Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
AI-Generated Phishing Pages and MFA Session Theft: A Defender's Guide to Detecting and Stopping AiTM Account Takeovers
The Phishing Bar Just Hit the Floor Fake login pages are the oldest trick in the credential-theft playbook. What's changed in 2026 is not th...
CVE-2026-0257: Palo Alto PAN-OS/Prisma Access MFA Bypass Exploited by Qilin and INC — Detection and Remediation
CVE-2026-0257: Palo Alto PAN-OS/Prisma Access MFA Bypass Exploited by Qilin and INC — Detection and Remediation Palo Alto Networks has conti...
MITRE ATT&CK v20: Defending Against AI Abuse, MFA Bypass, and ICS Attacks on Water Utilities — Detection Strategies and Hunt Queries
Why ATT&CK v20 Matters to Your SOC Right Now MITRE has released version 20 of the ATT&CK knowledge base, and this update is not a routine ca...
UAT-11985 Google AitM Phishing Against Taiwan Research Affiliates: Detection and Hardening Guide
UAT-11985 Google AitM Phishing Against Taiwan Research Affiliates: Detection and Hardening Guide Researchers have disclosed an APT spear-soc...
Fake ChatGPT, Gemini, and Claude Ad Portals Steal Credentials and MFA Codes: Detection and Defense Guide
Introduction Researchers have disclosed an active, human-operated social engineering platform that impersonates advertising and business pro...
N0va Phishkit AiTM Campaigns Target US and EU Enterprises: Detection and Identity Hardening Guide
Introduction A new phishing kit tracked as N0va is actively targeting organizations across North America and Europe, and it represents the l...
GRIMWEDGE Chrome 0-Day Chain, Vwork Work-Profile Evasion & PREY-0058 MFA-Bypass Extortion: OTX Pulse Analysis — Enterprise Detection Pack
GRIMWEDGE Chrome 0-Day Chain, Vwork Work-Profile Evasion & PREY-0058 MFA-Bypass Extortion Classification: TLP:WHITE | Pulse Date: 2026-09-10...
The MFA Identity Trap: How Attackers Pass Authentication and What Defenders Must Detect Instead
When "Authenticated" Doesn't Mean "Trusted" A hard truth is circulating through the security community, crystallized in a recent SecurityWee...
Passkey Attacks Can Expose Synced FIDO2 Keys and Bypass Phishing-Resistant MFA: Detection and Hardening Guide
Overview Security researchers are describing a new class of attacks against passkeys that undermine two assumptions many organizations made ...