Threat management

Mastering Threat Management: Your Resource for Detection, Intelligence, Response Strategy, and More.

An aerial view of the Pentagon, Washington, D.C., May 15, 2023. (DoD photo by U.S. Air Force Staff Sgt. John Wright)

Suspected cyberattacks target US military, European supermarket freezers

Steve ZurierNovember 3, 2026

Suspected cyberattacks on U.S. military and European freezers raise concerns about food supply security.

Today's Top Threat Management Headlines

Threat Management: Explained and Explored

Threat Management
Here’s what a successful CTEM deployment looks like
MDR
How to get enterprise-grade security without an enterprise-sized team
MDR
Transforming MDR: How AI challenges and strengthens protection services
Exposure management
From Data to Decisions to Action: Why Exposure Management’s Next Chapter Runs Through Validation
Threat Management
AI reshapes exposure management around real-world risk, says Brinqa exec
AI benefits/risks
In the AI era, the pre-patch window needs its own security playbook
Exposure management
Total AI awareness: Gaining full visibility of the AI attack surface
AI benefits/risks
AI has outpaced the patching clock – here’s what the industry needs to do
AI benefits/risks
A credo for the AI era: Trust, but Decompile
SOC
From tool stack to defense system: Connecting the security dots

Threat Management News

China Bans Cyber Attacks: Examining Internet Security with Chinese Flag and Binary Data Through a Magnifying Glass Concept

Critical Infrastructure Security

Cisco SD-WAN Catalyst Controller attacks linked to Volt Typhoon’s Silent Train network

Steve ZurierOctober 29, 2026

China-linked hackers exploit Cisco SD-WAN flaw, with infrastructure tied to Volt Typhoon.

(Credit: monticellllo – stock.adobe.com)

Vulnerability Management

BeyondTrust zero-day exploited by China-linked group Armory Castle

Steve ZurierOctober 16, 2026

Chinese group tied to at least three other major exploits over the past few weeks.

Vulnerability Management

CISA adds chained Ivanti Connect Secure bug to its exploited list

Steve ZurierOctober 14, 2026

CISA orders urgent patching of exploited Ivanti VPN flaw as attackers chain three vulnerabilities.

Threat Intelligence

ShinyHunters targets Oracle PeopleSoft in new campaign amid FBI attack claims

Laura FrenchSeptember 29, 2026

Google says ShinyHunters found a way to bypass WAF rules to reach vulnerable endpoints.

Threat Intelligence

HBO Max Reddit account compromised, used in ‘PasteSwitch’ ClickFix attacks

Laura FrenchSeptember 16, 2026

Malicious Reddit advertisements led to macOS and Windows infostealer downloads.

Threat Management

Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel

Laura FrenchSeptember 2, 2026

The campaign uses DLL sideloading and PNG steganography to evade detection.

Threat Management

DPRK’s Lazarus Group exploits Windows zero-day in backdoor campaign

Laura FrenchAugust 14, 2026

Initial access is gained through fake job offers and PDF viewer downloads.

AI/ML

How Menlo Security Is Securing AI Agents from Prompt Injection – Ramin Farassat – BH26 #1

August 5, 2026

Enterprises are deploying AI agents like Microsoft Copilot, Google Gemini, and Claude Code faster than they can secure them, and attackers are exploiting that gap through prompt injection. Hidden instructions get buried in web pages, files, and even images that a human would never notice but an AI agent reads and acts on. Menlo Security is building...

Man holding smartphone with wi-fi sign. Internet, Technology

Endpoint/Device Security

Russia-linked Midnight Blizzard targets hotel Wi-Fi networks in US, Europe

Steve ZurierAugust 4, 2026

Hotel Wi-Fi phishing campaign targets business travelers, Microsoft warns.

Threat Management

Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet

Laura FrenchJuly 31, 2026

Amazon linked the campaigns through overlapping C2 indicators, TTPs and code.

Selected by the SC Media Editorial team every Tuesday.

Sign up now for the top five issues cybersecurity pros need to know this week.

Threat management

Suspected cyberattacks target US military, European supermarket freezers

Today's Top Threat Management Headlines

Barracuda Networks issues patches for critical security vulnerabilities

Gartner report outlines evolving roles in AI-enabled security operations centers

Identity and access management spending to surge due to AI adoption

Password manager mSecure alerts users to suspicious activity

Threat Management: Explained and Explored

Here’s what a successful CTEM deployment looks like

How to get enterprise-grade security without an enterprise-sized team

Transforming MDR: How AI challenges and strengthens protection services

From Data to Decisions to Action: Why Exposure Management’s Next Chapter Runs Through Validation

AI reshapes exposure management around real-world risk, says Brinqa exec

In the AI era, the pre-patch window needs its own security playbook

Total AI awareness: Gaining full visibility of the AI attack surface

AI has outpaced the patching clock – here’s what the industry needs to do

A credo for the AI era: Trust, but Decompile

From tool stack to defense system: Connecting the security dots

Threat Management News

Cisco SD-WAN Catalyst Controller attacks linked to Volt Typhoon’s Silent Train network

BeyondTrust zero-day exploited by China-linked group Armory Castle

CISA adds chained Ivanti Connect Secure bug to its exploited list

ShinyHunters targets Oracle PeopleSoft in new campaign amid FBI attack claims

HBO Max Reddit account compromised, used in ‘PasteSwitch’ ClickFix attacks

Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel

DPRK’s Lazarus Group exploits Windows zero-day in backdoor campaign

How Menlo Security Is Securing AI Agents from Prompt Injection – Ramin Farassat – BH26 #1

Russia-linked Midnight Blizzard targets hotel Wi-Fi networks in US, Europe

Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet

Fast Five

Selected by the SC Media Editorial team every Tuesday.