Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 121 stories in 24 hours
SOC & SIEM
Microsoft, identity, cloud and the security operations centre.
15stories this week
0today
the last seven days
Most fromHuntress, Microsoft Sentinel Blog, SecurityWeek, Help Net Security
In the news hereMicrosoft4Google1ConnectWise1OpenAI1Lumma Stealer1NetSupport RAT1
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
ClickFix attacks leave no file to scan or block, which is why most endpoint tools miss it. See how Huntress Attack Disruption kills the chain in under a second.
Huntress
-
Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.
SecurityWeek
-
Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched.
SecurityWeek
-
This article explains how Elastic SIEM uses a monthly automated telemetry pipeline to score prebuilt detection rules across noise, performance, threat, and profile dimensions, helping security teams decide which rules to enable first.
Elastic Security Labs
-
YARA-X&#;x26;#;39;s 1.21.0 release brings 5 improvements and 4 bugfixes.
SANS Internet Storm Center
-
In Part 2 of the Patch Sound Barrier series, I shared a thought experiment from a talk in May 2026: imagine any vulnerability in your environment can be patched within 15 minutes of release. Now reverse-engineer that reality. What had to be true? Usman and I revisited this exercise in our “basics at AI scale”…
Anton Chuvakin
-
Nazar Tymoshyk from UnderDefense shares his thoughts on what ransomware attacks look like during the all-important opening hours.
Huntress
-
Browser-based attacks can steal sessions, abuse extensions, or manipulate users without creating the endpoint artifacts EDR is designed to detect. NordLayer explains three ways attacks can evade endpoint telemetry and why browser-level controls can help close the gap.
BleepingComputer
-
Browser-based attacks can steal sessions, abuse extensions, or manipulate users without creating the endpoint artifacts EDR is designed to detect. NordLayer explains three ways attacks can evade endpoint telemetry and why browser-level controls can help close the gap.
BleepingComputer
-
New data shows that many workers have employer-sponsored AI accounts and are encouraged to use them, yet 43% haven’t been trained in AI.
Huntress
-
The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime.
SecurityWeek
