About ThreatRoundup

ThreatRoundup is an independent cyber security news site. Every day we pick the security stories that matter, read the original reporting and research, and explain them twice: once in plain English for everyone, and once in detail for the people who defend networks for a living.

What you get

The Roundup. Short write-ups of the day’s breaches, actively exploited vulnerabilities, ransomware attacks and scams. Each one says what happened, who it affects, and what to do about it, with a link to the original report.

For defenders. Affected versions, CVE IDs, exploitation status, patches and mitigations, and the MITRE ATT&CK techniques involved, so a SOC or vulnerability management team can act on the story directly.

Hunt Leads. For stories with enough technical detail, a full report written for detection engineers and threat hunters: what to hunt for, how to build and tune each detection, false-positive risk, published rules and annotated hashes. Levels run from 1 (Junior) to 3 (Elite).

CVE Watch. Every Monday: the critical and high-severity vulnerabilities from the past ten days, with exploitation status, proof-of-concept availability and what to patch first.

How we work

We summarize and comment on reporting from security researchers, vendors, government agencies and news outlets, and we always link the original. We never republish other people’s work, never link to leaked data or stolen-data dumps, and we treat claims by ransomware and hacktivist groups as claims until the victim or a credible source confirms them. Indicators of compromise are always de-fanged.

A person reviews and approves every post before it is published. We use AI tools to help research and draft, and every post is checked against its sources.

Spot a mistake? Tell us at tips@threatroundup.com and we’ll correct it.

Money

Some product links are affiliate links; see our affiliate disclosure. Affiliate relationships never decide what we cover or recommend.