SOAR grew up twice: first from scripts to playbooks, then in the current wave from playbooks to AI agents that draft, decide, and act under human…
Category: Cyber Security News
Top 10 Best SIEM Tools in 2026 [Ranked & Scored]
The SIEM is the SOC’s memory and its biggest line item, and 2026’s rankings reflect a market reshaped by consolidation: Cisco absorbed Splunk, Exabeam and…
Top 10 Best Threat Intelligence Platforms (TIP) in 2026 [Ranked & Scored]
Raw intelligence is cheap; operationalized intelligence is rare. A threat intelligence platform earns its keep by fusing feeds, deduplicating indicators,…
Microsoft Urges Entra ID Admins to Migrate from SMS and Voice Authentication to Passkeys
Microsoft urged Entra ID administrators to migrate from SMS and voice authentication in Entra ID to passkeys before retirement begins on February 1, 2027,…
319 Chrome Extensions Found Hijacking Searches, Affecting 13.4 Million Users
A network of 319 browser extensions has been linked to search hijacking affecting roughly 13.4 million users over a decade. Marketed as PDF converters,…
Hackers Use Fake Cloudflare Verification Pages to Target Windows and Mac Users
A new ClickFix campaign is using fake Cloudflare verification pages to trick both Windows and Mac users into running harmful commands on their own…
GitHub Launches Copilot Fusion for Smarter and Cheaper AI Coding
GitHub has launched Copilot Fusion, a system that automatically selects AI models for coding tasks, helping developers balance code quality, speed, and…
Microsoft Edge 0-Click Exploit Chains Five Flaws to Execute Code and Escape Sandbox
A new exploit chain for Microsoft Edge revealed that combines five bugs and two Windows features to run code outside the browser sandbox. Published by…
Hackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers
Hackers combined PHP2Shell vulnerabilities with a Linux kernel exploit to gain root access on 25 servers across the United States, Japan, Taiwan, and…
Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks
Fortinet’s FortiAIGate is bringing AI security controls to enterprise workloads on Oracle Cloud Infrastructure (OCI), helping businesses inspect prompts,…
WordPress 7.1.4 Fixes 22 Security Flaws, Including an Unauthenticated RCE Vulnerability
WordPress released version 7.1.4 on October 28, 2026, fixing 22 security flaws, including an unauthenticated remote code execution vulnerability in its…
Hackers Leak Records of 41,000 DHS Personnel, Exposing Undercover ICE Agents
A leak of records covering more than 41,000 Department of Homeland Security employees and contractors has exposed contact details, work assignments, and…
WatchGuard Discloses 7 Critical Firewall Flaws Allowing Remote Code Execution and Root-Level Attacks
WatchGuard disclosed seven critical Fireware OS vulnerabilities in an October 27, 2026 advisory, affecting Firebox firewalls and potentially enabling…
Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS
Security researcher Saifeldeen Aziz says he found new zero-click bugs in Telegram stickers. He also says he chained them to run code on iOS. The work was…
TeamViewer Vulnerabilities Could Let Hackers Execute Malicious Code Through Remote Desktop Sessions
TeamViewer has released security updates for three high-severity vulnerabilities that could let attackers run malicious code, crash remote desktop…
Researchers Chain Cloudflare Security Flaws to Bypass CSP and Execute Malicious JavaScript
Security researchers at Searchlight Cyber chained several small weaknesses in Cloudflare’s image feature. The chain let them run JavaScript on a site that…
Beyond the Sandbox Verdict: 3 Questions for Faster SOC Decisions
Whether you’re investigating a suspicious URL or a file, you need more than a verdict to make a confident, evidence-based decision. You need to understand…
PropellerAds: Why Modern Malware Delivery Starts Before the Payload
By Farukh Rakhimov, Head of Compliance, Data Protection, and Information Security at AdTech Holding In March 2026, Google Threat Intelligence Group (GTIG)…
OWASP Finds ChatGPT Helped Low-Skilled User Take Over Admin Account in Hacking Test
OWASP found that ChatGPT helped an operator with no offensive security knowledge take over an administrator account during a controlled hacking test. The…
Veeam Patches Critical Backup & Replication Authorization Bypass Vulnerability
Veeam released security fixes for a critical authorization bypass vulnerability in Veeam Backup & Replication that lets an attacker without login…