Controlling Cross-App Data Sprawl in Google Workspace
One of the most difficult challenges in third party risk management (TPRM) is how to effectively manage application sprawl. It’s possible, but painful to allowlist apps at the operating system…
-
-
Security Teams Are Ready To Become More Preemptive. What’s Holding Them Back?
The shift toward preemptive security is underway, but most organizations are still navigating the realities of limited resources, fragmented tools, and emerging AI risk. At Rapid7’s recent Global Security Summit,…
-
Protecting Microsoft at AI speed: How SFI proactively hardens our cloud
AI models have reached a threshold where they exhibit expert-level capabilities in vulnerability discovery, exploit chaining, and proof-of-concept generation. As AI-powered vulnerability discovery matures, every organization that builds or runs…
-
Network Break 422: Microsoft Tasks Copilot To Do Your Drudge Work; Cisco Debuts A New Learning Platform
Take a Network Break! Greg Ferro asked ChatGPT to select virtual donut options for listeners. You can see the output below. On this week’s episode we start with some listener…
-
an experiment in global consensus
Many internal services at Cloudflare need to read and modify the same control-plane state from across our 330+ global data centers. They need guarantees that different readers never see inconsistent…
-
What the Black Hat NOC Taught Me About MCP & Agentic SOCs (Chapter 2 of 4)
The first time an MCP (Model Context Protocol) server felt real to me, it wasn’t because of a clean demo. It was because of the noise.
-
China-Aligned Hackers Exploit Roundcube Servers at Universities
Proofpoint has identified a suspected China-aligned threat actor exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and gain persistent access. Rather than targeting email content alone,…
-
Weekly Threat Bulletin – May 27th, 2026
Microsoft Defender Vulnerabilities Exploited in the Wild (CVE-2026-41091, CVE-2026-45498) Attackers are actively exploiting two Microsoft Defender vulnerabilities, CVE-2026-41091 and CVE-2026-45498, which Microsoft has acknowledged and CISA has added to its…
-
My threat feed told me it was ‘Chalubo.’ The binary disagreed
That same bundle cut the other way too, and this is the part worth slowing down on. Down in its relationships sat a threat-actor object naming APT41, Winnti, Wicked Panda,…
-
Adapting to the Frontier AI Era
This post is also available in: 繁體中文 (Chinese (Traditional)) Frontier AI is moving faster than most governance and response systems were designed to handle. The corporate landscape across the Japan…
