Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Midnight Blizzard CaptiveCrunch + UNC6671 Vishing Extortion Wave: OTX Pulse Analysis — Credential & OAuth Attack Detection Pack
Midnight Blizzard CaptiveCrunch + UNC6671 Vishing Extortion Wave: OTX Pulse Analysis — Credential & OAuth Attack Detection Pack Three concur...
CaptiveCrunch (Midnight Blizzard) & UNC6671 Vishing Extortion: OTX Pulse Analysis — M365 Credential Theft Detection Pack
Threat Summary Two concurrent OTX pulses reveal a coordinated surge in identity-centric attacks against Microsoft 365 and enterprise cloud e...
Midnight Blizzard CaptiveCrunch, codemado AiTM Phishing Stack, GhostDesk Spyware & WP-SHELLSTORM Webshell Botnet: OTX Pulse Analysis — Credential Theft Detection Pack
Threat Intelligence Briefing: AiTM Phishing Industrialization, Nation-State Captive Portal Abuse, and Mass Webshell Deployment Threat Summar...
Midnight Blizzard Hotel Wi-Fi Attacks: Defending Microsoft 365 Accounts Against Custom Malware
Introduction Microsoft has confirmed a sophisticated campaign orchestrated by the Russian state-sponsored threat actor Midnight Blizzard (AP...
Storm-2945 'CaptiveCrunch': Hotel Wi-Fi DNS Hijacking and M365 Token Theft Defense
Storm-2945 'CaptiveCrunch': Hotel Wi-Fi DNS Hijacking and M365 Token Theft Defense Introduction Since early May 2026, a sophisticated cyber-...
CaptiveCrunch: Defending Against Midnight Blizzard's Hotel Portal Compromise Campaign
CaptiveCrunch: Defending Against Midnight Blizzard's Hotel Portal Compromise Campaign Introduction Midnight Blizzard, the Russian state-spon...