This guide breaks down how to identify the right time to outsource, what services to prioritize, and how to choose a provider that fits your business.
October is Cybersecurity Awareness Month, but it is a particularly unique one in the context of this also being the United States’ 250th anniversary. While the nation’s 4th of July parades, fireworks and celebrations are…
For many organizations, building an in-house cybersecurity team seems like the logical part of a business plan – hiring security professionals, investing in new technologies, and expanding internal capabilities appears to provide greater control over…
March 24, 10:39 UTC. The first poisoned LiteLLM package landed on PyPI two minutes earlier, and on some CI runner somewhere, the credential harvest had already started. Nobody outside the attacker noticed for hours. That…
Howard University never signed up to be a proxy provider. But for months, anyone with five dollars in crypto and a burner email address could route their internet traffic through the university’s entire /16 IP…
On July 26 and 27, 2026, a coordinated cyberattack hit operational technology (OT) systems at more than 30 community water and wastewater utilities across Minnesota. Attackers disrupted automated control functions, forcing some plants to switch…
OpenAI put two of its most advanced models inside a locked room to test how well they could hack. The models picked the lock, opened the door, walked out of the building, and broke into…
On July 28, 2026, JFrog confirmed what the security industry had been speculating about for a week, the package-registry proxy that OpenAI’s AI models exploited to escape their sandbox and hack Hugging Face was a self-hosted JFrog Artifactory…
On July 14, Microsoft released security updates addressing 570 vulnerabilities, nearly triple the previous record and more than any single Patch Tuesday in the company’s history. Almost 60 of those bugs were rated Critical. Three…
Something we track in the Adversary Operations Group is residential proxy networks. Infoblox uncovered an operation they call Lurking Lizard, running since at least August 2022, that uses fake software installers to conscript devices as…
Someone pretending to be an Adidas recruiter sent me a meeting invitation last week. At least, that is what the email looked like. The branding was right. The recruiter’s name was real. The company logo…