Posts

Google caught the first AI-assisted zero-day in the wild. How attackers talked a model into helping, and why the method matters more than the exploit.

What Careful Adoption of Agentic AI Services means for non-human identity, privilege design, and compliance programs that haven’t caught up.

The BlackCat sentencings expose the trust every organization quietly extends to its incident response vendor, and how to structure it better.

CISA and NCSC published a joint analysis of FIRESTARTER, a backdoor that survives reboots and evades signature detection on Cisco edge devices.

Cisco compromised Claude Code’s persistent memory to deliver insecure guidance across projects, sessions, and reboots. What engineering teams should do.

How the DNS hijacking attack chain worked across 120+ countries, and what practitioners should be checking in their own environments.

Reduced offensive capability, automated request blocking, and a verification path for legitimate practitioners. What it changes for security work.

How the April 2026 compromise of CPUID’s site turned CPU-Z and HWMonitor downloads into a multi-stage malware delivery chain.

Why endpoint management servers are a high-value target, how both flaws were exploited, and the actions practitioners should take today.

What happens when a frontier model finds vulnerabilities faster than anyone can patch them, and how the industry is trying to get ahead of it.