Understanding Claude Tag’s access model in Slack
Anthropic’s new AI agent for Slack acts under an admin-configured access bundle rather than each user’s own credentials. Here’s how that model works, what admins should understand and how to…
-
-
Investigating Persistence Mechanisms in AWS
Overview In the cloud, your infrastructure may be short-lived, but an attacker’s persistence doesn’t have to be. While your environment scales and changes in seconds, adversaries are embedding themselves into…
-
Weekly Threat Bulletin – March 11th, 2026
Security Alert: Android March 2026 Update Targets Actively Exploited Zero-Day Google has released its March 2026 Android Security Bulletin, a substantial update addressing 129 vulnerabilities, including at least one actively…
-
When Sensitive Data Becomes a Picture: Introducing ML-Powered Image Classification for DLP
Dr. Carter finishes a long shift at the hospital, exports a patient X-ray as a regular image file, and drags it into an AI assistant to double-check a diagnosis. The…
-
SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited
SonicWall patched two recently exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances which may have been chained for unauthenticated remote code execution. Key takeaways CVE-2026-15409 and…
-
We tested Cisco Secure Firewall 6160 with NetSecOPEN for AI-scale
As the shape, speed, and scale of network traffic changes, our customers realize that their networks must rapidly accommodate more applications, more agents, more encrypted flows, more data movement, and…
-
Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
Overview On July 14, 2026, SonicWall published a security advisory addressing two vulnerabilities affecting SMA1000 Series remote access appliances, including the critical server-side request forgery (SSRF) vulnerability CVE-2026-15409 (CVSS 10.0)…
-
Looking at the SmarterMail API Vulnerability CVE-2026-24423
Introduction The F5 Labs Sensor Intel Series provides an in-depth analysis of the most significant vulnerabilities and their exploitation trends. This article highlights the top 10 CVEs, their activity levels,…
-
When AI Can Act: Governing OpenClaw
Agentic AI burst into public consciousness this week with talk of Moltbook – a social network designed for AI agents built on OpenClaw (formerly Clawdbot and Moltbot). The resulting conversations…
-
Microsoft SharePoint JWT Token Authentication Bypass (FIXED)
Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated remote code execution (RCE) against…
