Thrown into the SOC: A Black Hat First-Timer’s Story
What a short, intense rotation taught me about uncertainty, evidence, and working alongside AI in the SOC. Let me get one thing out of the way: I am not a…
-
-
PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector
Executive Summary In this research we introduce a prompt-crafting technique for bypassing quick LLM-based policy checks — using plain English (no emojis, base64, invisible formatting, etc.) A policy-violating payload (e.g. ”encrypt…
-
This One Goes to Sixteen!
This One Goes to Sixteen! Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow…
-
Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364)
Introduction August 2026 saw an escalation in automated reconnaissance targeting internet-exposed developer tooling. Honeynet sensors recorded a sustained scanning operation focused on pulling cloud credentials and infrastructure state files out…
-
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
Securing Every Environment at the Speed of Frontier AI Recognized as a Leader for the second consecutive time and positioned furthest for Completeness of Vision. Palo Alto Networks is advancing…
-
Ransomware’s AI Adoption Curve: From Marketing Claim to Operating Model
Executive summary Somewhere in the first nine months of 2026, AI stopped being a talking point in ransomware and became part of how the work actually gets done. Tracking new…
-
The agentic harness for Tenable Hexa AI: an inside look
Learn why Tenable treats agentic LLMs as untrusted insiders, and how we’ve made sure you can control and monitor the AI agents making changes in your production security environment Key…
-
Black Hat USA 2026: Building the Agentic SOC, One Live Event at a Time
Cisco was proud to return to Black Hat USA as the Official Security Cloud Provider and the longest-standing partner of the Black Hat Network Operations Center (NOC) and Security Operations…
-
The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT
Research by: Alexey Bukhteyev Check Point Research discovered a covert cross-account command channel through which an attacker could use a victim’s ChatGPT session to execute hidden tasks with the tools,…
-
Patch Tuesday – September 2026
CVE-2026-69839 Windows iSCSI Target Service Denial of Service Vulnerability Exploitation Unlikely No 6.5 CVE-2026-69744 Windows Kerberos Denial of Service Vulnerability Exploitation Unlikely No 7.5 CVE-2026-69760 Windows Kerberos Denial of Service…
