Living Off the Pipeline: Defending Against CI/CD Subversion
The software supply chain has become one of the most attractive targets for modern adversaries, but the attacks seen in 2025 did not focus solely on poisoning dependencies or hijacking…
-
-
Why AI Governance Without Guardrails Is Theater
AI governance is a key enterprise concern. Organizations are assembling councils, publishing principles, rolling out “approved AI tools” lists, and asking employees to opt in to acceptable use policies. In…
-
Identifying and detecting ScoutC2 malware
At Corelight Labs, our mission is to help organizations stay a step ahead of evolving threats. When our researchers came across Censys’ detailed write-up on ScoutC2, a rapidly growing open-source…
-
Varonis Recognized as a Customers’ Choice for Data Security Posture Management for Third Consecutive Year
At Varonis, our customers are central to everything we do. That’s why we are exceptionally proud to have Varonis named as a Customers’ Choice in the 2026 Gartner® Peer Insights…
-
Microsoft Exchange ProxyShell Scanning Doubles in April 2026 as Two Distinct Campaign Clusters Emerge
Introduction F5 Labs honeynet sensors recorded a sharp increase in Microsoft Exchange exploitation activity during April 2026, driven primarily by renewed interest in the ProxyShell vulnerability chain. While these vulnerabilities…
-
How this ClickFix campaign leads to Redline Stealer
An overwhelming share of the user credentials that are later abused in identity-based attacks arise from the compromise of unmanaged user devices. “Infostealers” are the generic name given to the…
-
When the Middle East Went Remote: A Case Study in Coping with the Unexpected
Instability linked to the Iran conflict has pushed many organizations across the Middle East to activate continuity plans. In practice, one of the fastest and most common actions was a…
-
GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
In this article In October 2025, Microsoft Threat Intelligence identified destructive wiping activity and uncovered a sophisticated Go programming language (Golang)-based backdoor we now track as GigaWiper, a versatile implant…
-
What Working the Cisco Live SOC Taught Me About AI, Detection, and Response
Inside the Cisco Live SOC At Cisco Live AMER, the Security Operations Center (SOC) is more than a demo environment. It is a working security operations center protecting the event…
-
Why we cannot wait for better post-quantum signature algorithms
RSA and ECC, cryptographic algorithms that we’ve all relied on for decades, are vulnerable to the attack of sufficiently advanced quantum computers. Such quantum computers do not exist yet, but…
