Accenture, Dragos and SANS launch $10 million utility cyber program
Up to 500 US water, power and gas utilities under $100 million in revenue get free OT tools, deployment and training.
Up to 500 US water, power and gas utilities under $100 million in revenue get free OT tools, deployment and training.
Fixed builds are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35; watchTowr reports no observed attacks.
Elastic unmasked Apex, a fake Web3 accelerator pushing malicious npm packages and infostealers to crypto founders.
ANY.RUN and Elastic recapped a webinar on using threat intelligence feeds inside Elastic Security workflows.
Elastic patched 14 flaws, including a CVSS 8.8 Kibana bug letting Fleet users intercept other tenants' data.
Elastic previews AlertZero, an agentic Elastic Security layer that triages alerts and proposes analyst-approved SOC actions.
Elastic patched 14 flaws, including a Kibana bypass that can intercept another tenant's data.
SOCRadar says analysts can investigate its alarms inside Elastic and Kibana instead of a separate console.
Iranian-linked CL-STA-1178 posed as Dubai Airports recruiters to infect engineers with ShelbyLoader V2.
Elastic explains how it scores 1,781 SIEM detection rules for noise, speed, and threat coverage.
Claude's Compliance API lets security teams monitor chats, files, and AI agent activity in SIEM and DLP tools.
Elastic InfoSec uses a 68-line workflow to keep Linux endpoint and AI-agent config current without MDM.
Elastic and Sublime Security correlate quarantined phishing email with endpoint alerts for agentic response.
Weekly recap led by actively exploited Cisco ISE auth-bypass CVE-2026-76460 (CVSS 10.0), plus Plugin4Shell AI-agent RCE and KREMLIN banking malware.
Jina AI open-sourced jina-ocr-v1, a 3.4B MoE OCR model with speculative decoding that parses documents to Markdown at 2.57 pages/second on an A100.
Elastic tracks KREMLIN banking malware that used fake Brazilian bank JavaScript lures to deploy malicious Chrome and Edge extensions on 1,515 systems.
RedisRaider cryptojacking campaign compromises thousands of exposed, unauthenticated Linux Redis servers using cron persistence to deploy XMRig Monero miners.
Elastic compares SIEM data egress cost, latency, and fidelity across CrowdStrike, Microsoft, Google, and Splunk, arguing vendors engineer lock-in.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.2K readers · 1.9K views · 1.4K reads · all time 160K views