Threat management

Mastering Threat Management: Your Resource for Detection, Intelligence, Response Strategy, and More.

China Bans Cyber Attacks: Examining Internet Security with Chinese Flag and Binary Data Through a Magnifying Glass Concept

Cisco SD-WAN Catalyst Controller attacks linked to Volt Typhoon’s Silent Train network

Steve ZurierOctober 29, 2026

China-linked hackers exploit Cisco SD-WAN flaw, with infrastructure tied to Volt Typhoon.

Today's Top Threat Management Headlines

Threat Management: Explained and Explored

Threat Management
Here’s what a successful CTEM deployment looks like
MDR
How to get enterprise-grade security without an enterprise-sized team
MDR
Transforming MDR: How AI challenges and strengthens protection services
Exposure management
From Data to Decisions to Action: Why Exposure Management’s Next Chapter Runs Through Validation
Threat Management
AI reshapes exposure management around real-world risk, says Brinqa exec
AI benefits/risks
In the AI era, the pre-patch window needs its own security playbook
Exposure management
Total AI awareness: Gaining full visibility of the AI attack surface
AI benefits/risks
AI has outpaced the patching clock – here’s what the industry needs to do
AI benefits/risks
A credo for the AI era: Trust, but Decompile
SOC
From tool stack to defense system: Connecting the security dots

Threat Management News

(Credit: monticellllo – stock.adobe.com)

Vulnerability Management

BeyondTrust zero-day exploited by China-linked group Armory Castle

Steve ZurierOctober 16, 2026

Chinese group tied to at least three other major exploits over the past few weeks.

Vulnerability Management

CISA adds chained Ivanti Connect Secure bug to its exploited list

Steve ZurierOctober 14, 2026

CISA orders urgent patching of exploited Ivanti VPN flaw as attackers chain three vulnerabilities.

Threat Intelligence

ShinyHunters targets Oracle PeopleSoft in new campaign amid FBI attack claims

Laura FrenchSeptember 29, 2026

Google says ShinyHunters found a way to bypass WAF rules to reach vulnerable endpoints.

Threat Intelligence

HBO Max Reddit account compromised, used in ‘PasteSwitch’ ClickFix attacks

Laura FrenchSeptember 16, 2026

Malicious Reddit advertisements led to macOS and Windows infostealer downloads.

Threat Management

Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel

Laura FrenchSeptember 2, 2026

The campaign uses DLL sideloading and PNG steganography to evade detection.

Threat Management

DPRK’s Lazarus Group exploits Windows zero-day in backdoor campaign

Laura FrenchAugust 14, 2026

Initial access is gained through fake job offers and PDF viewer downloads.

AI/ML

How Menlo Security Is Securing AI Agents from Prompt Injection – Ramin Farassat – BH26 #1

August 5, 2026

Enterprises are deploying AI agents like Microsoft Copilot, Google Gemini, and Claude Code faster than they can secure them, and attackers are exploiting that gap through prompt injection. Hidden instructions get buried in web pages, files, and even images that a human would never notice but an AI agent reads and acts on. Menlo Security is building...

Man holding smartphone with wi-fi sign. Internet, Technology

Endpoint/Device Security

Russia-linked Midnight Blizzard targets hotel Wi-Fi networks in US, Europe

Steve ZurierAugust 4, 2026

Hotel Wi-Fi phishing campaign targets business travelers, Microsoft warns.

Threat Management

Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet

Laura FrenchJuly 31, 2026

Amazon linked the campaigns through overlapping C2 indicators, TTPs and code.

FBI seizure notice displayed on the website for “Centrik Global Consulting.”

Threat Intelligence

FBI shuts down 13 ‘consulting’ websites used for suspected Chinese espionage

Laura FrenchJune 11, 2026

The sites were used to lure security clearance holders into divulging classified information.

Selected by the SC Media Editorial team every Tuesday.

Sign up now for the top five issues cybersecurity pros need to know this week.

Threat management

Cisco SD-WAN Catalyst Controller attacks linked to Volt Typhoon’s Silent Train network

Today's Top Threat Management Headlines

Indonesia seeks storage upgrades to bolster national identity infrastructure

County election websites show persistent security vulnerabilities

Valve steam platform vulnerabilities enable zero-click remote code execution

Federal Election Commission systems go offline during cyberattack

Threat Management: Explained and Explored

Here’s what a successful CTEM deployment looks like

How to get enterprise-grade security without an enterprise-sized team

Transforming MDR: How AI challenges and strengthens protection services

From Data to Decisions to Action: Why Exposure Management’s Next Chapter Runs Through Validation

AI reshapes exposure management around real-world risk, says Brinqa exec

In the AI era, the pre-patch window needs its own security playbook

Total AI awareness: Gaining full visibility of the AI attack surface

AI has outpaced the patching clock – here’s what the industry needs to do

A credo for the AI era: Trust, but Decompile

From tool stack to defense system: Connecting the security dots

Threat Management News

BeyondTrust zero-day exploited by China-linked group Armory Castle

CISA adds chained Ivanti Connect Secure bug to its exploited list

ShinyHunters targets Oracle PeopleSoft in new campaign amid FBI attack claims

HBO Max Reddit account compromised, used in ‘PasteSwitch’ ClickFix attacks

Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel

DPRK’s Lazarus Group exploits Windows zero-day in backdoor campaign

How Menlo Security Is Securing AI Agents from Prompt Injection – Ramin Farassat – BH26 #1

Russia-linked Midnight Blizzard targets hotel Wi-Fi networks in US, Europe

Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet

FBI shuts down 13 ‘consulting’ websites used for suspected Chinese espionage

Fast Five

Selected by the SC Media Editorial team every Tuesday.