Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 121 stories in 24 hours
SOC & SIEM
Microsoft, identity, cloud and the security operations centre.
15stories this week
0today
the last seven days
Most fromHuntress, Microsoft Sentinel Blog, SecurityWeek, Help Net Security
In the news hereMicrosoft4Google1ConnectWise1OpenAI1Lumma Stealer1NetSupport RAT1
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
When autonomous AI agents “escape the sandbox,” the real story isn’t rogue machines — it’s the same access-control failures we’ve seen for decades.
Dark Reading
-
When autonomous AI agents “escape the sandbox,” the real story isn’t rogue machines — it’s the same access-control failures we’ve seen for decades.
Dark Reading
-
Anton’s Security Blog Quarterly now again covers Anton on Security only. It no longer includes my posts from Google Cloud blog, Google Cloud community blog (some exceptions noted below), and sadly I no longer run a Cloud Security Podcast by Google … Top 10 posts with the most lifetime views (excluding paper announcement blogs): Anton’s…
Anton Chuvakin
-
AI agents can operate through human credentials and take actions that existing SOC 2 controls may not distinguish from human activity. Token Security explains why SOC 2 needs to adapt to address the security gaps created by agent identities.
BleepingComputer
-
Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have been frozen.
SecurityWeek
-
As Huntress scales past 800 teammates, Chief People Officer Kristin Dean reflects on protecting culture and not just letting it happen.
Huntress
-
Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
SecurityWeek
-
Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services.
SecurityWeek
-
Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like this. An attacker lands on a low-privilege cloud account, and the first try at privilege escalation goes nowhere. That…
The Hacker News
-
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
-
Managed ISPM now offers two deployment modes. Choose fully automated hardening or full control over which Microsoft 365 controls roll out, and when. See how it works.
Huntress
-
Threat actors exploited Samsung MagicINFO to install AnyDesk, disable Defender, and compile a Monero miner directly on a victim endpoint. Learn the detection signals.
Huntress
