Security Operations
Detection, incident response, forensics and the tooling behind them.
TechCrunch Disrupt 2026 Speaker Applications Close Tonight — What Founders Need to Know
TechCrunch Disrupt 2026 returns October 13–15 to Moscone West in San Francisco with more than 10,000 startup and VC leaders expected. Applications to speak at the event close tonight at 11:59 PM PT, with two session formats available — Breakout Sessions and Roundtables.
Coupang's Record $409M Data Breach Fine: A Wake-Up Call for Korea’s Tech Giants
South Korea's data protection regulator imposed its largest-ever fine on Coupang after a breach exposed 37.55 million customers through authentication failures, access control gaps, and obstructive behavior toward investigators.
Varonis Adds Claude Monitoring to Its Atlas AI Security Platform
Varonis has integrated Anthropic's Claude Compliance API into its Atlas AI Security Platform, giving enterprises visibility into Claude Enterprise and Claude Platform activity — including session-level monitoring, jailbreak detection, and proactive penetration testing for AI agents.
The ClawHub Breach: How Malicious AI Skills Are Weaponizing Agent Autonomy
Brynn Nguyen argues that the recent ClawHub malicious skill discovery highlights the severe vulnerabilities in AI marketplaces, urging a shift from static scanners to rigorous provenance verification and runtime behavior monitoring.
OT Segmentation Fails When Operators Stop Looking
Network segmentation is the bedrock of OT security, but it only holds when operators actively hunt for threats. This article breaks down why strategies collapse under convenience, legacy debt, and blind spots — and what it actually takes to keep them working.
Profit and Pain: The Companies Betting Their Future on AI by Cutting Their Present
A running look at major tech companies that cited AI as the reason for significant workforce reductions in 2026, from Oracle's 21,000 cuts to Amazon and Block. Adds nuance: AI can create jobs in well-resourced firms, deepening the divide between winners and experimental laggards.
Mythos Isn't Coming—It's Already Here, and It's Scary
Anthropic's Mythos AI model has already uncovered 10,000 critical vulnerabilities and may be live in Claude Code—before the world is ready.
ShapedPlugin’s Update Pipeline Was Hacked—Here’s What Got Stolen
A supply chain attack compromised ShapedPlugin’s build system, injecting malware into paid WordPress plugins distributed to paying customers via official updates.
Your Bluetooth Speaker Just Became a Remote Code Execution Vector
A security flaw in the Sound Blaster Katana V2X lets attackers upload custom firmware and turn the speaker into a HID keyboard proxy, executing arbitrary commands on any connected PC from Bluetooth range.
Rogue Firmware Reflashing on Creative Soundbars Permits Host Takeovers via Bluetooth
A vulnerability in Creative's Sound Blaster Katana V2X gaming soundbar allows unauthenticated local attackers to reflash the device's firmware via always-on Bluetooth, enabling keystroke injection on connected hosts.
LastPass Suffers CRM Data Exposure Following Third-Party OAuth Incident
LastPass confirms unauthorized access to customer data within its Salesforce environment, tracing the incident to compromised OAuth tokens from the market intelligence platform Klue. This incident underscores critical risks in SaaS supply chain security and third-party vendor authorizations.
Escaping the Triage Trap: Why Cybersecurity Incident Response is Pivoting to Behavioral AI Email Protections
An analysis of why traditional email security gateways and manual triage mechanisms fail against modern, payload-less BEC and ATO threats, creating an alert fatigue crisis, and how API-integrated behavioral AI models are automating the response.