Cybersecurity, AI, etc.
Blue teaming (defensive research, detection engineering, incident response case studies, new detection/hunting methodologies)
Microsoft published new tracking guidance for CVE-2026-73570, an unauthenticated command-injection vulnerability affecting internet-facing mail servers. The advisory underscores a familiar but high-impact operational risk: exposed infrastructure can move quickly from…
Microsoft says the Russian state threat actor it tracks as Star Blizzard has expanded its operational playbook with large-scale phishing, compromised-website accounts, and a malware-delivery technique it calls RedFlick. Microsoft…
Anthropic has published a new assessment of Zhipu AI’s GLM-5.3, arguing that the open-weight model has crossed an important threshold in cyber capability. The report says GLM-5.3 can autonomously develop…
OpenAI has proposed safety cases for frontier AI training: structured evidence, incident-derived regression tests, postmortems, and disclosure after investigations conclude. Why it matters A safety case connects risk claims to…
OpenAI says GPT-6.1 Sol shows lower failure rates than GPT-6 Sol in evaluations of tool transparency, explicit restrictions, and avoidance of unauthorized agentic outcomes. Security implications Vendor evaluations are evidence,…
Zscaler’s ThreatLabz 2026 Ransomware Report says ransomware is rising and describes AI-assisted tactics, data theft, and targeting of privileged employees. How to use the finding The claims are vendor-report findings,…
CVE-2026-84782 is a reported OpenSSL DTLS handshake retransmission issue that may cause plaintext heap-memory disclosure or denial of service. Defender checklist Inventory DTLS-dependent services, including embedded products. Confirm OpenSSL versions…
Apple has released iOS and macOS updates that address CVE-2026-86950, reported by Meta’s product security team and described in security reporting as a zero-day. What to do now Deploy current…
CISA warns that Citrix NetScaler ADC and Gateway flaws CVE-2026-88771 and CVE-2026-88772 are actively exploited. The alert covers eight newly disclosed vulnerabilities in products used for application delivery and remote…
Kiteworks has lifted a precautionary advisory that asked customers with self-managed deployments to take systems offline for a nine-hour window. The company issued the guidance after receiving what it described…