When AI-Accelerated Discovery Outruns Patching, Exploitability Proof Decides What Gets Fixed First
Why Qualys joined the Athena coalition, and what it means for how you prioritize risk. Qualys is proud to have joined Athena, the industry coalition…
Category: ThreatIntelligence-IncidentResponse
OWASP Top 10 2025 Coverage Map: Is Your AppSec Program Ready?
Key Takeaways Most AppSec programs treat API-layer coverage as a DAST extension, but BOLA, BFLA, and SSRF require authenticated multi-role testing that traditional scanners weren’t…
Microsoft 365 Hardening and Huntress Managed ISPM
We spent three months assessing how Microsoft 365 environments actually get compromised. What we found should change how you think about identity hardening. In front…
Train, triage, repeat: The AI agent changing how we fight phishing
We’ve already established that artificial intelligence is raising the bar for adversaries. This is especially the case when it comes to crafting phishing messages. These…
The Hacker’s 2026 Playbook: Dark Web Tactics Targeting You
Sometimes it starts with something as simple as dragging a link into your browser. Three seconds later, a cybercriminal has the tokens they need to…
Flash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
Detect case variation in command execution: Hunt for mixed-case command invocations like Cmd.eXE, CmD.Exe which may indicate evasion attempts Behavioral Correlation Rules Hunt for FileZilla installation on servers…
Akira, LimeWire, and the Sour Taste of Data Exfiltration
“ Acknowledgments: Special thanks to the efforts of Michael Tigges, Anna Pham, Adam Mooney, and Samantha Shaw for their contributions to this investigation. On May…
Why Your Organization Needs ISPM
Microsoft 365 gaps rarely announce themselves. Risk builds quietly in the background. An admin account accumulates more access than it needs. A Conditional Access policy…
Next-Gen Phishing Tactics Users Aren’t Ready For
For years, standard Security Awareness Training (SAT) has conditioned users to look for the same old red flags: a misspelled domain name, a sketchy sender…
We Need to Talk About Device Code Phishing
In February 2025, Russian threat actor Storm-2372 used Microsoft Teams meeting invite lures to deliver device code phishing messages, stealing victims’ authenticated sessions. In March 2026,…
Windows 11 24H2 EOL: Resolve Version Drift with TruRisk Eliminate
Key Takeaways Windows 11 24H2 reaches the end of servicing on October 13, 2026, making timely enterprise upgrades critical. Enterprises often face version drift, with…
CNAPP’s New Normal: Hyper-Prioritization and Autonomous Remediation at Cloud Scale
AI-powered detection has crossed a threshold. Security teams can now surface vulnerabilities, misconfigurations, and active attack paths at a speed and scale that was unimaginable…