Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1296 articles
The author argues that Mythos accelerates an existing trend in AI-assisted vulnerability discovery, citing vendor and open-source examples, while warning that organizations may struggle to triage and remediate the growing volume of findings.
Push bombing, or MFA fatigue, overwhelms users with repeated login prompts after credentials are stolen, hoping they approve one. The article describes Uber and Cisco incidents and recommends phishing-resistant MFA and reporting unexpected prompts.
After a year as Zoom’s CISO, Sandra McLeod reflects on shifting from reactive incident response to strategic security leadership, balancing risk reduction with business goals, and taking responsibility for incident escalation and prevention.
Huntress outlines ongoing security practices for organizations, including MFA, phishing awareness, patching, strong passwords, limiting exposed RDP, monitoring, access controls, logging, backups, and least privilege.
A practical MFA guide explains authentication factors, phishing and bypass risks, and organizational rollout. It recommends prioritizing privileged accounts and favoring authenticator apps or phishing-resistant keys over SMS.
A CloudGoat walkthrough shows how SSRF in an EC2-hosted application can expose IMDS credentials and enable privilege escalation through Lambda, EC2 and S3. It recommends enforcing IMDSv2, restricting requests and using least-privilege IAM.
An op-ed argues that AI-driven threat acceleration makes static audits and posture snapshots insufficient, urging CISOs to prioritize runtime visibility, identity inventory, least privilege, contextual alert triage, and realistic incident rehearsals.
The profile describes China-linked Red Menshen’s alleged use of BPFDoor, a packet-triggered Linux backdoor, to maintain stealthy access. It highlights telecom and network-edge targeting, exploitation for initial access, and multi-stage post-compromise tools.
Sysdig argues that Claude Mythos’s reported vulnerability discoveries signal faster AI-enabled offense and urges security teams to expand AI-assisted code review, continuous patching, automated response, governance and agent measurement.
Flare’s sponsored analysis describes scam-call operations using specialized roles, underground recruitment, real-time supervision and performance-based pay, and recommends stronger identity checks, anomaly detection and awareness of social-engineering calls.
Huntress describes attacks using malicious search results, fake AI-style instructions and AI-assisted phishing infrastructure to blend into trusted workflows and scale credential theft and identity attacks.
An IPQS-sponsored article outlines using email, phone, device, location, session, identity and payment signals at signup, login and checkout, with risk-based verification to detect fraud while limiting friction for legitimate users.
The article says Mythos advances AI vulnerability discovery but does not make enterprise exploitation automatic. It urges defenders to use auditable, context-aware AI to improve prioritization and remediation while keeping humans involved.
The guide describes five prompt-jailbreak families for probing Claude Opus 4.7’s cyber safeguards, outlines use of PyRIT, Garak and Promptfoo, and discusses multi-turn testing and Anthropic’s bug-bounty program.
The article explains how structured threat intelligence can help organizations prioritize CTEM exposures by asset criticality, exploitability, and adversary relevance, then validate controls with threat-aligned simulations.
The article says Microsoft patched an Excel XSS flaw that could let a malicious file hijack Copilot Agent to exfiltrate spreadsheet data. It argues AI agents amplify traditional vulnerabilities and recommends egress controls, monitoring, permission reviews, and reprior.
ForceHound builds BloodHound CE graphs of Salesforce identities and permissions. The article explains API and Aura collection, empirical CRUD testing, graph integration, audit logging, and scope controls for security assessments.
Walkthrough builds an isolated two-VM Active Directory lab on Windows Server 2019 and Windows 10, configures AD DS and AD CS, creates deliberately overprivileged accounts, and disables Defender and the firewall for testing, with a warning not to use those settings in or
A walkthrough shows how ForceHound loads Salesforce identity and entitlement data into BloodHound to map privilege-escalation paths, Connected App access, and object permissions, including legacy authorizations not addressed by Salesforce’s 2025 restrictions.
A Flare-analyzed underground forum guide describes how carding actors vet stolen-card shops, assess supplier reliability, and use layered operational security. The article notes the guide may promote specific services.
A local Python and Flask simulation demonstrates how prompt injection could expose an admin token, enable MCP server and model compromise, and lead to code execution through an unsafe CI/CD deploy endpoint.
A hands-on walkthrough demonstrates seven ways to enable RDP on a Windows Server 2019 domain controller using credentials or hashes over SMB, WMI, WinRM, and RPC, then connect from Kali; it also outlines hardening and detection measures.
Tony Sager’s RSAC 2026 reflections emphasize separating AI governance from AI-assisted GRC, grounding trust in established security practices, and sustaining cybersecurity work through practical outcomes, outreach, visibility, and partnerships.
This sponsored article argues that AI SOC tools often stop at triage. Scaling their value requires integrated, auditable workflows combining AI agents, deterministic automation, and human oversight, plus testing execution in the buyer’s own environment.
