Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
DPRK Job Fraud Expands to Healthcare and Sales: Insider Threat Detection and Hiring Controls for Defenders
The Insider Threat Is No Longer Confined to Your Engineering Org For the past several years, the security community has tracked the DPRK IT ...
Chinese Spy Proxy Networks, Router Backdoors, and Off-Task AI Agents: A Defender's Playbook for This Week's Threats
Introduction This week's recap is a masterclass in a lesson I have been delivering to clients for over a decade: the boring parts of your en...
China-Nexus Actors Targeted DoJ, NASA, Federal Reserve, and DoE: What the DoJ Correction Means for Defenders
Introduction On Friday, the U.S. Department of Justice issued a correction to a prior statement: several U.S. government agencies — includin...
Debian DSA-6479-1: Roundcube Webmail Security Update — Patching, Detection, and Compromise Assessment Guide
Debian Ships Emergency Roundcube Webmail Fixes — What Defenders Must Do Now Debian's security team has published DSA-6479-1, a security upda...
Securing Cloud Assets in the Age of AI: What Every Enterprise Defender Needs to Do Now
Introduction Dark Reading's upcoming virtual event — What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI — lands ...
Qilin Ransomware Breaches ATF System Holding Investigation Target Data — Detection and Hardening Guide
Qilin Ransomware Hits ATF System Containing Investigation Target Data The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has conf...
FulcrumSec Manchester Airports Group Breach: 86 GB Data Theft — Detection, Hardening, and Incident Response Guide
Introduction Manchester Airports Group (MAG) — operator of Manchester, London Stansted, and East Midlands airports — has become the latest h...
TerminalFix ClickFix Campaign: Defending Against Fake CAPTCHA Lures, DLL Sideloading, and Reverse Tunnel Persistence
Introduction Microsoft Threat Intelligence has published analysis of TerminalFix, a multistage intrusion campaign that combines three techni...
ATF 'Major Incident' Ransomware Attack: Detection and Response Guidance for Government and Enterprise Defenders
Introduction The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed it is investigating what it describes as a 'major i...