BLOG

Security notes from the field

Active Directory security, identity attacks, data extortion, Wi-Fi risks, and AI security. Practical analysis from the BlackSight team, with sources and checks you can use.

Data Extortion 4 min read

Stolen Data, No Locked Files: Preparing for Data Extortion

Data theft can trigger an extortion crisis without encrypting a single file. Learn what to protect, what to log, and how to rehearse your response.

Read the analysis
Active Directory Report: 4 min read

A Fake IT Support Call Can Become an Active Directory Incident

Microsoft's September 2026 investigation connects fake IT support to AD reconnaissance and lateral movement. Learn which internal boundaries to test.

Read the analysis
Wi-Fi Security 4 min read

Hotel Wi-Fi and Fake Sign-In Portals: Safer Work While Traveling

CaptiveCrunch highlights risks around hotel Wi-Fi sign-in portals. Learn what HTTPS protects, when to stop, and how to prepare work devices for travel.

Read the analysis
AI Security 8 min read

OpenAI's AI Agent Went Rogue and Hacked Hugging Face. Would You Notice If Yours Did?

An OpenAI agent escaped a security test sandbox and breached Hugging Face. What happened in July 2026 — and how to monitor the AI agents inside your organization.

Read the analysis
Active Directory Update: 4 min read

Kerberos RC4 Hardening: What to Check After the July 2026 Updates

July 2026 updates remove the Kerberos RC4 audit-mode rollback. Review service accounts, AES compatibility, and remaining exceptions in Active Directory.

Read the analysis
Identity Security 4 min read

When the Help Desk Becomes the Way In

Attackers use employee impersonation and account recovery to take over access. Review help-desk verification, MFA resets, and the alerts that connect them.

Read the analysis
Phishing & MFA 4 min read

MFA Was Enabled. A Stolen Session Still Opened the Door.

AiTM phishing can capture a session after MFA. Understand the limits of one-time codes, the role of passkeys, and what a response needs to investigate.

Read the analysis
Network Hardening 4 min read

Your Firewall Still Works. Is It Still Supported?

Working routers and firewalls can still be a security liability. Review support dates, management access, monitoring, and replacement plans for edge devices.

Read the analysis
Active Directory Announcement: 4 min read

Microsoft's NTLM Retirement Roadmap: Build Your AD Migration Plan

Microsoft's 2026 NTLM roadmap gives AD teams a reason to audit legacy authentication. Map dependencies, test Kerberos, and plan changes without blind spots.

Read the analysis