Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Scattered Spider TfL Breach: Defending Against Social Engineering and MFA Bypass
Introduction The recent sentencing of two high-profile members of the Scattered Spider (aka 0ktapus) collective to five years and six months...
Active Phishing Campaign Targeting LastPass & Bitwarden: Detection and Hardening
Active Phishing Campaign Targeting LastPass & Bitwarden: Detection and Hardening Introduction Security operations centers (SOCs) and securit...
ClickFix Ecosystem: Defending Against the MaaS 'Fix-It' Scam and EDR Evasion
Introduction The cybersecurity landscape is currently witnessing the rapid commoditization of social engineering through the "ClickFix" ecos...
Tomorrowland 2026 Credential Harvesting Campaign: OTX Pulse Analysis — Phishing Infrastructure
Threat Summary The analyzed OTX pulse reveals a targeted social engineering campaign capitalizing on the high demand for Tomorrowland 2026 t...
Defending Against O-UNC-066: Fake Microsoft Entra Passkey Enrollment Attacks
Introduction Security Arsenal is tracking an active campaign identified by Okta as O-UNC-066, targeting organizations across multiple sector...
DEBULL Tooling: Microsoft 365 Device Code Flow Attack - Detection and Mitigation
Introduction Security teams are actively contending with a sophisticated social engineering campaign codenamed "DEBULL" that is hijacking Mi...
Defending Against EtherRAT: Detecting Fake Microsoft Teams IT Support Calls
Defending Against EtherRAT: Detecting Fake Microsoft Teams IT Support Calls Introduction Security Arsenal is tracking a sophisticated social...
BabaDeda Loader: ClickFix Malware Campaign Analysis — Enterprise Detection Pack
BabaDeda Loader: ClickFix Malware Campaign Analysis — Enterprise Detection Pack Threat Summary The OTX pulse reveals the BabaDeda loader, a ...
ARToken PhaaS & EvilTokens M365 Toolkit: Detection and Defense Strategies
ARToken PhaaS & EvilTokens M365 Toolkit: Detection and Defense Strategies Introduction Security researchers have exposed a new Social Engine...