↓ Skip to main content
Juan Carlos Munera
  1. Categories/

Threat-Intelligence

Reading the 2026 Verizon DBIR: AI Is the Catalyst, Not the Threat Actor

·2357 words·12 mins
Threat-Intelligence Industry-Reports Dbir Verizon Generative-Ai Vulnerability Management Ransomware
The 2026 DBIR landed today, and the headline numbers tell two stories at once: attackers are getting faster and more efficient, but the techniques they’re running are the same ones we’ve been talking about for years. AI is showing up everywhere in the data, but it’s behaving like a productivity tool, not a new adversary.

FIRESTARTER and the Detection Gap CISA Just Made Official

·1417 words·7 mins
Threat-Intelligence Threat-Intelligence Edge-Security Detection-Engineering Incident-Response
On April 23, 2026, CISA and the UK NCSC published a malware analysis report on FIRESTARTER, a custom backdoor that survives patching, reboots, and firmware upgrades on Cisco Firepower and Secure Firewall devices. The federal directive itself states that Sigma rules are not effective against it. That admission has implications well beyond the federal civilian executive branch.