Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Polymarket Supply Chain Attack: $2M+ Stolen via Hijacked Sessions — Detection and Response Guide for Defenders
Introduction More than $2 million was siphoned from Polymarket traders after attackers injected malicious code linked to a website monitorin...
AI-Generated Phishing Pages and MFA Session Theft: A Defender's Guide to Detecting and Stopping AiTM Account Takeovers
The Phishing Bar Just Hit the Floor Fake login pages are the oldest trick in the credential-theft playbook. What's changed in 2026 is not th...
ICMacOS Stealer-to-RAT Evolution + DarkCore Session-Hijacking RAT: OTX Pulse Analysis — Enterprise Detection Pack
ICMacOS Stealer-to-RAT Evolution + DarkCore Session-Hijacking RAT: Enterprise Detection Pack Two concurrent OTX pulses published 2026-10-27 ...
Microsoft 365 Token-Replay Attacks: Defending Against AitM Session Hijacking and Credential Theft
Introduction In early October 2026, security researchers at Huntress disclosed a widespread campaign targeting Microsoft 365 environments. B...
M365 AiTM Token Replay Campaign: 79 Organizations Compromised — Enterprise Detection Pack
Threat Summary An unidentified threat actor conducted a ten-week campaign between July and September 2026 targeting Microsoft 365 tenants. T...
Token-Spraying Attacks on Microsoft 365: Detecting and Defeating Session-Token BEC Campaigns
The Threat: Stolen Session Tokens, Sprayed at Scale Security researchers have identified a widespread campaign in which threat actors are at...
CVE-2026-102489: Zammad Session Hijacking Flaw Added to CISA KEV — Detection, Hunting, and Remediation Guide
When the U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a vulnerability to its Known Exploited Vulnerabilities (KEV) cata...
EDR Blind Spot: How Browser-Based Attacks Steal Sessions, Abuse Extensions, and Evade Endpoint Telemetry — Detection and Hardening Guide
The Endpoint Telemetry Gap Is Now the Attacker's Front Door A recent analysis from NordLayer, covered by BleepingComputer, puts words to som...
Mirage2FA PhaaS Session Hijacking + BlackCore Influence-for-Hire: OTX Pulse Analysis — Enterprise Detection Pack
Mirage2FA PhaaS Session Hijacking + BlackCore Influence-for-Hire: OTX Pulse Analysis Two pulses surfaced on AlienVault OTX this week that, w...