The FBI is urging private companies to share more cyber threat information, with Assistant Director Brett Leatherman saying, Our posture is, 'Share until it hurts,' and warning that hesitancy to engage can slow down efforts to help victims and remove hostile actors.
OpenAI is currently investigating a frustrating outage that's disrupting ChatGPT's image generation capabilities, leaving users unable to upload files or generate images. The issue, tied to a recent internal change, is causing a spike in errors and hangs for hundreds of users.
France's national cybersecurity agency, ANSSI, has launched REACTIV, a cutting-edge incident response mechanism that swiftly mobilizes expert skills and resources to tackle data breaches alongside concerned ministries. This bold move empowers ANSSI to respond rapidly and effectively to cyber threats, bolstering France's defenses in the digital age.
A single misstep in access control can have devastating consequences: one terminated employee's lingering credentials led to hundreds of thousands of dollars in damages, including data deletion, system lockdowns, and a corrupted database. The breach not only racked up costly recovery fees but also brought a high-priority project to a grinding halt for weeks.
With ESET's Managed Detection Response (MDR), small and midsize businesses can tap into expert-driven threat monitoring and hunting capabilities, leveling up their cybersecurity game without needing an elite in-house team. This game-changing approach bridges the gap between threat research and real-world defense, empowering organizations to stay one step ahead of threats.
The traditional Security Operations Center (SOC) model is broken, relying on an outdated alert queue that leaves most threats uninvestigated. AI-powered SOCs are changing the game with a new architecture that uses software agents to transform the queue into a continuous investigation engine.
UK manufacturers are leaving themselves exposed, with almost a third having experienced a cyber incident in the past year, resulting in reduced production capacity, operational delays, and supply chain disruptions. The alarming reality is that many factories are flying blind, unable to see and respond to cyber threats.
DEF CON and the National Rural Water Association are teaming up to revolutionize cyber defenses for small water utilities, which make up 98% of the nation's water systems, by launching the Water Watch Center, a managed cybersecurity program. This game-changing initiative will bring AI-powered protection and expert support to these vulnerable yet critical organizations.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Discover how AI platforms are revolutionizing Security Operations Centers (SOCs) by taking on high-level roles and freeing teams to focus on critical threats. By integrating with existing security tools, these platforms enable teams to efficiently sift through millions of alerts and catch potential threats that might otherwise fly under the radar.
Most organizations are unprepared to tackle a major cyberattack, with a staggering 73% admitting they'd struggle to respond effectively if one hit tomorrow. The real challenge lies not in having the right tools and plans, but in getting them to work seamlessly together under pressure.
A whopping 40% of attacks slip through undetected due to glaring gaps in Security Information and Event Management (SIEM) systems, leaving organizations alarmingly exposed.
Don't let a cyber-attack catch you off guard - the NCSC's new guidance helps you prepare for the worst with a practical, three-stage playbook to respond and recover. Train for the cyber-marathon with a clear plan to tackle disruptions and get back on track.
Stay ahead of cyber threats: the US and Australia are urging critical infrastructure operators to isolate vital systems during cyberattacks to minimize damage and protect essential services. A new advisory provides practical guidance on how to plan for and execute a safe disconnection from vulnerable networks.
Federal agencies are revolutionizing their approach to cybersecurity by shifting from a focus on data volume to decision-quality outcomes, and those making intentional, decision-oriented data architectures are leading the way. By explicitly identifying the data needed to support operational decisions, these agencies are achieving clarity on data existence, location, and protection.
The House Intelligence Committee has just greenlit a bill that supercharges cyber threat sharing between federal and local governments, starting with a pilot program that will deliver monthly, unclassified briefings to a single state. This critical initiative aims to get timely, actionable intel to those who need it most, helping to safeguard communities from devastating cyber attacks.
When evaluating AI in security operations, it's crucial to determine if it can deliver accurate verdicts across various scenarios and attack surfaces - and surprisingly, verdict quality only improves dramatically once a certain threshold of relevant data, such as identity and context, is reached. Below that threshold, no amount of fine-tuning can compensate.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
CISA swiftly sprang into action after discovering a major credential leak on May 15, taking swift and decisive steps to halt the breach and prevent further damage. By sharing their incident response experience, CISA aims to help other organizations bolster their defenses and avoid similar security mishaps.
When a security researcher uncovered exposed credentials in a public GitHub repository, CISA sprang into action, swiftly mitigating any potential exposure to its cloud resources and code repositories. Thanks to the researcher's sharp eyes and KrebsOnSecurity's reporting, CISA was able to respond quickly and contain the incident.
Say goodbye to tedious reinstallation processes! Microsoft is testing a game-changing Cloud Rebuild feature in Windows 11, allowing users to restore their PC to a clean state with a simple, full OS reinstall - even if Windows won't boot.
Kaspersky's 2025 Compromise Assessment analysis reveals a shocking truth: 60% of incidents go undetected due to a lack of reliable alerts from existing tools, while manual detection accounts for only 20% of discovered threats. This blind spot allows threats to hide for alarmingly long periods, with 30.8% of incidents having a dwell time of over three months.
The UK's cultural treasures are under threat from rising cybersecurity risks, with a recent report criticizing the Department for Culture, Media and Sport for being reactive rather than proactive in protecting national galleries and museums. This vulnerable stance puts priceless artifacts and historical exhibits at risk of being compromised.
With a sprawling security stack of 40+ tools, enterprise teams are drowning in overlapping alerts and manual handoffs, leaving gaping holes for adversaries to exploit. This disjointed approach leaves teams scrambling to respond to threats, with attackers enjoying a lengthy 43-day window to wreak havoc.
The EU has stepped up to bolster Ukraine's cyber defenses, approving the country's inclusion in the EU Cybersecurity Reserve and making 47 trusted private providers available to offer emergency support against cyber threats. This move enables Ukraine to tap into critical EU cyber support, even as it pursues EU membership.
The 2026 SANS SOC Survey reveals a disconnect: while 79% of respondents use AI or machine learning tools, only 36% have integrated them into a defined workflow, highlighting a key challenge in Security Operations Centers. Practitioners cite staffing shortages as their top operational challenge, but leaders seem less concerned.