Threat management

Mastering Threat Management: Your Resource for Detection, Intelligence, Response Strategy, and More.

Man holding smartphone with wi-fi sign. Internet, Technology

Russia-linked Midnight Blizzard targets hotel Wi-Fi networks in US, Europe

Steve ZurierAugust 4, 2026

Hotel Wi-Fi phishing campaign targets business travelers, Microsoft warns.

Today's Top Threat Management Headlines

Threat Management News

AI/ML

How Menlo Security Is Securing AI Agents from Prompt Injection – Ramin Farassat – BH26 #1

August 5, 2026

Enterprises are deploying AI agents like Microsoft Copilot, Google Gemini, and Claude Code faster than they can secure them, and attackers are exploiting that gap through prompt injection. Hidden instructions get buried in web pages, files, and even images that a human would never notice but an AI agent reads and acts on. Menlo Security is building...

Threat Management

Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet

Laura FrenchJuly 31, 2026

Amazon linked the campaigns through overlapping C2 indicators, TTPs and code.

FBI seizure notice displayed on the website for “Centrik Global Consulting.”

Threat Intelligence

FBI shuts down 13 ‘consulting’ websites used for suspected Chinese espionage

Laura FrenchJune 11, 2026

The sites were used to lure security clearance holders into divulging classified information.

Threat Management

Iranian threat group targets US aviation sector with AI-assisted ‘MiniFast’ backdoor

Laura FrenchMay 27, 2026

Career-themed phishing lures targeted employees of US domestic airlines during Operation Epic Fury.

Threat Management

Verizon DBIR 2026: Vulnerability exploits top initial access as patching coverage falls

Laura FrenchMay 20, 2026

The report also highlighted ransomware trends and the evolving role of AI in breaches.

Ransomware

Iranian threat group used Chaos ransomware as a ‘false flag,’ researchers say

Laura FrenchMay 7, 2026

The purported ransomware attack did not encrypt files and used infrastructure tied to MuddyWater.

Identity

CloudZ RAT plugin targets Windows Phone Link for possible OTP theft

Laura FrenchMay 6, 2026

The Pheno plugin monitors active Phone Link connections to eavesdrop on texts and notifications.

Encryption

Post Quantum Migration Struggles, AI Threats, and Modern Defenses – Bobby Ford, HD Moore, Eyal Benishti, Ramin Farassat, Daniel dos Santos – ESW #457

May 4, 2026

Interview with Daniel dos Santos: Post-Quantum Cryptography and the Risks No One Is Talking About. Post-quantum cryptography (PQC) is quickly shifting from theory to inevitability. In this segment, Daniel dos Santos, VP of Research at Forescout, explains why PQC isn’t the most immediate threat today—but still demands early attention as standards so...

Threat Management

Microsoft: QR code, CAPTCHA-gated phishing more than double in Q1 2026

Laura FrenchMay 1, 2026

The company detected about 8.3 billion email-based phishing threats between January and March.

Ransomware

TeamPCP-linked VECT 2.0 ransomware unintentionally destroys files larger than 128 KB

Laura FrenchApril 29, 2026

Researchers revealed several “amateur” mistakes made in Windows, Linux and ESXi variants.

Fast Five

Selected by the SC Media Editorial team every Tuesday.

Sign up now for the top five issues cybersecurity pros need to know this week.

Threat management

Russia-linked Midnight Blizzard targets hotel Wi-Fi networks in US, Europe

Today's Top Threat Management Headlines

Signal introduces automatic key verification to combat man-in-the-middle attacks

FBI warns of rising sextortion attacks targeting social media users

Suisun City, Calif. grapples with cyber incident amid rise in attacks on local governments

Papua New Guinea seeks feedback on digital ID overhaul and new laws

Threat Management: Explained and Explored

Fortra’s Josh Davies on the evolving exploitation of trust

Don’t break in, log in: How abuse of trust leads to system compromise

Why Mythos is the cybersecurity crisis we need

Cut to the chase: How to save time and effort through validation in exposure management

3 ways to secure enterprise apps in the AI age

Did AI kill vulnerability management—or just expose its flaws?

Why teams need continuous agent hunting

Turn underground intelligence into actionable security

Securing the model: Protecting AI systems from compromise

How Agentic AI made org charts obsolete

Threat Management News

How Menlo Security Is Securing AI Agents from Prompt Injection – Ramin Farassat – BH26 #1

Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet

FBI shuts down 13 ‘consulting’ websites used for suspected Chinese espionage

Iranian threat group targets US aviation sector with AI-assisted ‘MiniFast’ backdoor

Verizon DBIR 2026: Vulnerability exploits top initial access as patching coverage falls

Iranian threat group used Chaos ransomware as a ‘false flag,’ researchers say

CloudZ RAT plugin targets Windows Phone Link for possible OTP theft

Post Quantum Migration Struggles, AI Threats, and Modern Defenses – Bobby Ford, HD Moore, Eyal Benishti, Ramin Farassat, Daniel dos Santos – ESW #457

Microsoft: QR code, CAPTCHA-gated phishing more than double in Q1 2026

TeamPCP-linked VECT 2.0 ransomware unintentionally destroys files larger than 128 KB

Fast Five

Selected by the SC Media Editorial team every Tuesday.