Expert Insights

Threat actors are using ChainScript, a newly discovered remote access trojan that can rotate its infrastructure without rebuilding its implant. Blackpoint researchers have watched the ChainScript remote access trojan switch to a new command server when it

For any organization that creates, receives, stores or transmits protected health information (PHI), HIPAA compliance is non-negotiable. This is a legal obligation that applies to not just healthcare providers, but to any company in charge of handling pri

Cyber Essentials is a UK government-backed scheme that helps organizations protect themselves against common cyber threats. The scheme is built around five key technical controls: firewalls, secure configuration, security update management, user access co

ISO 27001 compliance solutions make it easier for teams to achieve, maintain, and prove compliance with ISO/IEC 27001, the leading standard for information security management systems (ISMS). ISO/IEC 27001, commonly referred to as ISO 27001, aims to ensur

SOC 2 Compliance is an auditing framework that specifies how customer data should be protected and managed. The best SOC 2 Compliance platforms automate evidence collection, deliver continuous control monitoring, and prepare your systems for audit. This r

Fast Facts Headquarters: Miami, FL Founded: 2018 as Kandji; rebranded Iru in 2025 Ownership: Private, venture-backed; $300M raised to date Certifications: SOC 2 Type II, ISO 27001, ISO 42001 Delivery: Cloud SaaS, with US and EU tenant regions Iru's Approa

A SentinelLABS researcher has identified the Hugging Face accounts used by OpenAI's rogue agents in May, uncovering relay code, internal-network probes, and account-registration tooling that OpenAI's public timeline did not describe. SentinelLABS research

Cybersecurity and research outfit Forever Security has reported a way to manipulate AI assistants into hijacking a range of Chromium-based web browsers, potentially giving an attacker full access to any file on your computer. And it's all done without nee

BambooToken has been routing its command traffic through an MQTT (Message Queuing Telemetry Transport) broker, so infected machines never talk directly to the attacker's servers, according to research published Sept. 15 by Black Lotus Labs. Lumen's threat

A Russia-aligned group has planted a comment in its malware designed to make an AI code scanner refuse to look at the rest of the file, according to ESET. The comment asks for guidance on building a nuclear weapon. It sits in a Visual Basic Script (VBS) u