Stay informed with our latest blog posts.
APT29's CaptiveCrunch campaign hijacks hotel Wi-Fi captive portals to deliver the CornFlake RAT and steal MFA-protected credentials. Here's how it works and the one fix that actually stops it.
Read more: The Hotel Wi-Fi Trap: How Russian Spies are Weaponizing Captive Portals (And Why You Should Stick to 5G)
A Bluetooth glitch led to an unexpected discovery: AliExpress runs silent WebAudio processing as part of a browser fingerprinting anti-fraud system. Here's what was found and what it means for security and privacy.
Read more: AliExpress Is Using Silent WebAudio to Fingerprint Your Browser
Online puppy scams use stolen photos, fake breeders, and endless "fees" to steal your money and break your heart. Here's exactly how the trap is set and the one rule that protects you.
Read more: Fake Paws, Real Scams: How to Spot and Avoid Online Puppy Scams
UAC-0099 is hijacking trusted apps like Notepad++ and WinRAR through malicious plugins and DLL sideloading. Here's the full infection chain, based on CERT-UA's technical advisory.
Read more: UAC-0099 Weaponizes Notepad++ and WinRAR Plugins to Deliver Malware
Days after the Coldcard entropy vulnerability went public, a phishing campaign impersonating Coinkite began tricking users into installing remote access malware disguised as a hardware audit tool.
Read more: From Exploit to Phishing: How Attackers Weaponized the Coldcard Entropy Incident
Gift card and crypto scams work because attackers borrow someone else's identity: a celebrity, an investment manager, even a loved one's voice. Here's how the impersonation angle actually plays out.
Read more: How Impersonation Fuels Gift Card and Crypto Scams
A malicious Google Ad leads to a real chatgpt.com link, where a fake "Codex" install command hides a base64 payload that drops the MacSync infostealer. Here's the full chain.
Read more: How a Real ChatGPT Link Delivers Phishing via a Fake Codex Install
A self-propagating npm supply chain attack compromised keyv and 444+ packages with 2B+ monthly installs. Here's how Shai-Hulud works, why provenance checks aren't enough, and what security teams should do now.
Read more: Shai-Hulud Returns: The npm Supply Chain Worm Turning Stolen Credentials Into New Infections
Seven shifts in phishing and brand impersonation tracked in real time across the first half of 2026, benchmarked against the industry's leading threat research.
Read more: The Anatomy of Brand Attacks in the First Half of 2026
What digital risk protection (DRPS) services and tools actually do, how they work, real use cases with results, and how to choose the right provider.
Read more: Digital Risk Protection Services & Tools: The Complete 2026 Guide
Why executive monitoring has become essential as attackers increasingly target leadership identities through impersonation, deepfakes, and social engineering.
Read more: Executive Monitoring: Why It's Now Business-Critical
What the DMCA protects, how the takedown process works, the most common infringement scenarios, and how to file a notice that actually gets action.
Read more: DMCA Takedown Guide: What It Is & How to File One
Discover the hidden dangers of browser extension security risks. Learn how attackers use buy-and-infect tactics to compromise your data and how to stay safe.
Read more: 7 Critical Browser Extension Security Risks: How to Stay Safe in 2026