Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1296 articles
Wiz explains how exposed services, weak credentials and excessive permissions can enable code execution or data theft, with examples involving Selenium Grid, Spring Boot Actuator and PostgreSQL, and recommends inventory, perimeter scanning and CI/CD checks.
OONI Probe tests websites, messaging apps, circumvention tools, connection quality, and middleboxes for signs of interference. OONI Explorer lets users browse anonymized measurements collected worldwide.
Brex and FICO security leaders describe using AI to prioritize risks, accelerate remediation, and manage cloud complexity, while advocating for security integrated into engineering and responsible AI adoption.
The article explains how files can expose details such as location, creation time, and device model, and reviews metadata-removal options for mobile and desktop devices, along with limitations and file-integrity cautions.
Daniel Plo hmann discusses his path into malware analysis, Malpedia’s curated malware-family data, and how MCRIT uses code similarity to support malware analysis, family identification, and rule generation.
Huntress challenges five Microsoft 365 identity-security assumptions, arguing that defenders should look beyond logins, MFA and impossible-travel alerts, account for Conditional Access gaps, and tune detections to their environments.
Ahead of the Dutch Grand Prix, the article surveys cyber risks to Formula 1 teams and fans, including deepfake impersonation, malicious apps, hospitality and travel scams, crypto fraud, telemetry threats and phishing, with protective advice.
Credential stuffing uses automated login attempts with previously exposed email-and-password pairs. The article describes reported examples and recommends unique passwords, a password manager, and MFA for users, plus rate limiting and monitoring for websites.
Huntress researchers explored underground forums and marketplaces, describing their offerings, BreachForums’ reported compromise, ransomware leak-site pressure tactics, and discussions about testing Huntress’ EDR platform.
The article explains how scammers exploit Ganesh Chaturthi with fake shops, prizes, event passes, delivery alerts and payment requests, and shares precautions for avoiding fraud. CloudSek also identifies fraudulent shopping sites and social media ads.
In a Women’s Equality Day interview, former CIA Deputy Director for Digital Innovation Jennifer Ewbank discusses her career, ways organizations can broaden participation, and advice for people considering cybersecurity.
Huntress reviews 10 major cyber incidents and enforcement actions from 2017 to 2025, highlighting lessons about software supply chains, patching, credential security, ransomware, and coordinated defense.
The article offers parents practical guidance for discussing online risks with children, recognizing grooming and extortion warning signs, and reporting incidents to platforms, NCMEC, or law enforcement.
A Huntress guide compiles breach statistics on causes, costs, affected industries, data types and response, citing 2024–2025 figures, and recommends measures including passkeys, least privilege, employee training, EDR and incident-response planning.
Grammarly says a workflow combining Wiz MCP, LLMs, and internal tools reduced tier-1 security ticket investigation time from 30–45 minutes to a maximum of four minutes. The company says it later expanded automation to other security tasks.
Huntress explains how its Sensitive Data Mode blocks SOC retrieval of high-risk file types that may contain CUI while allowing analysts to investigate executable files and scripts. The feature is available on request.
A DarkOwl webinar explains how the dark web and Tor work, what kinds of data and criminal activity appear there, and how investigators can monitor those spaces while protecting their operational security.
A Huntress webinar recap examines hacking scenes in film and TV, highlighting realistic depictions of IT scams, ransomware, and hacker tools alongside technical inaccuracies.
The article details festival-themed phishing, fake shops, delivery-fee and UPI scams, and support impersonation, including reported victim losses. It advises verifying contacts and tracking through official channels, avoiding suspicious links, and never sharing OTPs or,
Team Cymru describes its IP-tagging taxonomy, which it says combines machine logic and analyst review, and shows how Scout and Recon users can filter flows, investigate C2 infrastructure, and correlate shared infrastructure.
The article describes phishing, fake ticket and giveaway offers, dodgy streaming, counterfeit merchandise, and lookalike domains targeting F1 fans, alongside risks to teams and advice for protecting accounts, devices, and data.
An introductory explainer defines IoCs, distinguishes them from IoAs, and describes how organizations use and share threat indicators. It also highlights DarkOwl’s Entity API for searching darknet data.
An explainer outlines ransomware, data breaches, DDoS, misconfiguration, supply-chain attacks and phishing affecting UK councils, with examples of reported incidents and recommendations for improving defenses.
Deep Instinct describes an Agent Tesla variant that steals keystrokes, clipboard contents, and credentials, uses Telegram for communications, and employs evasion techniques. The company says its product detected it before VirusTotal upload and most vendors.
