Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1296 articles
Scott Small of Tidal Cyber recommends using MITRE ATT&CK to prioritize pre-attack defenses, map techniques to vulnerabilities, and identify stolen credentials for targeted resets. He says AI can structure CTI data and accelerate known attack techniques.
Zscaler forecasts that AI-powered attacks, insecure AI-generated code, data-only ransomware extortion, risks to connected infrastructure, and supply-chain compromise will shape the 2026 threat landscape, alongside greater use of AI defense and security consolidation.
The article forecasts that identity attacks, social engineering, infostealer-enabled access, no-encryption extortion, AI-assisted scams, online fraud and geopolitically driven disruption will remain prominent cyber risks in 2026.
Wiz introduces SITF, an open framework for modeling attacks across SDLC infrastructure. It maps techniques to risks and controls, and demonstrates the approach with a Shai-Hulud 2.0 attack-flow analysis.
A guide for cybersecurity startups argues that customer trust is built through education, credible demonstrations, easy validation, honest sales, and sustained go-to-market experimentation—not fear-mongering.
A podcast discusses how malicious LLMs can help users generate phishing, malware and ransomware, and recommends awareness, independent verification, security culture and international cooperation to reduce risk.
Deep Instinct argues that cloud security controls may not reveal malware hidden in stored files and promotes scanning cloud data before files are uploaded or executed.
Casey Beaumont of Marsh McLennan discusses reducing incident-response friction through unified leadership, assessing vendors after breaches, and the value of information-sharing communities for cyber threat intelligence.
A Cybersecurity Club session recapped CCSP exam preparation, cloud security career paths, and practical guidance on AI, DevSecOps, and study resources.
A 2025 review surveys attacks on agentic browsers, vendor safeguards and remaining prompt-injection risks. It recommends isolated browser profiles, keeping human confirmations enabled and limiting agents to low-stakes tasks.
Two Arizona CISOs discuss public-sector security challenges, collective defense, AI-enabled threats and risks to critical infrastructure. Michael Moore cites 2024 election-related bomb threats affecting every county as a real-world consequence of misinformation.
The author argues that Europe’s dependence on foreign digital services and cybersecurity products undermines its sovereignty, and calls for more homegrown companies, EU procurement, investment, and room for innovation.
Huntress explains how its EDR collects telemetry across Windows, macOS, and Linux, and why it prioritizes platform-specific security value over identical features. The company says its ransomware canaries generated over 260 alerts tied to confirmed ransomware behavior.
The article explains quantum-related encryption risks, NIST’s post-quantum standards, and steps for preparing systems. It recommends inventorying vulnerable cryptography and prioritizing TLS and SSH key exchanges to reduce harvest-now, decrypt-later exposure.
Huntress’s cybersecurity glossary explains attack methods, malware, identity security, data protection and security operations, including OAuth phishing, credential attacks and the roles of EDR, MDR and XDR.
A handbook for U.S. credit unions covers cyber threats, ransomware, NCUA compliance, third-party risk and security maturity, with guidance tailored to five asset tiers and a six-step test-and-validation loop.
An overview of how compromised suppliers and integrations can expose connected organizations, with recommendations for visibility, verification, vendor accountability, least privilege, and limiting the impact of compromise.
Darktrace experts predict that AI agents, prompt injection, AI-enabled cybercrime, human-targeted scams, and attacks on SaaS providers will intensify cybersecurity risks in 2026.
An explainer says dark-web markets are often unreliable and scam-filled, while stolen data and illicit goods still circulate. Holiday-themed offers are mostly cosmetic, but phishing mirrors, fake marketplaces, and account-takeover attempts pose risks.
An overview of university cyberattacks, including major breaches, reported education-sector trends, the risks of ransomware and data theft, and basic steps schools can take to improve security.
An explainer on how researchers name and profile threat actors using recurring behaviors, tools, infrastructure, and targeting, and how darknet communities and intelligence sources help investigators track their activity.
An explainer describes threat hunting as proactive searches for hidden threats, outlines common approaches and steps, and offers general advice on using intelligence, understanding normal activity, and turning successful hunts into detections.
Trellix threat intelligence leader John Fokker discusses his law-enforcement background, AI’s effect on attacks, Black Basta, and why CISOs should integrate threat intelligence into fraud prevention.
A Huntress webinar walkthrough shows how attackers can use phishing and ClickFix to steal Microsoft 365 session tokens, bypass MFA, hijack an account, and abuse inbox rules and connected services. The article also outlines defensive measures.
