Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ToxicPanda Android Banking Trojan Abuses VPN Permissions and Blocks Google Play — Detection and Response Guide
ToxicPanda's Evolution: VPN Abuse, Play Protect Blocking, and a 349-App Target List The ToxicPanda Android banking trojan — a family we've t...
Microsoft Classic Outlook Theme for New Outlook: Change Management and Security Implications for M365 Admins
Introduction Microsoft has begun rolling out a Classic Outlook theme for users of Outlook on the web and the New Outlook for Windows, per re...
9,300 Leaked AWS Access Keys Still Active: Detection and Remediation Guide for Exposed IAM Credentials
Introduction Security researchers have confirmed that more than 9,300 Amazon Web Services access keys exposed publicly between August 2022 a...
TikTok's $400 Million COPPA Settlement: What the DoJ Child Privacy Case Teaches Defenders About Data Governance
TikTok Agrees to $400 Million Settlement — and Every Organization Handling User Data Should Pay Attention On Friday, the U.S. Department of ...
Android Car Malware Hijacks DoFun Head Unit Updaters for Ad Fraud and Proxy Botnet — Detection and Response Guide
Introduction Kaspersky researchers have disclosed a new malware family purpose-built to infect Android-based vehicle head unit firmware deve...
Active Threat to Siemens S7 PLCs: AI-Accelerated Exploitation of Exposed ICS — Detection and Hardening Guide
Introduction A joint cybersecurity advisory from multiple U.S. government agencies confirms what many of us in OT security have been dreadin...
AI-Generated Reconnaissance Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure — OT Detection and Hardening Guide
Introduction On Wednesday, the U.S. government issued an "active threat" warning: adversaries are using AI-generated reconnaissance and capa...
CVE-2026-27875: Johnson Controls Simplex Incident Manager Credential Exposure — Detection and Remediation Guide
CVE-2026-27875: Cleartext Credentials in Johnson Controls Simplex Incident Manager Memory CISA has published ICS Advisory ICSA-26-232-01 cov...
AI-Generated Exploit Scripts Targeting Exposed Siemens S7 PLCs: Detection and Hardening Guide for OT Defenders
Introduction A recent U.S. government advisory has put industrial control system (ICS) operators on notice: threat actors are actively deplo...