Cribl acquired CardinalOps for an estimated $100 million, adding an Israeli detection-engineering team to expand its AI platform into security operations. The deal moves Cribl beyond telemetry routing…
A developer discovered a Windows trojan, Trojan:Win64/Lazy.PGPK!MTB, hidden in a typosquatting MCP server package on their marketplace. In response, they built an 8-layer defense pipeline that include…
RelayShield released four agentic security tools for smolagents that enable AI agents to check their attack surface before acting, including MCP server reputation, prompt-injection detection, CVE scan…
Sophos's July 2026 telemetry report reveals that coding agents from Claude, Cursor, and OpenAI Codex triggered endpoint detection rules designed to catch attackers, with credential access alerts accou…
Edison Flores of AliceLabs LLC built eight security layers for the MCP marketplace at marketnow.site after a trojan (Trojan:Win64/Lazy.PGPK!MTB) slipped through a nested zip file. The layers include m…
Prescryb, a new open-source MCP server, enables natural-language-driven vulnerability and compliance remediation by connecting AI assistants to SSH-based host inventory, CVE matching, advisory lookups…
The Australian Cyber Security Centre (ACSC) issued a critical alert on July 11, 2026, about a global cyberattack campaign exploiting known, patched vulnerabilities in Content Management Systems (CMS) …
Intezer published a July 2026 vendor analysis arguing that AI-assisted attackers are forcing detection-engineering teams to move beyond static indicators and periodic rule tuning, requiring continuous…
Researchers have developed a CVE-TTP Knowledge Graph linking software vulnerabilities to attacker behaviors using the MITRE ATT&CK framework. Transformer-based models like CySecBERT achieved high F1-s…
A Medium article details an automated workflow that uses AI to discover newly added CISA KEV vulnerabilities, generate Sigma detection rules, map them to MITRE ATT&CK, and distribute results to platfo…
A team built ThreatLedger, an AI-powered Network Detection and Response dashboard, in 72 hours using AWS Aurora and Vercel. The tool turns raw security logs into actionable threat intelligence, aiming…
A developer built an Agentic SOC Analyst using Microsoft Sentinel, Azure Log Analytics, and Google's Gemini model to automate threat-hunting workflows. The system translates natural language requests …
Anthropic published three cyber research posts in May and June 2026 that collectively suggest AI is reducing the time between a patch and an exploit. The posts cover exploit benchmarks, mapping malici…
The open-source project 'mukul975/Anthropic-Cybersecurity-Skills' provides 754 structured cybersecurity skills for AI agents, enabling deterministic security copilots. It uses progressive disclosure t…
A new AI-powered SOC alert triage agent, governed by the open-source AgentAz specification, enriches, correlates, scores, and recommends dispositions for raw security alerts. It reduces alert fatigue …
Google DeepMind published its 'AI Control Roadmap' on June 18, 2026, detailing a defense-in-depth approach to secure internal systems against misaligned AI agents. The framework uses a threat taxonomy…
GDM published an AI Control Roadmap outlining internal guardrails to detect and prevent adversarial behavior by AI agents. The roadmap includes threat modeling, control invariants, capability-based mi…
Security researchers identified 15 malicious JetBrains plugins masquerading as DeepSeek AI assistants in a supply chain attack. The plugins harvest API keys, exfiltrate LLM chat sessions, and establis…
Google was named a Leader in the 2026 IDC MarketScape for Worldwide SIEM Vendor Assessment, recognizing its Google Security Operations platform. The platform integrates Mandiant expertise, AI agents, …
Google developed an AI Control Roadmap to secure internal systems against increasingly capable AI agents, treating them as potential insider threats with a defense-in-depth approach that includes moni…