Security Operations
Detection, incident response, forensics and the tooling behind them.
How David Wessel Turned Wall Street’s Chaos Into Public Understanding
David Wessel brings three decades of economics journalism from The Wall Street Journal to his role as director of the Hutchins Center on Fiscal and Monetary Policy at Brookings, where he shapes public understanding of Federal Reserve policy and federal budget politics.
The Firewall That Let Them In: How 74,000 Devices Became a Backdoor to the Global Economy
A massive breach of Fortinet firewalls has exposed plaintext credentials for nearly 74,000 devices across 194 countries, giving Russian-speaking attackers access to organizations including Oracle, Chevron, FedEx, and a NATO defense contractor.
The 48-Hour Window After a Concussion That Changes Everything
UC Riverside research identifies how TLR4 activates MMP-9 after brain injury, triggering extracellular matrix breakdown and network hyperexcitability. Blocking this axis within 48 hours rescues spatial memory.
TechCrunch Disrupt 2026 Speaker Applications Close Tonight — What Founders Need to Know
TechCrunch Disrupt 2026 returns October 13–15 to Moscone West in San Francisco with more than 10,000 startup and VC leaders expected. Applications to speak at the event close tonight at 11:59 PM PT, with two session formats available — Breakout Sessions and Roundtables.
Varonis Adds Claude Monitoring to Its Atlas AI Security Platform
Varonis has integrated Anthropic's Claude Compliance API into its Atlas AI Security Platform, giving enterprises visibility into Claude Enterprise and Claude Platform activity — including session-level monitoring, jailbreak detection, and proactive penetration testing for AI agents.
The ClawHub Breach: How Malicious AI Skills Are Weaponizing Agent Autonomy
Brynn Nguyen argues that the recent ClawHub malicious skill discovery highlights the severe vulnerabilities in AI marketplaces, urging a shift from static scanners to rigorous provenance verification and runtime behavior monitoring.
ShapedPlugin’s Update Pipeline Was Hacked—Here’s What Got Stolen
A supply chain attack compromised ShapedPlugin’s build system, injecting malware into paid WordPress plugins distributed to paying customers via official updates.
Your Bluetooth Speaker Just Became a Remote Code Execution Vector
A security flaw in the Sound Blaster Katana V2X lets attackers upload custom firmware and turn the speaker into a HID keyboard proxy, executing arbitrary commands on any connected PC from Bluetooth range.
Rogue Firmware Reflashing on Creative Soundbars Permits Host Takeovers via Bluetooth
A vulnerability in Creative's Sound Blaster Katana V2X gaming soundbar allows unauthenticated local attackers to reflash the device's firmware via always-on Bluetooth, enabling keystroke injection on connected hosts.
LastPass Suffers CRM Data Exposure Following Third-Party OAuth Incident
LastPass confirms unauthorized access to customer data within its Salesforce environment, tracing the incident to compromised OAuth tokens from the market intelligence platform Klue. This incident underscores critical risks in SaaS supply chain security and third-party vendor authorizations.
Escaping the Triage Trap: Why Cybersecurity Incident Response is Pivoting to Behavioral AI Email Protections
An analysis of why traditional email security gateways and manual triage mechanisms fail against modern, payload-less BEC and ATO threats, creating an alert fatigue crisis, and how API-integrated behavioral AI models are automating the response.
'Hades' Campaign Against PyPI Puts New Spin on Shai-Hulud
The latest Mini-Shai-hulud payload introduces Hades-themed GitHub exfiltration markers and AI analyst misdirection. TeamPCP compromised 19 PyPI packages (37 malicious wheels) via wheel startup hooks, deploying cross-platform memory scrapers and a token-revocation wiper. Read more about understanding supply chain risk in our Cyber Threat Intelligence category. Learn more about Supply Chain Security. Python Security Essentials.