Offerings of fully autonomous security operations centers (SOCs) are flourishing on the cybersecurity market and trigger anxiety about a future with empty desks. In reality, however, top security vendors exhibiting at Infosecurity Europe 2026 actually agree on one thing: AI… Read More "AI SOCs Will Still Need SOC Analysts, Security Vendors Say"
Ravie LakshmananJul 19, 2026Vulnerability / Network Security A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior their public disclosure since June 22, 2026.… Read More "SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access"
Does your chatbot know too much? Here’s why you should think twice before you tell your AI companion everything. 17 Nov 2025 • , 4 min. read In the movie “Her” the film’s hero strikes up an ultimately doomed romantic… Read More "What if your romantic AI chatbot can’t keep a secret?"
Cyber-attacks can have a significant impact on the most critical services which society relies on, and it is vital cybersecurity teams are prepared to respond when it happens. In Spring 2025, UK retailers Co-op and Marks & Spencer were both… Read More "Infosecurity Europe: Tabletop to Test Response to Major Cyber-Attack"
Ravie LakshmananJul 19, 2026Malware / Cyber Warfare Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware. According to the Computer Emergency Response Team of Ukraine… Read More "UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware"
ESET researchers provide insights into how PlushDaemon performs adversary-in-the-middle attacks using a previously undocumented network implant that we have named EdgeStepper, which redirects all DNS queries to an external, malicious hijacking node, effectively rerouting the traffic from legitimate infrastructure used… Read More "PlushDaemon compromises network devices for adversary-in-the-middle attacks"
A critical flaw in the open-source AI platform Flowise has been disclosed, along with working proof-of-concept (PoC) code, allowing an attacker to take over a server when a logged-in user simply imports a malicious workflow file. According to new analysis… Read More "Critical Flowise Flaw Gives Attackers Full Server Control"
Here’s how open-source intelligence helps trace your digital footprint and uncover your weak points, plus a few essential tools to connect the dots 20 Nov 2025 • , 5 min. read Whatever the reason, we spend vast amounts of time… Read More "Find your weak spots before attackers do"
A lack of skilled staff is the top operational challenge faced by today’s security operations centers (SOCs), although practitioners and leaders have diverging perceptions of hiring needs, according to SANS Institute. The 2026 SANS SOC Survey was based on interviews… Read More "Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS"
Why your business needs the best-of-breed combination of technology and human expertise 24 Nov 2025 • , 4 min. read When I was in my mid-teens, I decided to get a job in a small local garage to learn how… Read More "MDR is the answer – now, what’s the question?"
