Cybersecurity, AI, etc.
Blue teaming (defensive research, detection engineering, incident response case studies, new detection/hunting methodologies)
Summary Britain’s National Cyber Security Centre (NCSC) has laid out plans for what it calls “a national scale, sovereign defense capability” powered by agentic AI systems. Dubbed “Cyber Shield,” the…
Summary Blackpoint Cyber’s Adversary Pursuit Group has uncovered “Avalon,” a previously undocumented modular malware framework that bundles credential harvesting, lateral movement, remote access, backup and recovery disruption, and ransomware deployment…
Summary Jamf has launched Beacon by Jamf Threat Labs, a premium threat hunting service built specifically for enterprise Mac environments. Announced on July 1, 2026, the service provides organizations with…
Microsoft Incident Response and its Defender security research team have published a detailed advisory warning that attackers can hijack AI agents — including those integrated with Microsoft 365 Copilot, Copilot…
Summary Researchers have detailed “EvilTokens,” a sophisticated AI-powered phishing-as-a-service (PhaaS) operation that abuses Microsoft’s legitimate OAuth 2.0 device-code authentication flow to steal Microsoft 365 tokens at industrial scale. The operation…
The SANS 2026 Detection Engineering Survey, conducted in partnership with Anvilogic, paints a sobering picture of the state of defensive security operations. Surveying 307 practitioners across more than 10 industries,…
Microsoft has removed 119 malicious Edge browser extensions and suspended over 90 associated developer accounts in a takedown of “StegoAd,” a long-running malware operation active since at least 2021. The…
Summary BreachRx has launched the Rex Platform, an agentic AI incident command center designed to handle multiple simultaneous breaches — a scenario the company argues is now the norm in…
Summary CVE-2026-20253, a critical unauthenticated remote code execution vulnerability in Splunk Enterprise, is being actively exploited in the wild. The flaw, carrying a CVSS score of 9.8, exists in the…
Summary IBM has joined OpenAI’s Daybreak Cyber Partner Program, gaining access to frontier AI models — including GPT-5.5 with Trusted Access for Cyber — to build AI-powered application security services…