AIM: Building an Agentic Tier-2 SOC Analyst at Cisco Live AMER 2026
Why we built it Over the first couple of days in the SOC at Cisco Live Americas 2026, we did what every new junior analyst does: we picked up incidents,…
-
-
18th May – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 18th May, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Vodafone, a major international telecom, has sustained a…
-
Building Confidence in Support Comms with Caller Verify at Okta
In many of the most impactful incidents of the past two years, attackers gained privileged access to systems by tricking IT support personnel into resetting the passwords and MFA factors…
-
Exploits for FlowiseAI CSV Agent and MacOS Package Kit
More AI, more software, more bugs! AI, it’s all you hear about nowadays and everyone’s got an opinion on it. Here at Metasploit, we care less about those opinions and…
-
Unlocking the Cloudflare app ecosystem with OAuth for all
Cloudflare provides services that help run 20% of the web, but we don’t do it alone. Developers on our platform use a myriad of tools and services from other companies…
-
WP-SHELLSTORM Exposed: Hackers Backdoored Thousands of WordPress Websites
A simple operational mistake by a cybercrime group has provided researchers with an inside look at how large-scale website compromises are conducted. According to research from SOCRadar, an internet-exposed server…
-
Weekly Threat Bulletin – April 29th, 2026
Malware: ACR Stealer, AdaptixC2, Amatera, AMOS, Arkei, Atomic macOS Stealer, Atomic Stealer, BIGMACHO, BlackByte, bw1.js, CanisterSprawl, CanisterWorm, CHROMEPUSH, CipherForce, Clawdbot, DEEPBREATH, Donut, donut_injector, DonutLoader, Everbe 2.0, Everest, GhostSocks, hackerbot-claw, Havoc,…
-
Why fixing your data architecture matters more than upgrading your detection models
Security leaders have been on a spending sprint. The global AI in cybersecurity market is valued at $44 billion in 2026 and is projected to reach $213 billion by 2034,…
-
Cato CTRL™ Threat Research: Vishing and Microsoft Teams Used to Deliver PhantomBackdoor
Executive Summary Cato CTRL has discovered a vishing-based delivery technique used against an Italy-based consumer services company associated with PhantomBackdoor, a multi-stage WebSocket-based backdoor previously reported in a Ukraine-focused spear…
-
How I sped up exploit validation in Repeater using Burp AI | Blog
Hassan Ud-Deen | Thursday, 22 January 2026 at 15:18 UTC Note: This is a guest post by IT security consultant Adarsh Kumar. I’ve been using Burp Suite day to day for…
