The Good, the Bad and the Ugly in Cybersecurity – Week 32
The Good | Snowflake Hacker Pleads Guilty as Ransom Cartel Creator Draws 16 Years Connor Riley Moucka pleaded guilty in Seattle federal court this week to computer fraud, wire fraud,…
-
-
Agentic AI for Cybersecurity: What Security Teams Built at Black Hat USA 2026
Agentic AI armed attackers first, but it also put real building power in defenders’ hands. Here’s what security practitioners built in two days at Black Hat USA 2026, and how…
-
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
VMware ESX systems are a recurring target in ransomware campaigns. Threat groups including SCATTERED SPIDER, BlackBasta, Royal (aka BlackSuit), Akira, and the ESX-focused ransomware as a service (RaaS) platform shinysp1d3r…
-
When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers
By Yarden Porat, Check Point Research Key Points Check Point Research analyzed Cloudflare Code Mode, a technique that changes how AI agents use MCP by turning tools into a TypeScript…
-
Varonis Atlas Now Integrates with Claude Inference Hooks to Extend Real-Time AI Data Protection
Varonis Atlas now integrates with Claude Inference hooks, routing prompts through an AI security server for real-time allow-or-deny verdicts before inference runs. That inspection happens ahead of Claude ever seeing…
-
Rapid7 Analysis of CVE-2026-63077, an unauthenticated Remote Code Execution vulnerability in JetBrains TeamCity
Overview On July 27, 2026, JetBrains published a security advisory for CVE-2026-63077, a critical unsafe deserialization vulnerability affecting JetBrains TeamCity. An attacker who can reach a TeamCity server over HTTP…
-
Five Reasons to Upgrade your Org to Okta Identity Engine
Both Okta Customer Identity built to support end users’ digital access needs, and Okta Workforce Identity , built to secure your internal workforce, are OIE-eligible platforms. Okta’s industry-leading Identity solutions…
-
Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)
As organizations adopt AI, they must secure both cloud and AI environments through a unified security control plane as their attack surface expands. Because modern applications and AI workloads are…
-
CVE-2026-63030 and CVE-2026-60137: ‘wp2shell’ Captured Exploit Payload
Introduction July was defined by the emergence of wp2shell, a critical WordPress attack chain that combines CVE-2026-63030 and CVE-2026-60137 to enable unauthenticated remote code execution against vulnerable WordPress installations. Within…
-
Unveiling good and bad behaviors on the Agentic Internet
The Internet isn’t a single lane of traffic. For a long time, the rule of thumb in web security was that bots are bad, while humans are good. Of course,…
