For individuals

The bad guys are taking full advantage of AI to improve the production and effectiveness of their phishing attacks. Here’s how security practitioners can fight fire with fire.

Combining a malware sandbox with threat intelligence feeds improves security detection, analysis, and response capabilities.

Does your security operation center's performance meet the 5/5/5 benchmark for cloud threat detection and incident response?

This year marks the tenth anniversary of the Microsoft Bug Bounty Program, an essential part of our proactive strategy to protect customers from security threats. Since its inception in 2013, Microsoft has awarded more than $60 million to thousands of security researchers from 70 countries. These individuals have discovered and reported vulnerabilities under Coordinated Vulnerability Disclosure, aiding Microsoft in navigating the continuously evolving security threat landscape and emerging technologies.

Shocking as it was to see ALPHV/BlackCat report a ransomware case to the SEC, with the new SEC regs about to go into effect December 15, we’ll likely see more of this tactic.

CISA expects to extend this program to include up to 100 critical infrastructure entities in its first year.

CISOs and vendors must work together to keep up with emerging threats and find solutions, says a group of CISOs and security entrepreneurs.

The Known Exploited Vulnerabilities (KEV) catalog is a high-quality source of information on software flaws being exploited in the wild, but updates are often delayed, which means companies need other sources of threat intelligence.