Threat management

Mastering Threat Management: Your Resource for Detection, Intelligence, Response Strategy, and More.

ShinyHunters targets Oracle PeopleSoft in new campaign amid FBI attack claims

Laura FrenchSeptember 29, 2026

Google says ShinyHunters found a way to bypass WAF rules to reach vulnerable endpoints.

Today's Top Threat Management Headlines

Threat Management: Explained and Explored

Exposure management
From Data to Decisions to Action: Why Exposure Management’s Next Chapter Runs Through Validation
Threat Management
AI reshapes exposure management around real-world risk, says Brinqa exec
AI benefits/risks
In the AI era, the pre-patch window needs its own security playbook
Exposure management
Total AI awareness: Gaining full visibility of the AI attack surface
AI benefits/risks
AI has outpaced the patching clock – here’s what the industry needs to do
AI benefits/risks
A credo for the AI era: Trust, but Decompile
SOC
From tool stack to defense system: Connecting the security dots
Vulnerability Management
Inside Mythos: A CSO’s technical decoder for Anthropic’s autonomous offensive AI
Exposure management
Ready for the flood: How exposure management prepares you for the Mythos vulnerability onslaught
Black Hat
Fortra’s Josh Davies on the evolving exploitation of trust

Threat Management News

Threat Intelligence

HBO Max Reddit account compromised, used in ‘PasteSwitch’ ClickFix attacks

Laura FrenchSeptember 16, 2026

Malicious Reddit advertisements led to macOS and Windows infostealer downloads.

Threat Management

Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel

Laura FrenchSeptember 2, 2026

The campaign uses DLL sideloading and PNG steganography to evade detection.

Threat Management

DPRK’s Lazarus Group exploits Windows zero-day in backdoor campaign

Laura FrenchAugust 14, 2026

Initial access is gained through fake job offers and PDF viewer downloads.

AI/ML

How Menlo Security Is Securing AI Agents from Prompt Injection – Ramin Farassat – BH26 #1

August 5, 2026

Enterprises are deploying AI agents like Microsoft Copilot, Google Gemini, and Claude Code faster than they can secure them, and attackers are exploiting that gap through prompt injection. Hidden instructions get buried in web pages, files, and even images that a human would never notice but an AI agent reads and acts on. Menlo Security is building...