Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

RecordBreaker Malware: From Initial Infection to System Compromise

RecordBreaker is a malware family first observed in July 2022 and classified as both an infostealer and banking trojan. It targets x86 and x86-64 environments and is built to steal authentication data, collect system and user information, communicate with command-and-control infrastructure, and install additional components. Its operational profile also includes remote machine access, fraud-enabling activity, and system control, making it a flexible post-compromise tool.

Rubrik AI + Identity Resilience Summit | Recap

AI is reshaping how we build and how we're attacked, often at the same time. If an agent can touch the data that runs your business, that data has to be recoverable. The Rubrik AI + Identity Resilience Summit brought together security leaders to answer one question: what does resilience look like when agents operate on both sides of the perimeter? From identity recovery to securing the agents inside your environment, every session is now available on demand.

Ep. 84 - ShinyHunters Leaked 5,000 Agents' Home Addresses Over One FBI Advisory

ShinyHunters breached FBIJobs.gov, leaked personal data on roughly 5,000 Bureau personnel—including 14 staffers tied to China-focused counterintelligence—and triggered arrests in Amsterdam and Jordan. We separate what the FBI confirmed from what the crew claimed: the unverified Oracle PeopleSoft zero-day, the vishing and OAuth token abuse behind 140+ breaches, and why the arrests wound the brand but not the playbook. Plus, the four controls worth validating this week, starting with FIDO2.

XWorm Malware: Worming Its Way From Entry to Exploitation

XWorm is a versatile modular malware that presents a multifaceted threat landscape. This malware can be employed for various malicious purposes, including remote access, data theft, ransomware delivery, and botnet creation. Despite being relatively new in the cyber threat landscape, XWorm has rapidly gained notoriety, largely due to its association with the DDGroup cybercrime group, renowned for its utilization of advanced malware techniques.

The first 72 hours of a ransomware attack: Why restored isn't recovered

You start the day with reports that your employees cannot access critical systems. A ransom note soon explains why: attackers have encrypted them and demand $2 million in bitcoin for a decryption key. Your team contains the attack and confirms that the backups are safe, yet this is only the beginning. Restoring your servers can take weeks, but recovering the business can take much longer.

Block malicious packages across your organization with Supply Chain Firewall and Datadog Code Security

Campaigns such as Shai-Hulud 2.0 have demonstrated how quickly package malware can propagate through npm and then harvest credentials. Traditional dependency scanning can identify known risks in code once a package is added to the code, but security teams also need a check before installation.

Recover OT Systems After Ransomware with Acronis Cyber Protect

When ransomware disrupts a manufacturing site, every minute of downtime matters. See how Acronis Cyber Protect supports the controlled recovery of engineering servers, SCADA systems and manufacturing databases from a last known good state, helping OT and IT teams verify system integrity and resume production with confidence.

SalatStealer Malware: Inside a Credential Stealer Built for Repeat Use

SalatStealer is a Go-based infostealer family first observed in August 2026, built for x86 Windows environments and focused on credential theft. Its documented capabilities include stealing authentication credentials, hiding executing code, and degrading security software.

Rubrik MSP Unscripted Episode 7 - Featuring Rajat Shah

In this episode of MSP Unscripted, Nawaz Ali sits down with Rajat Shah, Product Manager at Rubrik, to talk about the launch of multi-tenancy and what it means for managed service providers. Nawaz and Rajat discuss how shared infrastructure can help MSPs improve service economics while maintaining strong tenant isolation, expand opportunities across SMB and mid-market customers, and make services such as Backup as a Service, Disaster Recovery as a Service, isolated recovery environments, and advanced cyber recovery capabilities more scalable.