They Broke the Story on Flock Leaking Cops’ License Plate Searches. Ask Them Anything.

Organizations are struggling to detect, investigate, and contain cloud threats before adversaries achieve their goals. The new CrowdStrike State of Cloud Detection and Response (CDR) Survey highlights the primary challenges they face: Incomplete visibility across cloud workloads, identities, APIs, and cloud control plane activity Difficulty distinguishing malicious activity from legitimate cloud operations Detection and…

I keep hearing the same frustration when I talk with security leaders. The real problem sitting on their desk isn’t finding vulnerabilities. It’s deciding which ones actually matter. The industry has spent billions on better visibility. We’ve convinced ourselves that if we could just discover more vulnerabilities, collect more data, and ingest more threat intelligence,…

The Deputy CISO blog series is where Microsoft  Deputy Chief Information Security Officers (CISOs) share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start (and stop) deploying, forward-looking commentary on where the industry is going, and more. In this article, Raji Dani, Vice President and…

Three Russian nationals are accused of running an internet hosting network that helped cybercriminals keep ransomware, phishing, malware, and data-theft operations online. Federal prosecutors say the case involves more than $62 million in losses to victims in 21 U.S. states and several other countries. The alleged victims included banks, schools, hospitals, government entities, media companies,…

SonicWall warns of active exploitation of two SMA 1000 zero-days Pierluigi Paganini July 15, 2026 SonicWall warns of active attacks exploiting two SMA 1000 zero-days, including a flaw enabling arbitrary command execution. SonicWall confirmed the active exploitation of two zero-day vulnerabilities affecting Secure Mobile Access (SMA) 1000 appliances. The vulnerabilities were internally discovered and reported by…

Recent leaks of internal messages from the Conti ransomware gang provide a unique insight into the operations of one of the world’s most notorious cybercrime groups. The messages, leaked by a Ukrainian member, reveal the gang’s organizational structure and internal dynamics. The timing of the leak coincides with the gang’s declaration of support for Russia…