The EC-Council Certified SOC Analyst (CSA) program equips learners with essential skills in security operations, threat intelligence, and incident response. It covers the processes, technologies, and ...

The second quarter of 2026 (April–June) was largely defined by the continuing downstream effects following Microsoft’s Digital Crimes Unit-led disruption efforts against the Tycoon2FA ...

Malware targeting macOS users are usually considered rare and advanced: the system’s built-in protections like Gatekeeper, TCC, System Integrity Protection, mandatory code signing and lower number of ...

Google Threat Intelligence Group (GTIG) has conducted an in-depth analysis of a .NET backdoor, tracked as STOCKSTAY, that has been continually developed and deployed by the Russia-linked threat actor ...

A new open-source cybersecurity platform called CyberSentinel AI v3.0 has emerged as a significant development in autonomous security tooling, combining 33 real-world penetration testing and threat ...

Global law enforcement and private sector partners worked to disrupt activity related to TA569, as part of Operation Endgame. TA569 is one of the most prominent cybercriminal threat groups in ...

Deployment speed: Log360 deploys in under 30 minutes with automatic device discovery. For teams that have struggled with the months-long onboarding that Splunk SOAR or XSOAR can require, this is a ...

Device code phishing is exploding across the threat landscape, with new device code phishing tools emerging every week. The spike in device code phishing coincides with publicly released criminal ...

Phishing campaigns continue to improve sophistication and refinement in blending social engineering, delivery and hosting infrastructure, and authentication abuse to remain effective against evolving ...

Training should go beyond generic phishing awareness and include real-world scenarios involving AI platform abuse, VEC, and blurred document lures. Users should be educated on recognizing social ...

Our research on Void Dokkaebi’s operations uncovered a campaign that turns infected developer repositories into malware delivery channels. By spreading through trusted workflows, organizational ...

The report provides an overview on tactics, techniques, and procedures (TTPs) of The Gentlemen observed by Group-IB in intrusions conducted by its affiliates, as well as relevant information about the ...