Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 121 stories in 24 hours
SOC & SIEM
Microsoft, identity, cloud and the security operations centre.
15stories this week
0today
the last seven days
Most fromHuntress, Microsoft Sentinel Blog, SecurityWeek, Help Net Security
In the news hereMicrosoft4Google1ConnectWise1OpenAI1Lumma Stealer1NetSupport RAT1
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
DOJ charges against Oxygen Forensics reveal the Russian-linked firm also sold forensic software to EU projects and European police forces for years. Last week’s Justice Department indictment of Oxygen Forensics looked, at first, like an American procurement scandal. CEO Lee Reiber and Russian co-founder Oleg Davydov stand accused of hiding that the company was Russian-owned…
Security Affairs
-
Huntress SOC found a threat actor exploiting a file upload flaw in recreation management to breach 3 municipal servers and steal payment data.
Huntress
-
Learn how Huntress’ Athena brings agentic AI to the SOC, investigating signals end-to-end while human analysts own the final call.
Huntress
-
Elastic InfoSec runs Linux endpoint management through Elastic Defend with a scheduled workflow that gets Cursor and Codex config onto new laptops without piling up duplicate actions on offline hosts, and it works for other config too.
Elastic Security Labs
-
Huntress researchers reveal how attackers are exploiting ChatGPT Custom GPTs to spread ClickFix lures and DLL-sideloaded malware. See the full breakdown.
Huntress
-
Learn what good privilege hygiene looks like, from local admin sprawl to accidental access, plus least privilege best practices you can start today.
Huntress
-
The native Sublime Security integration sends email detections into Elastic Security, where phishing incident response can tie a quarantined email to what happens next on the endpoint and pull the threat from every mailbox it reached.
Elastic Security Labs
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
SecurityWeek
-
The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.
SecurityWeek
-
OpenAI’s CEO said there is an “extensive and ongoing review related to our agents’ use of internet access during training and evaluation.”
SecurityWeek
-
The riskiest AI-enabled attackers look routine one alert at a time. What Anthropic’s study of 832 threat actors means for SOC triage.
D3 Security
