Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
UNC1069 Axios Supply Chain Attack: Detection and Remediation for Malicious npm Packages
UNC1069 Axios Supply Chain Attack: Detection and Remediation for Malicious npm Packages Introduction On March 31, the open-source ecosystem ...
Elastic Cloud SIEM Abused for Data Exfiltration: Detection and Hunting Guide
Introduction Huntress researchers have uncovered a concerning campaign where threat actors actively leverage security vulnerabilities to exf...
Red Teaming 2026: Integrating Continuous Threat Defense into SOC Operations
The paradigm for red teaming is undergoing a fundamental shift in 2026. As highlighted in the agenda for the upcoming Rapid7 Global Cybersec...
UK Associate Cyber Security Professional Title: Standardizing Entry-Level Talent for SOC Teams
Introduction The UK Cyber Security Council has officially launched the "Associate Cyber Security Professional" title, a strategic move aimed...
NPM Supply Chain Attack: Malicious Axios Versions (1.6.0-1.6.2) Detection and Remediation
Introduction The open-source ecosystem suffered a significant trust breach when the popular HTTP client library Axios was compromised. Threa...
n8n Webhook Abuse Campaigns: Detection and Hardening Guide
Introduction Since October 2025, security researchers have observed a significant shift in adversarial tactics involving workflow automation...
APT37 RokRAT Campaign: Facebook Social Engineering Detection and Hardening Guide
Introduction A recently observed campaign attributed to the North Korean threat group APT37 (also known as ScarCruft or Reaper) highlights a...
CVE-2026-33032: nginx-ui 'MCPwn' Auth Bypass — Detection and Hardening Guide
Introduction A critical security vulnerability (CVE-2026-33032), tracked as MCPwn, has been identified in nginx-ui, an open-source web-based...
Insider Risk 2025: $19.5M Cost Impact and Strategic Defense Guide
Insider Risk 2025: $19.5M Cost Impact and Strategic Defense Guide Introduction The 2025 DTEX Insider Risk Report has landed, and the data is...