Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Fake IT Help Desk Phishing Campaign Hits Blackstone, Bridgewater, KKR: Detecting and Defeating MFA Credential Theft
Fake IT Help Desks Are Stealing MFA Credentials from Wall Street's Biggest Firms A coordinated phishing campaign operating under the aliases...
Five Healthcare Providers Settle Pixel Class Actions — How to Audit and Lock Down Web Trackers Before You're Next
The Settlements Are a Warning Shot, Not an Anomaly Five more healthcare providers have agreed to settle class action lawsuits stemming from ...
Agentic AI for Cyber Defense: What Practitioners Built at Black Hat USA 2026 and How to Operationalize It Safely
Agentic AI for Cyber Defense: What Practitioners Built at Black Hat USA 2026 For the past two years, the agentic AI conversation in security...
CVE-2026-64638: WordPress Pre-Auth Reflected XSS in wp-login.php — Detection, Chaining Risk, and Remediation Guide
CVE-2026-64638: WordPress Pre-Auth Reflected XSS in wp-login.php — Detection, Chaining Risk, and Remediation Guide WordPress powers north of...
AI Browser Prompt Injection: Why OpenAI Atlas, Perplexity Comet, and Copilot Still Leak — And How to Defend Your Enterprise
Introduction The security community has been warning about prompt injection since the first LLM-powered assistants shipped, but new research...
AI-Discovered HTTP Desync Techniques and Unpatched Apache Traffic Server Flaw: Detection and Hardening Guide
The Threat Landscape Just Shifted: AI Is Now Finding Zero-Day-Class Web Flaws at Machine Scale James Kettle — PortSwigger's Director of Rese...
ENDLESSDOORS Router Backdoor + Legion Loader TDS + MUSTANG PANDA ZOHOMURK: OTX Pulse Analysis — Enterprise Detection Pack
ENDLESSDOORS Router Backdoor + Legion Loader TDS + MUSTANG PANDA ZOHOMURK Threat Summary Three concurrent threat activity clusters dominate ...
Vidar Stealer, Overlord RAT & MacSync: Cross-Platform Credential Theft Campaign — OTX Pulse Detection Pack
Vidar Stealer, Overlord RAT & MacSync: Cross-Platform Credential Theft Campaign — OTX Pulse Detection Pack Threat Summary Three concurrent O...
Vidar/XMRig Factory-v3, Vanta, MacSync ClickFix, UNC6671 Vishing and Storm-2755 AiTM: OTX Credential-Theft Detection Pack
Threat Summary The five pulses converge on one theme: industrialized credential and session theft feeding fraud, extortion and follow-on acc...