Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Vishing Attack on Quantum Health: Defending Healthcare Networks Against Voice-Based Social Engineering and Help Desk Exploitation
Introduction Quantum Health, a major healthcare navigation and care coordination company, has disclosed a data breach after threat actors ga...
Ukraine Dismantles 94 Fraudulent Call Centers: Defending Your Organization Against Vishing and Investment Scam Operations
Ukraine's Takedown of 94 Fraudulent Call Centers: What Defenders Need to Know Ukrainian law enforcement, in coordinated raids across the cou...
O&O Syspectr RAT Masquerading as CNN, Avast & Stremio Apps: Lookalike-Domain Social Engineering Campaign — OTX Pulse Analysis
O&O Syspectr RAT Masquerading as CNN, Avast & Stremio Apps: Lookalike-Domain Social Engineering Campaign — OTX Pulse Analysis Threat Summary...
WhatsApp Scam Alerts and Signal Key Verification: What Meta's and Signal's New Anti-Fraud Features Mean for Enterprise Defenders
Introduction Two of the world's most widely deployed encrypted messaging platforms made notable security moves this week. WhatsApp unveiled ...
Sherlock Holmes, the Original Social Engineer: Defense Lessons for Modern Security Teams
Introduction A recent Dark Reading piece makes a point that anyone who has run a red team engagement already knows instinctively: Sherlock H...
Levi Strauss Social Engineering Breach: Defending Against Helpdesk Scams and Corporate Data Exfiltration
Introduction Levi Strauss & Co. has disclosed a cyberattack in which a threat actor used social engineering to gain access to the computers ...
IEH Defense Contractor Breach: M365 Inbox Compromise via Social Engineering — Detection and Hardening Guide
U.S. defense and aerospace manufacturer IEH Corporation has disclosed a breach stemming from a social engineering attack that gave threat ac...
ClickFix macOS Campaign Delivers Go-Based Crypto Stealer: Detection and Defense Guide for SOC Teams
Introduction The ClickFix social-engineering playbook — which has been hammering Windows environments with fake CAPTCHA and 'fix this error'...
ClickFix macOS Infostealer Campaign: Detecting and Defeating Go-Based Crypto Theft Malware
Introduction The ClickFix social engineering technique has crossed a meaningful threshold: it is now being used to deliver a Go-based infost...