Our Blog
A DevOps laptop may have started the Binance attack that moved about $6.3 billion. What happened, where controls failed, and how to check if the same path exists in your organisation.
Reading time 15 minutes
The 2024 Snowflake customer account intrusions show how attackers can exploit exposed credentials, weak identity controls and insecure SaaS configurations without exploiting a software vulnerability. This operational failure analysis examines the control gaps, maps practical lessons to a vulnerability management workflow, and outlines measures to identify, prioritise and remediate risks that CVE-based processes alone may miss.
Reading time 15 minutes
MFA can successfully authenticate a user while attackers still gain access by stealing the session that follows. This article examines how adversary-in-the-middle phishing, session hijacking and token theft bypass conventional security monitoring, and what security teams can do to detect and prevent post-authentication compromise.
Reading time 15 minutes
Attackers breached Okta's support system, stealing session tokens from 18,400 users. Learn the four control failures that enabled the attack, why MFA didn't help, how other organisation avoided compromise and get a security operator checklist with actions to take to protect your organisation.
Reading time 10 Minutes