Heavy Strategy 56: FU to the Followup
Taking your feedback and followup and discussing the questions you bring us. Zero Trust Defintions, Out of Band in Zero Trust, Johna and/or Greg is/are insufferable and re-evaluating the Tech…
-
-
Weekly Threat Bulletin – June 10th, 2026
Sovereign Compromise: Zero-Day “MiniPlasma” Flaw Grants SYSTEM Privileges in Windows A zero-day vulnerability, designated MiniPlasma, is actively exploited within the Windows ecosystem, enabling local adversaries to achieve SYSTEM-level administrative privileges….
-
Breaking the Cycle of CISO Burnout
When a major cyber incident hits, all eyes are on the CISO. They become the invisible CEO of crisis, steering the entire enterprise through the storm, managing stakeholders and making…
-
Cato CTRL™ Threat Research: From Fiscal Lures to Remote Access, A Previously Undocumented NinjaOne RMM Abuse Chain
Executive Summary Update (June 19, 2026): We have confirmed that the NinjaOne-related artifact referenced in this report is no longer accessible. Our investigation did not identify a vulnerability or compromise in NinjaOne’s platform. The campaign relied…
-
Operationalize CISA BOD 26-04 with Tenable One Exposure Management
CISA’s new directive officially ends federal agencies’ reliance on static vulnerability scores. Learn how Tenable One helps federal agencies pivot to dynamic asset exposure, threat validation, and AI-powered automation to…
-
Defenseclaw for On-Prem AI SOC Workflow at Black Hat Asia
Connecting OpenClaw to Ollama, and protecting it with DefenseClaw. Black Hat Asia gave me a practical environment to test an idea I have been thinking about for a while: how can we bring AI into…
-
15th June – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 15th June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The University of Nottingham, a UK research…
-
Why AI and Compliance Are Forcing A New Security Operating Model, with Rapid7’s Corey Thomas & Sabeen Malik
This week on Experts on Experts, I sat down with Sabeen Malik, Rapid7’s VP of Global Government Affairs and Public Policy, to discuss a shift security leaders can’t afford to…
-
Drupal Core CVE-2026-9082 Active Exploitation Confirmed Within Days of Disclosure
Introduction CVE-2026-9082 is a critical pre-authentication SQL injection vulnerability in Drupal Core’s JSON:API module, carrying a CVSS score of 9.8. Published on May 20, 2026, it was added to the…
-
Local Cloud Availability for Prisma AIRS in Japan
This post is also available in: 日本語 (Japanese) Securing the Future of Japan’s AI Landscape The shift from static LLMs to autonomous agents has fundamentally changed the global threat surface….
