Firewall-as-a-service moved from experiment to default: inspection, IPS, and policy delivered from the cloud, priced per user or per site instead of per…
Top 10 Best Extended Detection & Response (XDR) Platforms in 2026
Palo Alto Cortex XDR scores highest in our 2026 evaluation, with CrowdStrike close behind on detection engineering and Microsoft Defender XDR leading on…
MikroTik router flaws allow takeover without a password
Attackers are exploiting critical RouterOS flaws to take control of routers with SSH exposed to the internet.
Top 10 Best Managed Detection & Response (MDR) Services in 2026
MDR gives you a 24/7 security operations team without hiring one. Modern Managed Detection and Response (MDR) services fuse advanced analytics with…
Mathspace Data Breach Exposes Over 1 Million People
Hackers stole the information of students, teachers, staff, and parents/guardians from a self-hosted Metabase instance.
Top 10 Best Firewall-as-a-Service (FWaaS) Providers in 2026
Firewall-as-a-service moves inspection, IPS, and policy into the cloud, so every user and site gets the same protection without appliances to size, patch,…
ASUS Control Center Critical Flaw Allows Unauthenticated Attackers to Gain Root Access
ASUS has released a security update for the Control Center Express Agent to address CVE-2026-19397, a high-severity vulnerability related to missing…
Top 10 Best Web Application Firewall (WAF) Solutions in 2026
A web application firewall (WAF) filters malicious HTTP/S traffic SQL injection, cross-site scripting, credential stuffing, and API abuse before it…
IT Security News Hourly Summary 2026-09-08 13h : 20 posts
20 posts published in the last hour 10:32REVSTEALER Malware Disables Window Security to Run a Crypto Miner 10:32ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager 10:32BigBear 2.0 Evilginx2 Phishing Campaign Bypasses Microsoft 365 MFA With Session Cookie…
REVSTEALER Malware Disables Window Security to Run a Crypto Miner
A new malware campaign associated with the REVSTEALER information stealing malware has been discovered using another four additional malicious programs to…
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
We assess with moderate confidence that the attacks are not targeted at a particular organization, but are a part of a cryptocurrency and…
BigBear 2.0 Evilginx2 Phishing Campaign Bypasses Microsoft 365 MFA With Session Cookie Theft
BigBear 2.0 is a phishing operation designed to steal proof that a user has already passed multi-factor authentication. It targets Microsoft 365 accounts…
The 12 Best Managed Firewall Services, Compared and Priced
Best value overall: Fortinet. Delivered directly and through the largest partner network in security, at price points the premium providers can’t approach…
Stealing AI Reasoning Traces
Interesting research: “ Stealing Reasoning Traces from Proprietary LLM APIs “: Abstract: Leading large language model providers now conceal their models’…
Panzer Ransomware Targets Italian Manufacturers and Telecom Firms With ESXi-Ready RaaS
Panzer ransomware has entered Italy amid a sharp rise in attacks. The ransomware-as-a-service, or RaaS, operation surfaced on August 5 and listed a…
The 12 Best Network Security Policy Management Tools, Compared and Priced
Best value overall: Opinnate. It targets the gap the enterprise vendors leave open policy automation at a price mid-market organizations can actually…
U.S. Offers $10 Million Reward for Iranian IRGC Cyber Chief Linked to Critical Infrastructure Attacks
The U.S. Department of State’s Rewards for Justice program has announced a reward of up to $10 million for information leading to the identification or…
The Best DNS Security Solutions, Compared and Priced (2026)
DNS security delivers more blocked attacks per dollar than any other network control when you buy the right shape at the right tier. The value verdict:…
AI Customer Service Bots Can Be Tricked Into Stealing Security Codes and Acting as Victims
AI-powered customer service bots are being given more responsibility inside businesses, including access to customer profiles, billing data, support…
SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws
SAP released 19 new Security Notes addressing four critical vulnerabilities and 15 additional flaws throughout its enterprise portfolio. The vendor also…
Top 10 Best Managed XDR Services in 2026
Managed XDR is MDR with a wider aperture: analysts monitoring correlated telemetry from endpoints, network, email, identity, and cloud rather than…
The 12 Best Antivirus (Endpoint Protection) Software for Business, Compared and Priced
Best value overall: Microsoft Defender for Endpoint — if you hold Microsoft 365 E5, you already own competitive enterprise endpoint protection and the…
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2
Cisco Talos is tracking a cryptocurrency-stealing campaign that abuses the Google Visualization API for command and control (C2), retrieving obfuscated…
U.S. Offers $10 Million Reward for Iranian IRGC Cyber Chief Amir Yaryab
The U.S. Department of State’s Rewards for Justice (RFJ) program has announced a reward of up to $10 million for information leading to the identification…