RedNovember Espionage: How a China-Linked Threat Group Turns Edge Devices Into Intelligence Access
YMP Admin
Between June 2024 and July 2025, a Chinese state-sponsored threat group compromised or attempted to compromise perimeter appliances at government agencies, defense contractors, aerospace organizations, space research entities, and law firms across at least a dozen countries. The group is now called RedNovember. Recorded Future …
Lockheed Martin, Boeing and the 2025 Infostealer Threat: When Stolen Credentials Become a Data Exfiltration Problem
In February 2025, cybersecurity firm Hudson Rock published research that cut through a lot of enterprise security assumptions. Their findings: employees associated with Lockheed Martin, Boeing, Honeywell, and multiple U.S. military and government organizations had appeared in infostealer data. Stolen credentials, session cookies, VPN logins, …
From the Floor at Black Hat 2026: What We Saw, What It Means for You
The Scale of Black Hat and Why this Show Matters We were on the floor at Black Hat USA 2026, and if you want to understand where the cybersecurity industry is headed, this is the event that sets the trajectory. Now in its 29th year, Black Hat returned …
Video Content Protection: How to Secure Streaming Video from Unauthorized Downloads and Piracy
Premium video is now one of the most valuable digital assets a company can own. Studios, broadcasters, sports rights holders, and training platforms all depend on it for revenue. Yet many organizations still treat video security as an afterthought. They embed a player on a …
Cybersecurity for Government Contractors: Protecting Sensitive Files Without Slowing Critical Work
Government contractors handle sensitive files that need to move quickly and securely between internal teams, subcontractors, vendors, and agency partners. Strong cybersecurity for government contractors is about protecting that information wherever it lives and wherever it moves. This article covers the real risks, the requirements …
Healthcare Data Security: Solving Data Privacy and Security Challenges in Healthcare
Healthcare runs on trust. A patient hands over their diagnosis, their medications, and their family history, and they expect it to stay private. That trust sits on top of healthcare data security, the practice of keeping patient records safe from theft, leaks, and tampering. This …
FBI Alert: Outlook & OneDrive Hit by Kali365 Token-Stealing Phishing
Microsoft 365 Phishing Is No Longer Just a Password Problem. It’s a Cloud Workflow Security Problem TLDR: The FBI just warned about a phishing-as-a-service platform called Kali365 that steals Microsoft 365 access tokens instead of passwords. That means it can bypass multi-factor authentication without ever …
What H.R. 8710 Means for CMMC Compliance: A New Cybersecurity Bill for Defense Contractors
A new bipartisan House bill is moving through Congress that would fundamentally change how the Department of Defense handles cyber resilience and data recovery. H.R. 8710, formally known as the National Defense Data Resilience Act, requires the Pentagon to develop tested, measurable plans to restore …
UK Cyber Security and Resilience Bill Explained: Supply Chain, Incident Reporting, and What Enterprises Must Do Now
Executive Summary: The UK Cyber Security and Resilience Bill (CSRB) is the most significant overhaul of British cyber regulation since the Network and Information Systems Regulations 2018. The UK Government introduced the cyber security and resilience legislation on 12 November 2025, and Parliament has since …
What Is the OODA Loop in Cybersecurity? A Defender’s Playbook
TLDR: The OODA loop is a four-step decision-making process (Observe, Orient, Decide, Act) that helps security teams move faster than the attackers trying to breach their systems and data. It was developed by military strategist John Boyd, an Air Force fighter pilot, and now sits …
