Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
macOS LotL Abuse & Supply Chain Compromise: ThreatsDay Defense Guide
Introduction The ThreatsDay Bulletin this week paints a stark picture of the modern threat landscape: a $290M DeFi heist, rampant abuse of m...
CVE-2026-28747: Milesight Camera Unauthenticated RCE — Detection and Hardening Guide
Introduction CISA has released ICSA-26-113-03, detailing a cluster of critical security vulnerabilities affecting Milesight IP Camera series...
Bridging the AI Agent Authority Gap: Continuous Observability and Governance
Bridging the AI Agent Authority Gap: Continuous Observability and Governance Introduction Enterprises are rapidly deploying AI agents to aut...
CVE-2025-65856: Xiongmai XM530 IP Camera Authentication Bypass — Detection and Hardening Guide
CVE-2025-65856: Xiongmai XM530 IP Camera Authentication Bypass — Detection and Hardening Guide Introduction CISA has released ICS Advisory I...
NASA Social Engineering Campaign — Detection and Defense Guide
NASA Social Engineering Campaign — Detection and Defense Guide Introduction The Office of Inspector General (OIG) for the National Aeronauti...
Mastodon and Bluesky DDoS Outages: Volumetric and Application Layer Defense
Introduction The decentralized social web faced a harsh stress test recently as high-profile Distributed Denial of Service (DDoS) campaigns ...
Bitwarden CLI npm Compromise: Detecting Malicious @bitwarden/cli Packages (v2024.8.0, v2024.7.1)
Introduction The software supply chain was struck again when attackers compromised the official Bitwarden CLI npm package, @bitwarden/cli. B...
UNC6692 Microsoft Teams Phishing: Detecting SNOW Malware and IT Helpdesk Impersonation
UNC6692 Microsoft Teams Phishing: Detecting SNOW Malware and IT Helpdesk Impersonation Introduction A new threat cluster, tracked as UNC6692...
Rapid7 Glasswing: Adapting Supply Chain Defense to AI-Driven Vulnerability Discovery
Introduction The recent discourse surrounding Rapid7’s Glasswing has primarily fixated on the velocity at which AI can identify vulnerabilit...