Cybersecurity, AI, etc.
Blue teaming (defensive research, detection engineering, incident response case studies, new detection/hunting methodologies)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive today ordering all Federal Civilian Executive Branch (FCEB) agencies to patch two critical vulnerabilities in Fortinet’s FortiSandbox…
Summary Sophos launched Sophos Fusion on July 15, 2026, announcing it as the industry’s first complete AI-native cybersecurity defense system. Fusion integrates endpoint, network, identity, email, and cloud security controls…
Summary The White House announced the GOLD EAGLE initiative this week, a new operational model for federal cyber defense that leverages advanced AI capabilities for what the administration is calling…
Microsoft patched “RoguePlanet” (CVE-2026-50656), a zero-day privilege escalation vulnerability in Microsoft Defender, on July 9, 2026. The flaw exploits a race condition in Defender’s threat remediation engine to grant attackers…
BeyondTrust has disclosed a critical pre-authentication vulnerability — CVE-2026-40138 (CVSS v4: 9.2) — affecting its Remote Support (RS) and Privileged Remote Access (PRA) appliances. The flaw stems from improper validation…
Summary Britain’s National Cyber Security Centre (NCSC) has laid out plans for what it calls “a national scale, sovereign defense capability” powered by agentic AI systems. Dubbed “Cyber Shield,” the…
Summary Blackpoint Cyber’s Adversary Pursuit Group has uncovered “Avalon,” a previously undocumented modular malware framework that bundles credential harvesting, lateral movement, remote access, backup and recovery disruption, and ransomware deployment…
Summary Jamf has launched Beacon by Jamf Threat Labs, a premium threat hunting service built specifically for enterprise Mac environments. Announced on July 1, 2026, the service provides organizations with…
Microsoft Incident Response and its Defender security research team have published a detailed advisory warning that attackers can hijack AI agents — including those integrated with Microsoft 365 Copilot, Copilot…
Summary Researchers have detailed “EvilTokens,” a sophisticated AI-powered phishing-as-a-service (PhaaS) operation that abuses Microsoft’s legitimate OAuth 2.0 device-code authentication flow to steal Microsoft 365 tokens at industrial scale. The operation…