Last week, our own endpoint security flagged powershell.exe as a malicious program on one of our developer workstations. Detection name: W32/Exploit.gen. Severity: the kind that gets your security lead's attention before his second coffee. The investigation took about an hour. The verdict: false positive. But the interesting part isn't that the alert was wrong. It's […]
What if that LinkedIn recruiter messaging your exec is just after their credit card? Unit 42 tracked attackers scraping LinkedIn to impersonate Palo Alto Networks recruiters, then charging senior professionals hundreds of dollars to fix a resume that was never broken. Most victims don't realize it's fraud until after they've paid. The campaign exploits job […]
What if your help desk just reset MFA for an attacker pretending to be an employee? This happened to dozens of organizations in 2025 when attackers called help desks, impersonated employees, and walked away with full Salesforce access. Your email filters didn't see it coming because the attack never touched email. Voice phishing became the […]
Ever wonder if your team actually remembers last month's phishing training? Most teams run annual training, check the box, then watch the same people click real phishing emails a month later. Generic content doesn't stick when threats keep evolving and employees have different risk profiles. Completion rates tell you who attended. They don't tell you […]
How many tabs did you open during your last security incident? Most SOC teams pull identity context from one tool, endpoint telemetry from another, then stitch remediation together manually while the threat keeps moving. Response usually takes longer than detection because the tools that find problems rarely talk to the tools that fix them. Why […]
What Happens in the First 29 Minutes Attackers move laterally across endpoints faster than most teams detect the initial compromise. By the time your alert fires, privilege escalation has already occurred and sensitive data is in motion. This window exists because encryption policies, DLP rules, and behavioral detection operate as separate controls. Each tool generates […]
Ever killed an afternoon hunting through docs for one setup command? Most teams open a chat, ask how to configure a REST monitor or fix a Windows Management Instrumentation (WMI) failure, then wait in queue for someone to paste a doc link. By then, you've already moved on or tried three wrong things. ManageEngine Applications […]
Think employees can still spot phishing by looking for typos? That strategy collapsed when attackers started using AI to write polished, personalized emails that bypass filters and look legitimate. According to KnowBe4's 2025 Phishing Threat Trends Report, 73% of phishing emails analyzed in 2024 showed signs of AI involvement. Your team is looking for red […]
Your Help Desk Got Hit This Week A caller impersonated a senior executive. Your help desk reset the password. Thirty minutes later, payroll data walked out the door. The incident report will note procedural failures. What it won't note: your help desk staff completed their annual security awareness training six months ago, right on schedule. […]
The Iran strikes happened Friday. The phishing surge hit Monday. Criminals launched phishing campaigns within 72 hours of the strikes, using fake invoices and shipping alerts tied to regional chaos. Your email filters caught the obvious stuff, but compressed files with malware hidden as .jar or .hta sailed right through. Across Gulf countries, phishing activity […]
