Galactic Research: Articles & Insights
Threat Thursday: August 20th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
AI Security
Part 2: The Security Controls Behind a Safe AI Deployment
From the Map to the Hike: The Four Controls and the Client Conversations Behind Them This is Part 2 in a series that covers your AI enablement plan. Part 1 is here if you want the full map. The Little ...
Ten of Eleven AI Coding Agents Failed a Decades-Old Attack
What GuardFall Tells Us About Where AI Security Controls Need to Live Picture a security guard stationed at the entrance of a building. Their job is to check IDs. They're good at it, fast and consistent, and the building's occupants ...
Perfect AI Guardrails Are Impossible. That's Not an Excuse for Ignoring Them.
What a NIST Mathematician Proved, Why the Internet Got it Wrong, and What Your AI Security Program Should Look Like Years ago, running an MSSP, I had a vendor pitch us a next-gen firewall on a single promise: one hundred ...
Threat Intelligence
Threat Thursday: August 20th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Threat Thursday: August 13th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Threat Thursday: August 6th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Security Education
The Browser Became the Endpoint. Your Security Stack Didn’t Notice.
An employee clicks a box that says “verify you’re human.” A prompt tells them to press a couple of keys, so they do. What they have actually done is paste and run a command that a script slipped onto their clipboard the moment they ...
Vulnerabilities Are Now the #1 Way In. The Window to Fix Them Is Closing.
Most of the time, I didn't break into a network so much as let myself in through something with a fix already out (just not installed yet): the VPN concentrator three versions behind, the firewall with a known vulnerability fixed ...
Your OSINT Reality Check: Here’s What an Attacker Is Finding in 30 Minutes or Less
Today’s connected, AI-driven digital ecosystem has made it easier than ever to build a professional brand, network with peers, and share ideas with a wider audience. It’s opened doors for businesses that simply didn't exist before: new customers, new partnerships, ...
Strategy & Leadership
An Open Letter From Your Cyber Risk Advisors
After the Water Attacks Last month, attackers reached into water treatment plants across a dozen states and started moving the controls. Some of them found out what happens when you do. I've been thinking about what to say to the ...
Building Trust in Executive Relationships: Lessons from King Lear
A Framework for Establishing the Kind of Trust that Survives Budget Season Imagine the curtain going up and a group of players act out the opening scenes of Shakespeare's King Lear, just for you. An aging king sits in his ...
Your Jokes Were Funny. They Still Didn't Renew.
How MSPs Build the Kind of Client Rapport That Survives a Budget Review You walked out of the meeting feeling good. The handshake was firm, the small talk landed, and you even got a laugh with the printer joke. You ...
All Articles
Adobe Flash Has Reached End of Life Status
Is your company's website built around Adobe's aging Flash Player? If so, be aware that you are officially on your own. Flash reached its EOL (End of Life) as of January 1st ...
Weak Passwords Are Making Easy Work For This New Malware
There's a new worm making the rounds on Windows and Linux-based servers that you should be aware of. This nasty bit of code has been spreading rapidly, using simple brute-force methods to ...
Security Incident Exposes Some T-Mobile Customer Data
In 2020, there have been a number of high-profile data breaches, and as we move closer to the end of the year, we have yet another to report. This time, cellular carrier ...
Be Careful Your Home Security Cameras Can Be Hacked
Various hackers around the world have found a new hobby. Recently, there has been a rise in "Swatting Attacks", which have seen hackers take advantage of the notoriously weak or nonexistent security ...
Kawasaki Is The Latest Company To Endure Data Breach
Japanese juggernaut Kawasaki Heavy Industries is the latest company to fall victim to a security breach. The company, which employs more than 35,000 people and has offices all over the globe recently ...
Does Cybersecurity Need a Neighborhood Watch?
There is now at least one new constant in our lives. I’m not referring to the pandemic. And I’m also not talking about our ...
Appliance Maker Whirlpool Suffers Ransomware Attack
In 2020, hackers around the world have increasingly gravitated to ransomware as their preferred method of attack. This year, there have been dozens of high-profile, successful attacks on companies around the world. ...
Millions Of Windows 7 Users Remain Despite Support Ending
One year ago, Microsoft officially ended support for the venerable Windows 7 operating system. No new security patches have been issued, which means that anyone running a Windows 7 machine at this ...
Google Storage Was The Cause Of Their Recent Global Outage
If you make extensive use of Google's products, you almost certainly noticed the worldwide outage of Google's services. As details continue to emerge about the outage, it's increasingly clear that Google has ...
New Malware Targeting Windows And Other Operating Systems
Researchers on the Global Research and Analysis Team (GReAT) at Kaspersky Lab have recently discovered a new malware strain dubbed PyMICROPSIA, currently being used by a group tracked as AridViper. AridViper operates ...
Latest iPhone iOS 14.3 Update Makes Privacy A Priority
If you have a smartphone, and these days, almost everyone has at least one, you're incredibly easy to track. That's especially true if you have more than a handful of apps on ...
Update WordPress Contact Form 7 Plugin Immediately For Security
Is your company's website built around WordPress? If so, you're certainly not alone. WordPress is, to this day, the simplest way to get a site up and running quickly. It's easy to ...
