Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Dormant account access leads to unauthorized control of
A threat actor gained domain admin and SCADA access to a city's water utility by compromising a dormant account belonging to a former employee who reu
GitHub Confirms Theft of 4,000 Internal Repositories
GitHub has confirmed a data breach involving the unauthorized access and theft of approximately 4,000 internal code repositories.
Process and Culture Failures Identified as Primary Drivers
New research indicates that internal procedural failures and organizational culture, rather than technical vulnerabilities, are the leading causes of
CISA Contractor Leaks AWS GovCloud Credentials on Public
A CISA contractor exposed plaintext AWS GovCloud keys and internal system credentials on a public GitHub repository.
Scattered Spider Member Tyler Robert Buchanan Pleads Guilty
Tyler Robert Buchanan, a senior member of the Scattered Spider cybercrime group, pleaded guilty to wire fraud and identity theft for his role in massi
Russian APT28 Hackers Hijack DNS on 18,000 Routers to Steal
Russian state-backed group Forest Blizzard (APT28) compromised over 18,000 SOHO routers by hijacking DNS settings to intercept Microsoft Office authen