Insights
Welcome to the Black Belt Secure cybersecurity blog, your trusted source for the latest cybersecurity insights, news, and best practices in the ever-evolving world of digital security. Here, you’ll find a wealth of information covering everything from emerging threats and vulnerabilities to practical tips and strategies for protecting your business. Our cybersecurity blog is dedicated to empowering individuals and organizations with the knowledge they need to navigate the complex cybersecurity landscape and stay one step ahead of cybercriminals.
Dolphin X Malware Uses AI to Rank Its Own Victims — Here’s Why That Should Worry You
Credential-stealing malware has always had a numbers problem for the criminals behind it: steal logins from thousands of infected machines, and you still have to figure out which ones are actually worth your time. A newly analyzed remote access trojan called Dolphin X...
Hermes AI Agent Automates Attack on Thailand’s Ministry of Finance: What SMBs Need to Know
The Hermes AI agent is no longer just a research curiosity — it’s showing up inside real attacks, and the latest example hits close to home for anyone who thought “agentic AI” was still a few years off. Security researchers at Hunt.io and independent analyst Bob...
AI Autonomous Attack: How AI Just Launched a Major Attack All on Its Own
If you needed a wake-up call on why "the AI is behaving" is not the same thing as "the AI is contained," OpenAI just handed the security world one. A real-world AI autonomous attack unfolded inside a cybersecurity evaluation that was supposed to stay inside a sandbox...
Summer is Heating Up: Nation-State Actors Expand ORB Network Infrastructure
Summer usually means slower news cycles and shorter workweeks. Nation-state hackers didn't get the memo. A new report out this week from Cisco Talos shows a China-linked threat actor actively upgrading its malware arsenal to grow one of the most persistent pieces of...
AI-Powered Phishing Is Quickly Integrating into Attack Platforms. Here’s What You Need to Know.
For years, security teams have talked about AI-powered phishing as something on the horizon. That horizon has arrived — and it's not just theoretical anymore. It's showing up baked directly into the criminal tooling attackers use every day. The latest example is a...
Business Email Compromise: It’s Not Just a Scam — It’s an Operation
Most people have heard of Business Email Compromise (BEC) — the attack where someone impersonates your CEO or a vendor to redirect a payment. But the way it's often described makes it sound simpler than it really is. The truth, revealed in recent research into...
Hackers Exploit Fake ChatGPT Organizations in a New Malicious Use of AI
We talk a lot about how AI can be used to defend against cyberattacks — but attackers are just as interested in using AI platforms against you. A new threat campaign discovered this month proves the point in a clever and unsettling way, highlighting the growing risks...
Inside the Dark Web Credentials Superstore: How Cybercriminals Are Selling Your Passwords Like a SaaS Product
Most people picture a cybercriminal as a lone figure in a dark room, manually sifting through mountains of stolen data looking for something useful. The reality in 2026 is far more unsettling — and far more sophisticated. New research from threat intelligence firm...
3 Million Texas Hunting and Fishing Licenses Exposed: What the TPWD Breach Teaches Every Organization About Third-Party Risk
If you hold a Texas hunting or fishing license, your personal information may be in the hands of cybercriminals. The TPWD breach at the Texas Parks and Wildlife Department’s third-party licensing vendor has exposed the personal information of more than 3 million...
FortiBleed: 73,000 Fortinet VPN Credentials Exposed — What Your Business Needs to Do Right Now
If your organization runs a Fortinet FortiGate firewall — and hundreds of thousands of businesses do — you need to read this carefully. A newly discovered data leak dubbed "FortiBleed" has exposed what appears to be working VPN credentials for nearly 74,000 FortiGate...
Follow-up on the ShinyHunters Campaign: Infinite Campus Breach and Operation Riptide
A massive cyber extortion campaign continues to sweep through the education technology (EdTech) sector. The ShinyHunters campaign has struck again, with the threat group claiming responsibility for a major data breach at Infinite Campus. The threat group known as...
The REDCap Breach: Why State-Sponsored Hackers Are Targeting Medical Research Servers
In the world of cybersecurity, we often talk about defending intellectual property (IP) in defense, aerospace, or tech. However, the REDCap breach serves as a stark reminder that some of the most valuable IP on the planet right now sits inside medical and clinical...
Co Founder and Vice President
Peter Vavrosky, a cybersecurity expert with over 20 years of experience in infrastructure and network engineering, co-founded Black Belt Secure in 2020, transforming it into one of North Texas’ most acclaimed cybersecurity firms, recognized with multiple national awards. His work securing critical systems and designing tailored solutions for SMBs highlights his commitment to digital safety. As a university educator, Peter also shapes the next generation of cybersecurity professionals, while his speaking engagements across DFW inspire businesses to prioritize robust security. Read Peter’s full profile for more details.
Read More