An account-renaming sequence on a domain controller lasted only seconds. By the time it ended, the intrusion had moved from the use of an existing domain account to authentication as Administrator. Within another 12 minutes, the attacker had created a new Domain Admin account. The next morning, files were being encrypted. This case traces an intrusion involving activity consistent with noPac exploitation, an attacker-installed ScreenConnect service, PowerShell discovery, rclo

The firewall admin signs in on a Monday and the password is wrong. It worked on Friday. The admin list now holds an account called something like forticloud-sync that nobody remembers creating. Someone knew a password that still worked. On 6 October 2026, the FBI and the US Secret Service published joint advisory JCSA-20261006-01 on FortiBleed, "an active, global credential-compromise campaign" against internet-facing FortiGate firewalls and SSL VPN gateways. SOCRadar, cited

A reported AI-driven intrusion in Spain raises a harder question than which model was used: what could one successful login reach? Our analysis examines attack hypotheses, evidence gaps, preventive controls, and a practical SMB response plan.

A helpful AI tool can become a data exposure risk when access and rules are unclear. Follow these 10 AI security steps for small businesses, plus a practical 30-day plan for protecting data and managing compliance.

In today's fast-paced digital world, businesses face numerous cybersecurity threats. One of the most prevalent and financially damaging is Business Email Compromise (BEC). BEC attacks target large corporations and small businesses, resulting in massive financial losses. Inception Security offers comprehensive BEC Assessments that help protect your organization from these cyber threats. In this blog, we'll explore why every business needs BEC Assessments from Inception Securit