|
By Adam Marrè
For four decades, U.S. law drew a hard line around private-sector cybersecurity. Companies could detect, respond to, and report attacks. They could not fight back. On Wednesday, August 12, 2026, that line moved. President Trump signed a National Security Presidential Memorandum (NSPM) directing the Department of Justice (DOJ) and the Department of Homeland Security (DHS) to build a program letting vetted private companies conduct offensive cyber operations against foreign criminal groups.
|
By Arctic Wolf
Twenty-two seconds. That’s the median time it now takes for one attacker to hand freshly compromised access to the next team in the chain, the group that drives toward ransomware. In 2022, that hand-off took more than eight hours. In 2025, it took twenty-two seconds. Now consider how the average security operations center (SOC) is structured to respond. An alert fires, lands in a queue, and waits for a Tier 1 analyst to triage it. It escalates to Tier 2 for investigation.
|
By Arctic Wolf Labs
A critical zero-day vulnerability (CVE-2026-50656/“RoguePlanet”) in Microsoft Defender’s Malware Protection Engine (mpengine.dll) enables local users, including standard, low-privilege accounts, to escalate privileges to NT AUTHORITY\SYSTEM using a race condition and improper link resolution. Microsoft initially issued a patch (Engine v1.1.26060.3008) in July 2026.
|
By Dan Schiappa
Black Hat 2026 came just weeks after the Five Eyes cybersecurity agencies — CISA, the UK’s NCSC, Australia’s ACSC, Canada’s CCCS, and New Zealand’s NCSC-NZ — issued a joint statement to boards and executives with the blunt message that AI is rewriting the rules of cyber risk, the window between vulnerability and exploitation is shrinking, and organizations have a matter of months to adapt.
|
By Arctic Wolf Labs
Arctic Wolf is tracking an ongoing Microsoft 365 phishing campaign affecting healthcare, education, manufacturing, government, professional services, and other sectors across the United States, Canada, and Europe. In July 2026, we observed hundreds of organizations being targeted by email, with successful intrusions identified across a broad range of environments.
|
By Arctic Wolf Labs
On July 30th, 2026, SolarWinds released fixes for a critical Authentication-Bypass vulnerability in Web Help Desk (WHD) tracked as CVE-2026-28323, and a related high-severity Denial-of-Service vulnerability, tracked as CVE-2026-28299. Although no active exploitation has been observed yet, WHD is commonly internet-facing and the authentication bypass requires no credentials, making it a likely target once exploit code becomes available.
|
By Arctic Wolf
A sophisticated supply chain attack has actively compromised multiple npm packages, including keyv, cacheable, cacheable-request, flat-cache, file-entry-cache, and possible related adapters. Attackers took control of a popular maintainer’s npm account on or before August 4, 2026, and began publishing trojanized package versions containing a preinstall hook (setup.mjs) as a loader.
|
By Arctic Wolf
Avni Wala, Principal Developer – Arctic Wolf Laura Ellis, SVP Artificial Intelligence – Arctic Wolf Merin Eralil, Security Partner Solutions Architect – AWS Tim Sitze, Solutions Architect – AWS AI didn’t just make defenders faster. It made attackers faster too. The moment both sides got access to the same speed, speed stopped being the advantage. With speed no longer separating attackers from defenders, the deciding factor moved somewhere else.
|
By Will Briggs
AI has overwhelmingly changed how organizations build and grow. It’s also changed how attackers find and exploit exposures and weaknesses. The window between “exposure exists” and “exposure is exploited” is shrinking, and most security teams already feel it.
|
By Dan Schiappa
AI didn’t just make defenders faster. It made attackers faster too. The moment both sides got access to the same speed, speed stopped being the advantage. With speed no longer separating attackers from defenders, the deciding factor moved somewhere else. Ask a CISO what’s actually kept agentic security out of reach, and it comes down to this: they can’t afford to build it, and even if they could, they’d struggle to trust it. Neither half of that problem outweighs the other.
|
By Arctic Wolf Networks
Arctic Wolf President of Technology & Services Dan Schiappa sits down for a cocktail chat with Arctic Wolf SVP of Corporate Marketing Ilina Cashiola at Black Hat USA 2026 to break down the momentum behind the Aurora Agentic SOC and what's next for AI-led security operations.
|
By Arctic Wolf Networks
Arctic Wolf President & CEO Nick Schneider sits down with Ilina Cashiola, SVP of Corporate Marketing, for a cocktail chat at Black Hat USA 2026 to break down three major announcements shaping the next chapter of AI-led security operations.
|
By Arctic Wolf Networks
Attackers are using AI to move faster, scale broader, and automate attacks at machine speed, but no one wants fully autonomous AI making high-stakes decisions unchecked. There's a better way: Super Instinct meets Super AI. Meet the Aurora Agentic SOC, the world's largest commercial agentic SOC, built on the Aurora Superintelligence Platform. The completely new operating model pairs human instinct with AI-powered security operations to outperform human-only and AI-only approaches alike.
|
By Arctic Wolf Networks
This month, we sit down with Diana Holtsman, Vice President of PMO, to learn more about her journey to Arctic Wolf, how her role within Finance influences company strategy and decision-making, and so much more! Diana is VP, Finance PMO at Arctic Wolf where she supports both the CFO and CEO — keeping the company's biggest priorities moving across strategic planning, operating cadence, board readiness, and cross-functional initiatives. In working across both the finance and executive offices, she has a rare vantage point on how the whole company fits together.
|
By Arctic Wolf Networks
Vulnerability discovery is only half the story; remediation is where breach potential gets reduced. Resolve, part of Arctic Wolf's Aurora Vulnerability Management, brings one-click patch deployment across Windows, Mac, and Linux so security teams can move from "we found it" to "we fixed it" without the manual overhead. In this overview, see how Resolve turns vulnerability data into action: one-click patch orchestration, flexible scheduling, and clear visibility into remediation status — all inside the Aurora platform.
|
By Arctic Wolf Networks
AI is accelerating cyberattacks, pushing security teams to their breaking point. Arctic Wolf helps organizations get ahead and stay there with the Aurora Superintelligence Platform, combining AI that is built in, not bolted on, with human validation and 24x7 security operations. See how Arctic Wolf helps protect more than 10,000 customers.
|
By Arctic Wolf Networks
Cybersecurity has reached a turning point. As defenders embrace AI, the question is not simply whether it is powerful, but whether it can be trusted to deliver real value. The Arctic Wolf Aurora Superintelligence Platform brings together trusted AI, real-world data, and human expertise to help transform security operations with reliability, governance, and results.
|
By Arctic Wolf Networks
Learn how to identify, prioritize, and remediate vulnerabilities using Aurora Vulnerability Management and the Resolve integration. This demo walks through filtering and targeting high-risk vulnerabilities, deploying patches across assets, and tracking patch jobs to reduce risk more efficiently.
|
By Arctic Wolf Networks
In this demo, we will see how Arctic Wolf security posture reviews and the self-service capability deliver high quality recommendations and give customers the flexibility to maximize posture improvements at their own pace.
|
By Arctic Wolf Networks
This month, we sit down with Trisha Farrow, our Senior Vice President of People and Facilities. In this episode, Trisha Farrow shares the heart behind her leadership—why human connection, courage, and curiosity matter more than ever in a fast-changing world. From building inclusive cultures to navigating AI in HR, she offers a powerful perspective on what it really means to lead people, not just processes.
|
By Arctic Wolf
Security information and event management (SIEM), security orchestration, automation, and response (SOAR), and the newer extended detection and response (XDR) solutions have become the top choices for organizations wanting a unified view of activity within their IT environments. By combining relevant data into single consoles, XDR, SIEM and SOAR technologies minimize the time analysts spend moving between platforms and make it easier to correlate the data and develop subsequent steps appropriately.
|
By Arctic Wolf
The Health Insurance Portability and Accountability Act (HIPAA) Security Rule focuses on the safeguarding of electronic protected health information (ePHI) through the implementation of administrative, physical, and technical safeguards.
|
By Arctic Wolf
Financial institutions, particularly regional banks and credit unions, are facing challenges both in terms of safeguarding data of their customers and meeting data security compliance standards. Information technology (IT) teams in these institutions are stretched thin. They struggle with needing to meet compliance obligations while simultaneously combatting cyberthreats.
- August 2026 (15)
- July 2026 (13)
- June 2026 (27)
- May 2026 (19)
- April 2026 (14)
- March 2026 (21)
- February 2026 (15)
- January 2026 (20)
- December 2025 (14)
- November 2025 (11)
- October 2025 (17)
- September 2025 (24)
- August 2025 (20)
- July 2025 (25)
- June 2025 (20)
- May 2025 (17)
- April 2025 (16)
- March 2025 (16)
- February 2025 (7)
- January 2025 (18)
- December 2024 (17)
- November 2024 (11)
- October 2024 (14)
- September 2024 (22)
- August 2024 (13)
- July 2024 (22)
- June 2024 (18)
- May 2024 (14)
- April 2024 (15)
- March 2024 (11)
- February 2024 (16)
- January 2024 (17)
- December 2023 (12)
- November 2023 (15)
- October 2023 (13)
- September 2023 (14)
- August 2023 (18)
- July 2023 (23)
- June 2023 (19)
- May 2023 (17)
- April 2023 (17)
- March 2023 (22)
- February 2023 (23)
- January 2023 (14)
- December 2022 (19)
- November 2022 (16)
- October 2022 (23)
- September 2022 (22)
- August 2022 (14)
- July 2022 (9)
- June 2022 (11)
- May 2022 (12)
- April 2022 (17)
- March 2022 (13)
- February 2022 (9)
- January 2022 (10)
- December 2021 (13)
- November 2021 (16)
- October 2021 (6)
- September 2021 (8)
- May 2021 (2)
- November 2020 (2)
- August 2020 (1)
- November 2019 (1)
- August 2019 (1)
- March 2017 (2)
Cybersecurity is a field that requires 24x7 vigilance and constant adaptation. Arctic Wolf’s cloud native platform and Concierge Security® Team delivers uniquely effective solutions.
The cybersecurity industry has an effectiveness problem. New technologies, vendors, and solutions emerge every year—yet, we still see headlines filled with high-profile breaches. Many attacks occur – not because a product failed to raise an alert – they fail because the alert was missed or was not actioned on. To prevent these attacks, the industry needs to adopt a new approach by focusing on security operations. That’s where Arctic Wolf can help.
Arctic Wolf® Platform
Spanning thousands of installations, the Arctic Wolf® Platform processes over 200 billion security events daily. The platform collects and enriches endpoint, network, and cloud telemetry, and then analyzes it with multiple detection engines. Machine learning and custom detection rules then deliver personalized protection for your organization.
While other products have limited visibility, the vendor-neutral Arctic Wolf® Platform enables broad visibility and works seamlessly with existing technology stacks, making it easy to adopt while eliminating blind spots and vendor lock-in.
Concierge Security® Team
Arctic Wolf invented the concept of Concierge Security®. With this delivery model, we pair a team of our security operations experts directly with your IT or security staff. Your Concierge Security® Team gives you 24×7 eyes-on-glass coverage. We work with your team on an ongoing basis to learn your security needs so that they can tune solutions for maximum effectiveness and ensure that your security posture gets stronger over time.
The Concierge Security® Team combines deep security operations expertise with an understanding of your environment to deliver better outcomes. We take on tactical actions like threat hunting and alert prioritization, and strategic tasks like security posture reviews and risk management.