Galactic Research: Articles & Insights
Threat Thursday: August 20th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
AI Security
Part 2: The Security Controls Behind a Safe AI Deployment
From the Map to the Hike: The Four Controls and the Client Conversations Behind Them This is Part 2 in a series that covers your AI enablement plan. Part 1 is here if you want the full map. The Little ...
Ten of Eleven AI Coding Agents Failed a Decades-Old Attack
What GuardFall Tells Us About Where AI Security Controls Need to Live Picture a security guard stationed at the entrance of a building. Their job is to check IDs. They're good at it, fast and consistent, and the building's occupants ...
Perfect AI Guardrails Are Impossible. That's Not an Excuse for Ignoring Them.
What a NIST Mathematician Proved, Why the Internet Got it Wrong, and What Your AI Security Program Should Look Like Years ago, running an MSSP, I had a vendor pitch us a next-gen firewall on a single promise: one hundred ...
Threat Intelligence
Threat Thursday: August 20th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Threat Thursday: August 13th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Threat Thursday: August 6th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Security Education
The Browser Became the Endpoint. Your Security Stack Didn’t Notice.
An employee clicks a box that says “verify you’re human.” A prompt tells them to press a couple of keys, so they do. What they have actually done is paste and run a command that a script slipped onto their clipboard the moment they ...
Vulnerabilities Are Now the #1 Way In. The Window to Fix Them Is Closing.
Most of the time, I didn't break into a network so much as let myself in through something with a fix already out (just not installed yet): the VPN concentrator three versions behind, the firewall with a known vulnerability fixed ...
Your OSINT Reality Check: Here’s What an Attacker Is Finding in 30 Minutes or Less
Today’s connected, AI-driven digital ecosystem has made it easier than ever to build a professional brand, network with peers, and share ideas with a wider audience. It’s opened doors for businesses that simply didn't exist before: new customers, new partnerships, ...
Strategy & Leadership
An Open Letter From Your Cyber Risk Advisors
After the Water Attacks Last month, attackers reached into water treatment plants across a dozen states and started moving the controls. Some of them found out what happens when you do. I've been thinking about what to say to the ...
Building Trust in Executive Relationships: Lessons from King Lear
A Framework for Establishing the Kind of Trust that Survives Budget Season Imagine the curtain going up and a group of players act out the opening scenes of Shakespeare's King Lear, just for you. An aging king sits in his ...
Your Jokes Were Funny. They Still Didn't Renew.
How MSPs Build the Kind of Client Rapport That Survives a Budget Review You walked out of the meeting feeling good. The handshake was firm, the small talk landed, and you even got a laugh with the printer joke. You ...
All Articles
Some High-Profile Twitter Accounts Were Recently Hacked
An as-yet unidentified hacker pulled off quite a heist on Twitter recently. He (or she) gained access to a Twitter Admin account, and used that access to rapidly take control of a ...
New Image Format Will Soon Get Browser Support
In 2015, a new image format was born of a collaboration between Cisco, Google, and Xiph.org. Dubbed AVIF, the format is based on the Av1 video codec. It is royalty-free and widely ...
Latest Microsoft Update Provides Some Needed Bug Fixes
If you aren't normally in the habit of installing updates when companies release them, you'll probably want to make an exception for KB4484439. It is a non-security update for Windows Installer editions ...
Don’t Fall For Office 365 Zoom Notification Phishing Email
Do you use Microsoft Office 365? Do you also use Zoom? If so, be advised that there's a new phishing campaign designed with you specifically in mind, the goal of which is ...
Corporate Internet Users Watch Out For Conti Ransomware
Although you may not be familiar with the name, a strain of ransomware called "Conti" is surging in popularity on the Dark Web and seeing a rapidly growing number of installations, so ...
Is your data safe? Can you account for all of it?
Today more than any other time in work life, we are dealing with tremendous amounts of data, but too often we aren’t ...
Windows 10 Might Get Rid Of Control Panel Feature
All things end eventually, and in the years since Microsoft's Windows has existed, the OS has undergone a great many changes. Most for the better, but some that have met with unexpected ...
Billions Of Breached User Credentials Are Available For Purchase
On a regular basis, we see headlines talking about how this or that company got hacked and X number of employee or customer logins got exposed. However, since those headlines happen in ...
Apple Music Might Be Draining Some iPhone Batteries
Apple users are in a state of absolute uproar. Recently, battery life has taken a hit, with batteries draining more quickly than ever, sending legions of iPhone users on a hunt to ...
Trickbot Malware Has A New Trick Up Its Sleeves
Malware Lab's researcher Maciej Kotowicz has made an intriguing discovery that makes the Trickbot banking trojan even more of a threat. The most recent strain of the malware he looked at is ...
Some Google GSuite Apps Require Updating To Continue Working
Mark the date August 12th, 2020 on your calendar if you're a GSuite user. Google has warned users that unless they update their GSuite iOS and Android apps, they may stop working ...
Pirated Mac Applications Could Contain ThiefQuest Ransomware
If you have one or more illegal copies of Apple software on your Mac, be aware that there's a new threat to be concerned about. An info-stealing, data wiping malware strain known ...
