We are not ready for what AI has done to red teaming
Something shifted in offensive security over the last eighteen months that most organizations haven’t fully absorbed […]
Beyond deterministic worms: Preparing the SOC for reasoning adversaries
In May 2017, the WannaCry cryptoworm spread across the internet, compromising more than 200,000 computers in […]
PHP2Shell plus Fragnesia: A dangerous new route from web server to root
The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions […]
A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructure
In a deep dive into the Silent Train attack tactic used by China’s Volt Typhoon cybercrime […]
New Cisco firewall zero-day being actively exploited
A high-severity flaw in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security […]
Fake Anthropic AI previews lure in overeager employees
Everyone wants to know what Anthropic is up to, and hackers are gleefully exploiting the fact. […]
Anthropic and OpenAI diverge on who should pull the plug on risky AI
OpenAI and Anthropic agree that frontier AI systems need stronger oversight, but they are proposing sharply […]
Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secrets
Attackers are impersonating AI agents from companies including OpenAI, Anthropic, and Meta in a bid to […]
Vulnerability exploitation rising as the root cause of many breaches
More evidence has emerged that attackers are turning to vulnerabilities rather than phishing as a means […]
Securing MCP servers before the AI rollout outpaces security
Your company’s CTO has a plan to implement your company’s first LLM-based application. The board approved […]