Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
AI-Generated Phishing Pages and MFA Session Theft: A Defender's Guide to Detecting and Stopping AiTM Account Takeovers
The Phishing Bar Just Hit the Floor Fake login pages are the oldest trick in the credential-theft playbook. What's changed in 2026 is not th...
M365 AiTM Token Replay Campaign: 79 Organizations Compromised — Enterprise Detection Pack
Threat Summary An unidentified threat actor conducted a ten-week campaign between July and September 2026 targeting Microsoft 365 tenants. T...
Token-Spraying Attacks on Microsoft 365: Detecting and Defeating Session-Token BEC Campaigns
The Threat: Stolen Session Tokens, Sprayed at Scale Security researchers have identified a widespread campaign in which threat actors are at...
Global Phishing-as-a-Service Takedown: Defending Against Industrial-Scale Social Engineering After 1 Billion Malicious Messages
Introduction Law enforcement agencies and private-sector partners have disrupted one of the largest cybercriminal ecosystems ever measured: ...
TA419 AitM Phishing Campaign Targets U.S. AI Policy Experts: Detection and Defense Guide for Microsoft 365 Tenants
Introduction A China-nexus cyber espionage group tracked as TA419 has been attributed to a series of adversary-in-the-middle (AitM) social e...
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack Threat Summary Two li...
Browser-Based Attacks in 2026: Detection and Defense Guide for the Six Techniques Breaching Enterprise Perimeters
The Browser Is the New Perimeter — and Attackers Know It If your incident response statistics from the last 18 months look anything like our...
Mirage2FA PhaaS Session Hijacking + BlackCore Influence-for-Hire: OTX Pulse Analysis — Enterprise Detection Pack
Mirage2FA PhaaS Session Hijacking + BlackCore Influence-for-Hire: OTX Pulse Analysis Two pulses surfaced on AlienVault OTX this week that, w...
Offside Wallet Theft Factory, Mirage2FA AiTM, and PurpleDelta DPRK Employment Fraud: OTX Enterprise Detection Pack
Offside Wallet Theft Factory, Mirage2FA AiTM, and PurpleDelta DPRK Employment Fraud Threat Summary The three OTX pulses converge on one ente...