Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 109 stories in 24 hours
Enterprise & Cloud Security
👉 Microsoft, Azure, AWS, Google, SOC
65stories this week
8today
the last seven days
Most fromBleepingComputer, Help Net Security, Huntress, The Hacker News
In the news hereMicrosoft34ConnectWise11Google5Nvidia3Lumma Stealer2NetSupport RAT1Qilin1
MyCyberWay trainingMost attacks start with an identity. Learn to defend it.SC-300 course details
-
The Reality of Securing AI in Motion Traditional security tools were built for environments defined by fixed rules and predictable workflows. But AI behavior is non-deterministic. The same prompt can produce different outcomes, and risk often emerges gradually as AI behavior adapts, and permissions drift over time. This creates a constantly shifting environment where security…
Cloud Security Alliance
-
Every CSPM tool can hand you a list of resources and findings. Almost none of them can tell you what happens to the rest of your environment if any one of them gets compromised. Ask most cloud security teams whether they have visibility into their environment, and they’ll say yes. They have a CSPM tool,…
Cloud Security Alliance
-
Microsoft observed phishing campaigns that abused MSP360 RMM to deploy ScreenConnect, creating redundant remote-access channels for follow-on activity…
Microsoft
-
Most cloud and security teams struggle with two fundamental questions: What is actually running across our clouds, and what is exposed? As workloads sprawl and AI models deploy faster than ever, critical …
Palo Alto Networks
-
Microsoft has started rolling out Windows 11 26H2 to everyone, and while it’s this year’s big annual feature update, you probably won’t notice a massive difference after installing it.
BleepingComputer
-
Learn how Huntress’ Athena brings agentic AI to the SOC, investigating signals end-to-end while human analysts own the final call.
Huntress
-
Explore how Storm-3068 turned a compromised identity into broader cloud access and the steps organizations can take to defend their identities, pipelines, and cloud infrastructure.
Microsoft
-
As threat actors increasingly use AI to accelerate and develop cyberattacks, enterprise defenders need to rely on both AI and a critical defender’s advantage: Business context that only you possess. Enterprise cyber defense spans identity, network, endpoint, data, cloud, and application layers, often split across a dozen or more products, each with its own context.…
Google Cloud
-
Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing campaigns, the use of accounts on compromised websites, and a novel malware delivery technique, tracked by Microsoft as “RedFlick”.
Microsoft
-
Organizations that use an external identity provider to authenticate Microsoft 365 users can now extend browser-based passkeys, security keys, and eligible single sign-on sessions to supported Microsoft app sign-ins—including Outlook, Teams, OneDrive, Word, Excel, PowerPoint, and Microsoft To Do—on Android, iOS, and managed macOS. Previously, some Microsoft app sign-ins used an embedded web view that…
Microsoft Entra Blog
-
Identity governance helps control who should have access, but periodic reviews alone may not reveal attacks as they happen. tenfold Software explains how real-time identity telemetry can help security teams investigate suspicious activity before it escalates.
BleepingComputer
-
Rig provides an identity dependencies graph to distinguish between legitimate users and rogue AI agents…
SecurityWeek
