Tag · 146 Articles

security awareness. Tagged Articles.

Articles

Page 1 of 15

GitLab incoming email token exposure shown as a red laser path from a small coin to a glowing doorway in a dark room

security awareness

The Credential You Published on Purpose: How an Exposed GitLab Email Token Becomes Push Access to Main

A GitLab incoming email token in a public README stays valid until reset and lets anyone act as you by email. See how exposed docs widen attack surface.

Oct 2, 2026Read Article →

Ransomware leak site breach concept — a red-lit internal mechanism exposed through shattered glass, symbolizing compromised infrastructure

security awareness

The Leak Site Got Breached: What ShinyHunters’ Takeover of Clop Means for the Companies Listed on It

ShinyHunters breached Clop's ransomware leak site and says it holds the onion keys. What changes for listed companies, from re-extortion to forged listings.

Sep 23, 2026Read Article →

Non-human identity risk represented as a digital fingerprint over a circuit board

security awareness

Your Identity Program Was Built for People. Non-Human Identity Is a Growing Way In.

Non-human identity, from service accounts to API keys and AI agents, is a growing way into organisations. See why it is missed and how to cut the risk.

Sep 21, 2026Read Article →

Abandoned digital assets: dark forgotten building with lit windows representing accessible, unmonitored infrastructure

security awareness

When Abandoned Digital Assets Become Someone Else’s Infrastructure

Abandoned digital assets are reachable, unmonitored and still carry your name. See how a forgotten wiki became shared infrastructure and how to respond.

Sep 9, 2026Read Article →

Triple extortion ransomware attack model showing layered cyber threats

security awareness

What Is Triple Extortion? The Anatomy of the Encryption + Leakage + DDoS Trio

Triple extortion ransomware combines encryption, data leaks and DDoS. See how each layer works, a real case, and how to detect the attack early.

Apr 3, 2026Read Article →

AI-generated data leakage visual showing sensitive information spilling from an unsecured system

security awareness

From Shadow IT to Shadow AI: Clawdbot (Moltbot/Openclaw) and the Rise of Unmanaged Agent Gateways

Shadow AI explained: how unmanaged agents like Clawdbot, Moltbot and OpenClaw hold API keys behind unhardened gateways, with attack scenarios and fixes.

Jan 28, 2026Read Article →

Operation ForumTroll APT card showing Russia-aligned influence and espionage threat actor

security awareness

Operation ForumTroll: What Is Confirmed About the Chrome Zero-Day (CVE-2025-2783)

Operation ForumTroll is a name from one vendor report for a 2025 phishing campaign using a Chrome zero-day. See what NVD, Google and CISA confirm.

Jan 6, 2026Read Article →

security awareness

OldGremlin: A Stealthy Russian-Speaking Ransomware and Espionage Threat Group Evolving Into a Precision Striking APT

OldGremlin is a Russian-speaking, financially motivated group that mixes ransomware with slow APT-style intrusions. See how it attacks and how to defend.

Dec 29, 2025Read Article →

Callisto APT cyber espionage group – Russia-linked threat actor targeting NATO and government institutions

security awareness

Callisto APT: Russia’s Persistent Espionage Operator

Callisto (COLDRIVER, SEABORGIUM, TA446) profile: espionage active since at least 2015, with credential harvesting, spear-phishing and cloud persistence.

Dec 23, 2025Read Article →

security awareness

Angry Likho: Inside a Rapidly Growing Espionage Threat Targeting Eastern Europe

Angry Likho is a spear-phishing espionage group also tracked as Sticky Werewolf. See its aliases, tactics, targets and 2025 trends, plus defence tips.

Dec 17, 2025Read Article →

Brandefense

security awareness. Tagged Articles.

Articles

The Credential You Published on Purpose: How an Exposed GitLab Email Token Becomes Push Access to Main

The Leak Site Got Breached: What ShinyHunters’ Takeover of Clop Means for the Companies Listed on It

Your Identity Program Was Built for People. Non-Human Identity Is a Growing Way In.

When Abandoned Digital Assets Become Someone Else’s Infrastructure

What Is Triple Extortion? The Anatomy of the Encryption + Leakage + DDoS Trio

From Shadow IT to Shadow AI: Clawdbot (Moltbot/Openclaw) and the Rise of Unmanaged Agent Gateways

Operation ForumTroll: What Is Confirmed About the Chrome Zero-Day (CVE-2025-2783)

OldGremlin: A Stealthy Russian-Speaking Ransomware and Espionage Threat Group Evolving Into a Precision Striking APT

Callisto APT: Russia’s Persistent Espionage Operator

Angry Likho: Inside a Rapidly Growing Espionage Threat Targeting Eastern Europe

Continue Exploring.