Stay informed with our latest blog posts.
Attackers accessed DNI images and selfies from TuLotero's KYC service in July 2026. What is confirmed, what is claimed, and how operators stop the phishing that follows.
Read more: TuLotero KYC Breach: How Stolen IDs Fuel Gambling Phishing
A breach at DriveWealth, Revolut's US stock trading partner, exposed historical customer data. What happened, who is affected and how breach notices become phishing lures.
Read more: DriveWealth Breach: What Revolut Users Need to Know
A request sent from a real government email domain passed SPF, DKIM and DMARC and led Revolut to release passports and Bitcoin records. Here is what failed.
Read more: Revolut Data Leak: Fake Government Request Passed DMARC
A Steam Workshop map for MECCHA CHAMELEON dropped a RAT on players' PCs and led to a hijacked official Discord: what happened and what to check now.
Read more: MECCHA CHAMELEON Malware: Workshop Map to Discord Takeover
How online casinos detect account takeover: credential stuffing, deposit fraud signals, and the response steps that stop withdrawals before they clear.
Read more: Account Takeover in Online Casinos
Coordinated bonus abuse rings exploit iGaming promotions through shared infrastructure and scripted behavior. Learn how fraud teams detect and stop them.
Read more: Bonus Abuse in iGaming: Detecting Coordinated Rings
Affiliate fraud in iGaming takes three forms: domain typosquatting, brand bidding, and fake traffic. Detection signals and enforcement options for each.
Read more: Affiliate Fraud in iGaming: Detection and Prevention Guide
Gaming fraud prevention goes beyond iGaming: in-game currency abuse, account trading, and esports match-fixing all need a different detection approach. Here's how they compare.
Read more: Gaming Fraud Prevention: How It Differs From iGaming Across Platforms
iGaming operators face fraud that standard payment tools aren't built to handle. This guide covers how detection, takedowns, and enforcement actually work and what to look for in a solution.
Read more: iGaming Fraud Prevention: Detection, Enforcement, and What Actually Works
A self-propagating npm supply chain attack compromised keyv and 444+ packages with 2B+ monthly installs. Here's how Shai-Hulud works, why provenance checks aren't enough, and what security teams should do now.
Read more: Shai-Hulud Returns: The npm Supply Chain Worm Turning Stolen Credentials Into New Infections
Seven shifts in phishing and brand impersonation tracked in real time across the first half of 2026, benchmarked against the industry's leading threat research.
Read more: The Anatomy of Brand Attacks in the First Half of 2026
What digital risk protection (DRPS) services and tools actually do, how they work, real use cases with results, and how to choose the right provider.
Read more: Digital Risk Protection Services & Tools: The Complete 2026 Guide
Why executive monitoring has become essential as attackers increasingly target leadership identities through impersonation, deepfakes, and social engineering.
Read more: Executive Monitoring: Why It's Now Business-Critical