Threat management

Mastering Threat Management: Your Resource for Detection, Intelligence, Response Strategy, and More.

(Credit: monticellllo – stock.adobe.com)

BeyondTrust zero-day exploited by China-linked group Armory Castle

Steve ZurierOctober 16, 2026

Chinese group tied to at least three other major exploits over the past few weeks.

Today's Top Threat Management Headlines

Threat Management: Explained and Explored

MDR
How to get enterprise-grade security without an enterprise-sized team
MDR
Transforming MDR: How AI challenges and strengthens protection services
Exposure management
From Data to Decisions to Action: Why Exposure Management’s Next Chapter Runs Through Validation
Threat Management
AI reshapes exposure management around real-world risk, says Brinqa exec
AI benefits/risks
In the AI era, the pre-patch window needs its own security playbook
Exposure management
Total AI awareness: Gaining full visibility of the AI attack surface
AI benefits/risks
AI has outpaced the patching clock – here’s what the industry needs to do
AI benefits/risks
A credo for the AI era: Trust, but Decompile
SOC
From tool stack to defense system: Connecting the security dots
Vulnerability Management
Inside Mythos: A CSO’s technical decoder for Anthropic’s autonomous offensive AI

Threat Management News

Vulnerability Management

CISA adds chained Ivanti Connect Secure bug to its exploited list

Steve ZurierOctober 14, 2026

CISA orders urgent patching of exploited Ivanti VPN flaw as attackers chain three vulnerabilities.

Threat Intelligence

ShinyHunters targets Oracle PeopleSoft in new campaign amid FBI attack claims

Laura FrenchSeptember 29, 2026

Google says ShinyHunters found a way to bypass WAF rules to reach vulnerable endpoints.

Threat Intelligence

HBO Max Reddit account compromised, used in ‘PasteSwitch’ ClickFix attacks

Laura FrenchSeptember 16, 2026

Malicious Reddit advertisements led to macOS and Windows infostealer downloads.

Threat Management

Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel

Laura FrenchSeptember 2, 2026

The campaign uses DLL sideloading and PNG steganography to evade detection.

Threat Management

DPRK’s Lazarus Group exploits Windows zero-day in backdoor campaign

Laura FrenchAugust 14, 2026

Initial access is gained through fake job offers and PDF viewer downloads.

AI/ML

How Menlo Security Is Securing AI Agents from Prompt Injection – Ramin Farassat – BH26 #1

August 5, 2026

Enterprises are deploying AI agents like Microsoft Copilot, Google Gemini, and Claude Code faster than they can secure them, and attackers are exploiting that gap through prompt injection. Hidden instructions get buried in web pages, files, and even images that a human would never notice but an AI agent reads and acts on. Menlo Security is building...