a financially motivated intrusion actor trac...
CVE-2026-9586: Sangoma Switchvox SQL Injection Under Active Exploitation — Detection and Remediation Guide
CVE-2026-9586: Sangoma Switchvox SQL Injection Under Active Exploitation Sangoma Switchvox — the on-premises Unified Communications / VoIP P...
CVE-2026-82329: JFrog Artifactory Auth Bypass Under Active Exploitation — Detection and Remediation Guide
A Critical Artifactory Flaw Is Being Exploited — And Your Build Pipeline Is the Prize Within days of public disclosure, threat actors began ...
Wiz Continuous Vulnerability Assessment (CVA): Closing the Gap Between CVE Publication and Exploitation
Wiz has introduced Continuous Vulnerability Assessment (CVA), a capability designed to detect organizational exposure to newly published vul...