Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1296 articles
The author argues that security teams should vet negative information about people and organizations as rigorously as security intelligence, and suggests asking questions, requesting evidence, contacting the target, and assessing the source's history.
The article examines how slowing SaaS growth and AI agents could disrupt seat-based software economics, while cybersecurity remains a distinct, growing market facing consolidation and questions about AI, bundling, and tool stacks.
A promotional overview of HTB Academy’s hands-on cybersecurity training, including role-based and skill-based learning paths, offensive security modules, and a signup offer for 50 free cubes.
The article recommends mapping controls across the NIST Cybersecurity Framework’s five functions, then using the TaSM framework to prioritize safeguards against business-relevant threats. It promotes a virtual workshop on the approach.
CISO Aimee Cardwell discusses leadership, team empowerment and burnout prevention, and warns that AI-generated, personalized email conversations could enable convincing invoice fraud.
ANY.RUN analysts report more than 180 URLs in a week abusing Microsoft OAuth device authorization: victims enter attacker-generated codes on legitimate Microsoft pages, granting attackers tokens. The article describes SSL decryption exposing campaign scripts and network
Picus argues that AI-accelerated attacks widen the gap with manual defense workflows and describes a four-agent BAS approach for turning threat intelligence into safe simulations, evidence-based remediation, and re-testing in minutes.
CISO Hannah Suarez says organizations should align cybersecurity with business priorities, clarify cloud and supplier responsibilities, and select framework controls based on risk rather than treating compliance as a checklist.
A hands-on Nemesis 2.X development guide shows how to build and test file-enrichment modules, including LSASS minidump parsing with pypykatz, customize YARA and Nosey Parker rules, and create C2 connectors, with optional Claude Code and Codex skills.
Thermo Fisher incident response manager Matt McKnew discusses how playbooks and documentation improve response, ransomware’s shift to business-like operations, insider threats exploiting weak processes, and DPRK fake IT-worker scams.
The profile describes APT41’s dual espionage and financially motivated activity, exploit-driven access, stealth and persistence techniques, campaigns including TOUGHPROGRESS’s Google Calendar C2, and recommended defenses.
The article argues that AI can speed reconnaissance of internet-exposed US industrial control systems as Iranian-aligned groups mobilize, drawing on prior CyberAv3ngers activity and recommending restricting access, replacing default credentials, and blocking exposed ICS
CIS and SAFECode describe how government agencies can use Secure by Design practices to assess vendor software, build security into development, address legacy risks, and support zero-trust and resilient services.
The article explains how ransomware-as-a-service operators and affiliates divide roles, share revenue, and conduct extortion, and why affiliate activity can persist as ransomware brands are disrupted or rebranded.
The article explains how BEC campaigns can use stolen credentials, tokens, OAuth abuse, mailbox manipulation and forwarding rules to expand access and hide activity. It recommends monitoring identity behavior and correlating activity across SaaS platforms.
The Change Healthcare ransomware attack disrupted pharmacy services and exposed healthcare’s reliance on connected vendors. The article outlines defenses pharmacies can adopt, including MFA, EDR, staff training, vendor risk reviews, and offline backups.
SSO streamlines access to multiple applications through one login, while MFA adds identity checks. The article recommends combining them, favoring passkeys, biometrics, or push factors over SMS and one-time codes.
Tokio Marine HCC’s Alex Bovicelli says ransomware actors target SMBs at scale, often using brute force against SSL VPNs and other services. He recommends threat modeling, MFA, protected admin access and account lockout policies.
The article outlines how a threat matrix using the TaSM framework can help organizations map and prioritize AI risks, including data leaks, model supply-chain issues, and misuse, and promotes a live workshop on applying it.
The article argues that AI will blur the line between cybersecurity products and services, automate some SOC work, and push service providers toward scalable, continuous, productized managed defense.
A Huntress article recounts a trafficking survivor’s account of forced scam work in Southeast Asia, explains pig-butchering tactics and enabling infrastructure, and offers steps to help people avoid fraud.
Darktrace's 2026 threat report highlights stolen or misused accounts, automated attacks and shrinking exploitation timelines, arguing that CISOs need stronger runtime visibility, rapid response and resilience across AI, cloud and identity systems.
The article explains ethical and legal risks in dark web threat-intelligence research, drawing on DOJ guidance and recommending passive monitoring, written rules of engagement, thorough records, data minimization, and legal review before active engagement.
Cybersecurity Club highlights resources for cloud security certification, intelligence analysis, Munge vulnerability research, binary exploitation, reverse engineering, and foundational IT learning.
