TL;DR for CISOs: CISA added both PHP2Shell flaws to its Known Exploited Vulnerabilities catalog on October 26 and set an October 29
TL;DR for CISOs: ConnectWise says attackers abused Cloud Backup application identities, and Huntress reports successful sign-ins in
TL;DR for CISOs: BeyondTrust disclosed that a suspected China-nexus group exploited a Remote Support zero-day from August 29, and at
TL;DR for CISOs: A single phishing click let attackers copy data on about 1.3 million people from Arizona's court system, the FBI say
Technology changes quickly. Artificial intelligence, cybersecurity, cloud computing, software development, automation, consumer electronics, startups, and emerging digital products are reshaping how businesses and individuals work in the United State
AI-powered threat intelligence is not one workflow with seven interchangeable vendors. The starting question changes the technology a security team needs. One organization may be trying to determine whether active exploitation intersects with an expo
Insight: Brooks highlights that both AI and machine-learning tools enable defenders—and adversaries.
Action steps:
Inventory all AI/ML tools in your environment and map them
The cybersecurity threat landscape on July 19, 2025 revealed 3 significant security incidents
Key Questions Explored:
https://search.app/Miwuwt4EtELyDj9F8
Interview by Brian Kelly
I recently sat down with Ch
One more idea that has been bugging me for years is an idea of “detection as code.” Why is it bugging me and why should anybody else care?
First, is “detection as code” just a glamorous term for what you did when you loaded your Snort rules in cvs in
In today's rapidly evolving cybersecurity landscape, the need for comprehensive defense strategies is more critical than ever. External Attack Surface Management (EASM) emerges as a crucial component, offering organizations valuable insights int
Topic Brief
We already talked about developing a modern security operations center or a SOC and some of you were left with questions how do you actually journey ? how do you travel to this modern SOC ? It's easy to discuss what the modern SOC should
I got into a very insightful debate with somebody who will remain nameless in the beginning of this post, but will perhaps be revealed later. The debate focused on the role of context in threat detection.
Specifically, it is about the role of local c
This is a cross post from original source at FireCompass here
This report summarizes the top breaches between mid May to mid June 2020 accounting for the major breaches the world has seen. This helps you in keeping track of the latest hacks and s
For decades, enterprises have been depending on many security technologies to defend their network perimeters from variety of cyber attacks. Amongst those technologies, firewalls are a critical layer in perimeter defense. As cyber threat landscape ha
Our editorial team has handpicked the best of the best talks at RSA Conference - one of the largest IT Security Conference in the world. Following is the list of top talks on Mobile Security at RSA Conference 2016.
RSA Conference held its 25th annua
