Threat management

Mastering Threat Management: Your Resource for Detection, Intelligence, Response Strategy, and More.

Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel

Laura FrenchSeptember 2, 2026

The campaign uses DLL sideloading and PNG steganography to evade detection.

Today's Top Threat Management Headlines

Threat Management: Explained and Explored

SOC
From tool stack to defense system: Connecting the security dots
Vulnerability Management
Inside Mythos: A CSO’s technical decoder for Anthropic’s autonomous offensive AI
Exposure management
Ready for the flood: How exposure management prepares you for the Mythos vulnerability onslaught
Black Hat
Fortra’s Josh Davies on the evolving exploitation of trust
Threat Management
Don’t break in, log in: How abuse of trust leads to system compromise
Vulnerability Management
Why Mythos is the cybersecurity crisis we need
Exposure management
Cut to the chase: How to save time and effort through validation in exposure management
AI benefits/risks
3 ways to secure enterprise apps in the AI age
AI benefits/risks
Did AI kill vulnerability management—or just expose its flaws?
AI benefits/risks
Why teams need continuous agent hunting

Threat Management News

Threat Management

DPRK’s Lazarus Group exploits Windows zero-day in backdoor campaign

Laura FrenchAugust 14, 2026

Initial access is gained through fake job offers and PDF viewer downloads.

AI/ML

How Menlo Security Is Securing AI Agents from Prompt Injection – Ramin Farassat – BH26 #1

August 5, 2026

Enterprises are deploying AI agents like Microsoft Copilot, Google Gemini, and Claude Code faster than they can secure them, and attackers are exploiting that gap through prompt injection. Hidden instructions get buried in web pages, files, and even images that a human would never notice but an AI agent reads and acts on. Menlo Security is building...

Man holding smartphone with wi-fi sign. Internet, Technology

Endpoint/Device Security

Russia-linked Midnight Blizzard targets hotel Wi-Fi networks in US, Europe

Steve ZurierAugust 4, 2026

Hotel Wi-Fi phishing campaign targets business travelers, Microsoft warns.

Threat Management

Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet

Laura FrenchJuly 31, 2026

Amazon linked the campaigns through overlapping C2 indicators, TTPs and code.

FBI seizure notice displayed on the website for “Centrik Global Consulting.”

Threat Intelligence

FBI shuts down 13 ‘consulting’ websites used for suspected Chinese espionage

Laura FrenchJune 11, 2026

The sites were used to lure security clearance holders into divulging classified information.

Threat Management

Iranian threat group targets US aviation sector with AI-assisted ‘MiniFast’ backdoor

Laura FrenchMay 27, 2026

Career-themed phishing lures targeted employees of US domestic airlines during Operation Epic Fury.

Threat Management

Verizon DBIR 2026: Vulnerability exploits top initial access as patching coverage falls

Laura FrenchMay 20, 2026

The report also highlighted ransomware trends and the evolving role of AI in breaches.

Ransomware

Iranian threat group used Chaos ransomware as a ‘false flag,’ researchers say

Laura FrenchMay 7, 2026

The purported ransomware attack did not encrypt files and used infrastructure tied to MuddyWater.

Identity

CloudZ RAT plugin targets Windows Phone Link for possible OTP theft

Laura FrenchMay 6, 2026

The Pheno plugin monitors active Phone Link connections to eavesdrop on texts and notifications.

Encryption

Post Quantum Migration Struggles, AI Threats, and Modern Defenses – Bobby Ford, HD Moore, Eyal Benishti, Ramin Farassat, Daniel dos Santos – ESW #457

May 4, 2026

Interview with Daniel dos Santos: Post-Quantum Cryptography and the Risks No One Is Talking About. Post-quantum cryptography (PQC) is quickly shifting from theory to inevitability. In this segment, Daniel dos Santos, VP of Research at Forescout, explains why PQC isn’t the most immediate threat today—but still demands early attention as standards so...

Fast Five

Selected by the SC Media Editorial team every Tuesday.

Sign up now for the top five issues cybersecurity pros need to know this week.

Threat management

Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel

Today's Top Threat Management Headlines

CrowdStrike unveils Falcon Guardian to secure AI agents

Critical SQL injection vulnerability in Sangoma Switchvox exploited in the wild

METR discloses 2 security incidents, including $600,000 model credit theft

CrowdStrike launches AI models for cybersecurity with Nvidia

Threat Management: Explained and Explored

From tool stack to defense system: Connecting the security dots

Inside Mythos: A CSO’s technical decoder for Anthropic’s autonomous offensive AI

Ready for the flood: How exposure management prepares you for the Mythos vulnerability onslaught

Fortra’s Josh Davies on the evolving exploitation of trust

Don’t break in, log in: How abuse of trust leads to system compromise

Why Mythos is the cybersecurity crisis we need

Cut to the chase: How to save time and effort through validation in exposure management

3 ways to secure enterprise apps in the AI age

Did AI kill vulnerability management—or just expose its flaws?

Why teams need continuous agent hunting

Threat Management News

DPRK’s Lazarus Group exploits Windows zero-day in backdoor campaign

How Menlo Security Is Securing AI Agents from Prompt Injection – Ramin Farassat – BH26 #1

Russia-linked Midnight Blizzard targets hotel Wi-Fi networks in US, Europe

Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet

FBI shuts down 13 ‘consulting’ websites used for suspected Chinese espionage

Iranian threat group targets US aviation sector with AI-assisted ‘MiniFast’ backdoor

Verizon DBIR 2026: Vulnerability exploits top initial access as patching coverage falls

Iranian threat group used Chaos ransomware as a ‘false flag,’ researchers say

CloudZ RAT plugin targets Windows Phone Link for possible OTP theft

Post Quantum Migration Struggles, AI Threats, and Modern Defenses – Bobby Ford, HD Moore, Eyal Benishti, Ramin Farassat, Daniel dos Santos – ESW #457

Fast Five

Selected by the SC Media Editorial team every Tuesday.