Security Insights

Breaches, ransomware and regulation — analysed the day they break, with the practical lessons your team can act on. Free to read, no account required.

AllBreachesRansomwareRegulationVulnerabilitiesThreats
A photoreal wide-angle shot of a dimly lit enterprise server room at night, rows of glowing rack-mounted servers casting
LatestBreaches
5 min read·29 Jun 2026

ShinyHunters Breached NAIC via Oracle PeopleSoft Zero-Day — But the Regulator Says the Haul Was Mostly Junk

The National Association of Insurance Commissioners confirms attackers exploited an unpatched vulnerability in an internet-facing PeopleSoft server, while disputing the extortion crew's characterization of what was actually stolen.

By Marcus Hale, Head of Security Research
Photoreal editorial scene: a glowing digital key dissolving into streams of data inside a dark server room, shallow dept
Breaches
5 min read
20 Jun 2026

Klue Confirms OAuth Token Theft: Icarus Extortion Group Claims the Attack

The Vancouver-based competitive intelligence platform says attackers stole OAuth tokens and used them to reach customer Salesforce tenants — adding another entry to a growing list of SaaS-to-CRM supply-chain breaches.

A photoreal close-up editorial scene of a single physical combination padlock sitting on a dark brushed-metal surface, i
Breaches
5 min read
2 Jun 2026

Dashlane Brute-Force Attack Pulled Encrypted Vaults From Fewer Than 20 Accounts

An unknown actor targeted the 2FA layer on personal-plan accounts on May 31, 2026. The vaults left the server encrypted. Whether they stay that way depends entirely on how strong each user's master password is.

Ready to Reduce Your Human Cyber Risk?

Sign up and start training your team in minutes. No sales calls, no demos — just pick a plan and go. Phishing simulations, video courses, and certificates from day one.

Get Started InstantlyContact Us
train2secure analytics dashboard showing training completion stats and user progress