Discover how to build a defensible 2027 security budget, from the 13% benchmark to NIST CSF allocation. Practical guidance for CISOs and IT Directors

Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts

Discover how attackers used a WhatsApp scam to bypass traditional defenses at an insurance firm and how modern SOC monitoring caught the threat.

AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats

Discover how to assess AI SOC ROI against managed SOC, SOAR, and DIY models with a board-ready formula built for security leaders

Action1 report finds sysadmins overestimated their use of AI in predictions made two years ago

How UnderDefense investigated a ClickFix attack that hid its C2 in a Polygon smart contract using EtherHiding, from the EDR alert to full attribution

Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure

The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws

The UK’s National Cyber Security Centre wants network device makers to improve forensic observability

LogoKit now builds per-victim phishing pages using live screenshots of the target's real website

TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging

The company found Claude AI had escaped containment three times and targeted other organizations