Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Epic MyChart Phishing Campaign Hits U.S. Health Systems: Detection and Defense Guide for Healthcare Security Teams
Epic MyChart Phishing Campaign: What Healthcare Defenders Need to Know More than a dozen U.S. health care systems have issued warnings to pa...
Vanilla Tempest ClickFix Cluster: Supper Malware + DLL Sideloading via MSI & NodeJS — OTX Detection Pack
Threat Summary A live AlienVault OTX pulse authored by the AlienVault research team documents a coordinated ClickFix campaign cluster attrib...
SysScan Fake AV Scam Network + RecruitTrap Mobile Credential Phishing: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two distinct but complementary social-engineering campaigns surfaced in OTX telemetry on 2026-08-25, and together they paint ...
ShinyHunters Impersonates Security Staff to Breach ReliaQuest: Detecting and Defeating Help Desk Social Engineering
Introduction ReliaQuest — a well-known managed detection and response provider — has publicly confirmed that one of its own employees was ta...
Russia-Linked Espionage Clusters Abuse OAuth Device Code Flow and WhatsApp: Detection and Defense Guide
Overview Google's Threat Intelligence Group (GTIG) has disclosed tracking of three separate suspected Russia-linked cyber espionage clusters...
SynkLoader Malware via Microsoft Teams Phishing: Detection, Hunting, and Hardening Guide
SynkLoader: Teams-Borne Social Engineering That Ends With a Fake Lock Screen A previously undocumented malware family tracked as SynkLoader ...
Social Engineering 3.0: Defending Against Autonomous AI Phishing Agents — Detection and Hardening Guide
Social Engineering 3.0: The Fight Moves to Agent Versus Agent For a decade, email security followed one model: scan the message, find someth...
Kriminal AI Platform: Defending Against Guardrail-Free AI Phishing, Deepfake Social Engineering, and Automated OSINT Recon
Introduction Security researchers have documented the emergence of Kriminal, an AI platform that advertises exactly what mainstream provider...
Ransom Busters Recovery Scam: Rogue Ransomware Affiliate Poses as Decryption Firm to Double-Dip Victims — Detection and Response Guide
The Con: When Your 'Savior' Is Your Attacker Security researchers have identified a suspected ransomware affiliate running a brazen secondar...