Category: ThreatIntelligence-IncidentResponse

Why strong auth could fail at SaaS session integrity
09
Mar
2026

Why strong auth could fail at SaaS session integrity

As security professionals, we have spent the better part of a decade building the ultimate digital fortress. We deployed FIDO2,…

A pie chart showing the severity distribution across the Patch Tuesday CVEs patched in February 2026.
08
Mar
2026

February 2026 Microsoft Patch Tuesday

2Critical 51Important 1Moderate 0Low Microsoft addresses 54 CVEs in the February 2026 Patch Tuesday released, including six zero-day vulnerabilities that…

Tenable Cloud Risk Report 2026 chart showing orgs with overprivileged IAM roles in AWS
08
Mar
2026

2026 Cloud security and AI security risk report

AI adoption is outpacing traditional cyber governance. The “Tenable Cloud and AI Security Risk Report 2026” reveals how overprivileged identities…

Threat hunting process
08
Mar
2026

Hunting for malicious OpenClaw AI in the modern enterprise

When shadow IT is discussed, it’s usually in the context of unauthorized SaaS apps or stray cloud buckets. But there’s…

08
Mar
2026

Microsoft and Adobe Patch Tuesday, February 2026 Security Update Review

Microsoft’s February 2026 Patch Tuesday focuses on closing security gaps that attackers could exploit, reinforcing the importance of timely patching in enterprise environments. Here’s a quick breakdown of what you need to know. Microsoft…

08
Mar
2026

Qualys Recognized as a Leader in the 2026 Forrester Wave for CNAPP

Qualys’ Key Takeaways Qualys Named a Leader: Recognized as one of only three leaders in The Forrester Wave: Cloud-Native Application…

npm package preinstall script
08
Mar
2026

New malicious npm package ‘ambar-src’ targets developers with open source malware

Tenable Research investigated a malicious npm package with around 50,000 downloads in the public registry. We observed various detection-evasion techniques…

They Got In Through SonicWall. Then They Tried to Kill Every Security Tool
08
Mar
2026

They Got In Through SonicWall. Then They Tried to Kill Every Security Tool

Summary In early February 2026, Huntress responded to an intrusion where threat actors leveraged compromised SonicWall SSLVPN credentials to gain…

08
Mar
2026

AI Patch Reliability Score – Predict and Prioritize Patch Impact

What do advisory USN-7545-1 and Windows updates KB5065426, KB5063878, KB5055523, and KB5066835 have in common? Based on anonymized Qualys telemetry…

Tenable  Attack Surface Management Cisco Catalyst SD-WAN Controller Query Screenshot
08
Mar
2026

CVE-2026-20127 Zero-Day Auth Bypass Exploited

Exploitation of a maximum severity authentication bypass zero-day vulnerability affecting Cisco Catalyst SD-WAN Controller and Manager has been reported. Immediate…

Manage your Elastic security stack as code with the Elastic Stack Terraform provider — Elastic Security Labs
08
Mar
2026

Manage your Elastic security stack as code with the Elastic Stack Terraform provider — Elastic Security Labs

The Elastic Stack Terraform provider has reached a significant milestone. Starting with release v0.13.1, you can manage your Elastic security…

KongTuke FileFix Leads to New Interlock RAT Variant
08
Mar
2026

KongTuke FileFix Leads to New Interlock RAT Variant

Researchers from The DFIR Report, in partnership with Proofpoint, have identified a new and resilient variant of the Interlock ransomware…