Category: Security Operations Center
PolinRider: npm Supply Chain Attacks Meet Blockchain C2
Attackers hijacked ten npm packages and hid command-and-control on the Ethereum blockchain. Inside the PolinRider supply chain campaign. Read more
The Gentlemen Ransomware Surge: Tracked Attacks Nearly Tripled in One Week
Tracked attacks tied to The Gentlemen ransomware operation nearly tripled in one week – a 197% surge concentrated in healthcare and finance. Read more
Healthcare Under Attack: Ransomware’s Renewed Assault on Patient Data
Healthcare topped this week’s attack charts with 72 tracked incidents as ransomware crews surged. See what BlackBeam data shows and how to prepare. Read more
What Microsoft’s SMS and Voice Retirement Means for Your Organization
The deadline for Entra ID authentication changes is approaching and will affect many organizations. Passkeys became the default option for eligible users in September 2026, and Microsoft-provided text and phone-call verification is scheduled to end in 2027. If businesses are still relying on SMS or voice for multifactor authentication (MFA), it is now time to… Read more
The ConnectWise Breach: When Your Trusted Tools Become the Attack Path
ConnectWise suspended cloud services after stolen credentials reached Microsoft 365 tenants. What happened – and how to shrink your blast radius. Read more
Cyberattacks Went Physical: 50°C Freezers and a Ransomware Surge
French supermarkets lost food stock after attackers pushed freezers toward 50°C. Inside a 902-incident week: surging ransomware crews and the OT lesson. Read more
FortiBleed: From Credential Exposure to a Secure FortiGate State
FortiGate firewalls provide crucial security at the edge of an organization’s network. These firewalls protect internet-facing services, terminate VPN connections, enforce security policies, and provide the path into the internal network in many environments. When you are warned about potentially compromised FortiGate credentials across over 80,000+ verified devices across almost 200 countries, you should heed… Read more
Healthcare Under Attack: 83 Incidents in One Week and the Senate’s Answer
Hospitals and clinics absorbed 83 attacks in one week, tied with government as the most-targeted sector. Here is what the data says, and how to respond. Read more
Ransomware Is Running Hot: What 457 Attacks in One Week Reveal
Ransomware drove 457 of 1,068 tracked attacks this week — 43% of all incident volume. Who’s being hit, which crews are surging, and how to prepare. Read more
The Developer Is the Perimeter: Inside This Week’s Supply Chain Espionage Campaigns
1,090 attacks tracked this week — but the sharpest threat wasn’t ransomware. It was fake job tests and poisoned supply chains aimed at developers. Read more