What the Black Hat NOC Taught Me About MCP & Agentic SOCs (Chapter 3 of 4)
The first time an MCP (Model Context Protocol) server felt real to me, it wasn’t because of a clean demo. It was because of the noise.
-
-
Transforming Data into Defensive Velocity
Security Operations Centers (SOCs) are currently confronting scalability challenges on two fronts: structural and cognitive. The day-to-day reality of modern defensive operations is stark: an analyst frequently begins a shift…
-
CVE-2024-44000 (LiteSpeed Cache Account Takeover) Ranks in June’s Top Threats
Introduction June 2026 marked a significant escalation in hostile internet activity observed by honeynet sensors, with overall attack volume increasing by 55.5% month over month after three consecutive months of…
-
A Look Inside the HuggingFace Breach
Varonis security brief On July 16, 2026, HuggingFace disclosed a security breach in which an autonomous AI attacker infiltrated its internal infrastructure. The attacker chained two remote code execution (RCE) vulnerabilities in HuggingFace’s dataset processing pipeline,…
-
Cato CTRL™ Threat Research: HashJack – Novel Indirect Prompt Injection Against AI Browser Assistants
TL;DR HashJack is a newly discovered indirect prompt injection technique that conceals malicious instructions after the # in legitimate URLs. When AI browsers send the full URL (including the fragment)…
-
CSO Conversations: Matt Immler, Regional CSO of Americas East
CSO Conversations is a blog series interviewing Okta’s Regional CSOs supporting David Bradbury, Okta’s Chief Security Officer in providing the best service for our customers. Okta’s Regional CSOs are integral…
-
wp2shell: WordPress Core Pre-Auth RCE FAQ
An unauthenticated attacker can chain two WordPress Core vulnerabilities, CVE-2026-63030 and CVE-2026-60137, to achieve remote code execution against affected WordPress installations. Multiple security firms have confirmed active in-the-wild exploitation within…
-
Hugging Face Discloses Autonomous AI Agent Attack
Hugging Face disclosed that attackers breached its production infrastructure using an autonomous AI agent attack. The attackers gained access to internal datasets and credentials by exploiting vulnerabilities in the company’s…
-
20th July – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 20th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Ernst & Young, a global accounting and…
-
AI adoption and business acceleration are changing the expectations of technology risk management
As AI becomes embedded in customer experiences, internal workflows, and throughout the supply chain, security leaders are being asked to do more than manage risk. They are being asked to…
