Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
FBI Strikes Back at ShinyHunters: Defending SaaS and Cloud Data Against OAuth Abuse and Extortion Campaigns
Introduction Dark Reading's recent editorial roundup highlighted two stories that should be on every CISO's radar this week: law enforcement...
Shadow AI Agents: Finding and Governing the Third-Party AI Your SSO Can't See (2026 State of Agent Security)
The Identity Stack Only Governs What Authenticates Through It The 2026 State of Agent Security Report landed on a number every CISO and SOC ...
ShinyHunters Arrest After FBI Breach: Defending Against SaaS Data Theft and Extortion Campaigns
Introduction FBI Director Kash Patel announced Friday the arrest of another suspected member of the ShinyHunters extortion group, believed t...
ShinyHunters Arrest in Amsterdam: What Defenders Must Do Now to Stop SaaS Data Theft and Extortion
ShinyHunters Arrest in Amsterdam: What Defenders Must Do Now to Stop SaaS Data Theft and Extortion Dutch national police (Politie Landelijke...
Real-World Google Workspace Breaches: Defensive Lessons on Social Engineering and Malicious OAuth Apps
Introduction Tomorrow's webinar on real-world Google Workspace breaches, covered by BleepingComputer, arrives at a moment when identity-laye...
RingCentral Breach by ShinyHunters: 1.6M Accounts Exposed — SaaS Exfiltration Detection and Response Guide
Introduction The ShinyHunters extortion group has claimed a breach of RingCentral that exposed personal information from approximately 1.6 m...
Midnight Blizzard CaptiveCrunch + UNC6671 Vishing Extortion Wave: OTX Pulse Analysis — Credential & OAuth Attack Detection Pack
Midnight Blizzard CaptiveCrunch + UNC6671 Vishing Extortion Wave: OTX Pulse Analysis — Credential & OAuth Attack Detection Pack Three concur...
Cisco SD-WAN Zero-Day & GitHub Actions Abuse: Supply Chain Credential Theft
Intelligence Briefing: Multi-Vector Supply Chain & Credential Theft Campaign Threat Summary Recent OTX pulses indicate a coordinated surge i...
Icarus Threat Group: Klue Supply Chain Attack & OAuth Token Theft — Detection Engineering
Threat Summary The Icarus threat group has launched a sophisticated supply chain attack targeting Klue, a market intelligence platform used ...