Introduction F5 Labs honeynet sensors recorded a sharp increase in Microsoft Exchange exploitation activity during April 2026, driven primarily by renewed interest in the ProxyShell vulnerability chain. While these vulnerabilities…
An overwhelming share of the user credentials that are later abused in identity-based attacks arise from the compromise of unmanaged user devices. “Infostealers” are the generic name given to the…
Instability linked to the Iran conflict has pushed many organizations across the Middle East to activate continuity plans. In practice, one of the fastest and most common actions was a…
In this article In October 2025, Microsoft Threat Intelligence identified destructive wiping activity and uncovered a sophisticated Go programming language (Golang)-based backdoor we now track as GigaWiper, a versatile implant…
Inside the Cisco Live SOC At Cisco Live AMER, the Security Operations Center (SOC) is more than a demo environment. It is a working security operations center protecting the event…
RSA and ECC, cryptographic algorithms that we’ve all relied on for decades, are vulnerable to the attack of sufficiently advanced quantum computers. Such quantum computers do not exist yet, but…
Executive Summary During the March–April 2026 reporting period, AI use in offensive operations advanced from development and planning to real-time operational deployment. Multiple independent cases, involving individual criminal actors, mass…
For years, organizations treated operational technology (OT), Internet of Things (IoT), and embedded devices differently from traditional IT assets. Many of these systems were designed to operate for decades with…
Executive summary Rapid7 researchers have identified a sophisticated malware campaign attributed to the threat actor “Dropping Elephant,” characterized by the use of a China-themed decoy document to deliver a heavily…
A representative finding from current engagements: human identity governance at Stage 4 — central IAM, MFA, lifecycle managed — and agent governance at Stage 1, with agents recently inventoried but…
