Threat matrix: Mapping threats across cloud web applications
In this article Microsoft introduces the cloud web applications threat matrix, a MITRE ATT&CK-aligned framework that helps defenders understand, prioritize, […]
Chinese espionage groups swarm to exploit triple-link chain of zero-days
Proofpoint researchers have spotted at least four state-aligned threat groups chain a trio of zero-day vulnerabilities to conduct espionage on
The Threats Hiding Behind Commodity Infrastructure
Executive Summary A recent Unit 42 investigation into seemingly low-priority enterprise infections demonstrates how the most effective camouflage in cybercrime
Supreme Court crisis spills into Brazil’s presidential race
RIO DE JANEIRO (CN) — A weeklong dispute among justices on Brazil’s Supreme Court has plunged the court into an
Proofpoint 2026 Voice of the CISO Report Finds Cyber Resilience Improving, While AI Expands the CISO Mandate
GenAI security concerns jump 18 points to 78% as CISOs take on growing AI responsibilities without proportional resources SUNNYVALE, Calif.
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including
The Good, the Bad and the Ugly in Cybersecurity – Week 35
The Good | Authorities Launch New Operations Against Cybercrime Networks & Supply Chain Attackers Operation Jackal IV, coordinated by INTERPOL
Greatness Phishing Kit Can Now Launch Sophisticated Attacks
Researchers at ZeroBEC are tracking a phishing platform called “Greatness” that’s been significantly upgraded since it surfaced in 2023.
Computer Security
New backdoors from Toy Ghouls
Introduction We continue tracking the activity of Toy Ghouls (also known as Bearlyfy, Laboo.boo, and Feral Wolf), a financially motivated
CrowdStrike Announces Agentic Identity Provider
AI agents are evolving identity as we know it. They execute code, invoke tools, access applications and sensitive data, and