Blog, Threat Intelligence

By harryth_xitx
July 6, 2026

Session Token Theft: How Attackers Are Walking Past MFA in 2025

Session Token Theft: How Attackers Are Walking Past MFA in 2025 Session token theft has become the dominant account takeover technique hitting small and mid-sized businesses in 2024 and 2025 — and most of...

Blog, Threat Intelligence

By harryth_xitx
July 3, 2026

Your Inbox Is Being Used Against Your Clients: What 2024 – 2025 BEC Incident Data Reveals

Business Email Compromise: What 2024–2025 BEC Incident Data Reveals About Your Inbox Business email compromise is usually framed as a financial crime — wire fraud, invoice manipulation, CEO impersonation. That framing is accurate but...

Blog, Threat Intelligence

By harryth_xitx
July 3, 2026

IT Helpdesk Impersonation: How a 10-Minute Phone Call Is Handing Hackers the Keys to Small Business Networks

IT Helpdesk Impersonation: How a 10-Minute Phone Call Is Handing Hackers the Keys to Small Business Networks IT helpdesk impersonation is now one of the most efficient initial access methods targeting small and mid-sized...

Blog, Threat Intelligence

By harryth_xitx
June 30, 2026

Inbox Rule Manipulation: How Attackers Quietly Drain Microsoft 365 Accounts Weeks Before You Know You’ve Been Hit

Inbox Rule Manipulation: How Attackers Quietly Drain Microsoft 365 Accounts Weeks Before You Know You've Been Hit Most small business owners never see this attack coming — and most IT firms aren't actively watching...

Blog, Threat Intelligence

By harryth_xitx
June 29, 2026

AI-Generated Phishing: Why the Warning Signs Employees Were Trained to Spot Have Disappeared

AI-Generated Phishing: Why the Warning Signs Employees Were Trained to Spot Have Disappeared AI-generated phishing has quietly dismantled a decade of security awareness training. The grammar mistakes, the odd phrasing, the sender name that...

Blog, Threat Intelligence

By harryth_xitx
June 27, 2026

OAuth App Permission Abuse: How Attackers Get Into Microsoft 365 and Google Workspace Without Touching a Password

OAuth App Permission Abuse: How Attackers Get Into Microsoft 365 and Google Workspace Without Touching a Password One of the most underestimated attack vectors hitting small and mid-sized businesses right now is the exploitation...

Blog, Threat Intelligence

By harryth_xitx
June 26, 2026

Living-Off-the-Land Attacks: How Ransomware Groups Turn Your Own IT Tools Against You

Living-Off-the-Land Attacks: How Ransomware Groups Turn Your Own IT Tools Against You Ransomware groups have stopped smuggling in exotic malware. Instead, they move through your network using tools that were already there when they...

Blog, Threat Intelligence

By harryth_xitx
June 23, 2026

How Attackers Hide Inside SharePoint, OneDrive, Google Drive, and Dropbox – And What to Do About It

Trusted Cloud Storage Attacks: How Attackers Hide Inside SharePoint, OneDrive, Google Drive, and Dropbox Your security tools are watching for connections to suspicious servers. Attackers stopped using suspicious servers. Today, malicious command-and-control traffic runs...

Blog, Threat Intelligence

By harryth_xitx
June 23, 2026

MFA Fatigue Attacks Are Bypassing Multi-Factor Authentication at Small Businesses – Here’s What the Data Shows

MFA Fatigue Attacks Are Bypassing Multi-Factor Authentication at Small Businesses - Here's What the Data Shows MFA fatigue attacks have become one of the most effective techniques in an attacker's playbook - not because...

Blog, Threat Intelligence

By harryth_xitx
June 21, 2026

IT/OT Convergence Attacks: What CISA Advisories Reveal About Small Business Risk

IT/OT Convergence Attacks: What CISA Advisories Reveal About Small Business Risk IT/OT convergence attacks are no longer reserved for pipeline operators and power grids. CISA's 2024 and 2025 advisories document a clear, accelerating pattern:...