Edison Flores of AliceLabs LLC built eight security layers for the MCP marketplace marketnow.site after a trojan (Trojan:Win64/Lazy.PGPK!MTB) slipped through. The layers include metadata scanning, sta…
Prescryb, a new open-source MCP server, enables natural-language-driven vulnerability and compliance remediation by connecting AI assistants to SSH-based host inventory, CVE matching, advisory lookups…
The Australian Cyber Security Centre (ACSC) issued a critical alert on July 11, 2026, about a global cyberattack campaign exploiting known, patched vulnerabilities in Content Management Systems (CMS) …
Intezer published a July 2026 vendor analysis arguing that AI-assisted attackers are forcing detection-engineering teams to move beyond static indicators and periodic rule tuning, requiring continuous…
Researchers have developed a CVE-TTP Knowledge Graph linking software vulnerabilities to attacker behaviors using the MITRE ATT&CK framework. Transformer-based models like CySecBERT achieved high F1-s…
A Medium article details an automated workflow that uses AI to discover newly added CISA KEV vulnerabilities, generate Sigma detection rules, map them to MITRE ATT&CK, and distribute results to platfo…
A team built ThreatLedger, an AI-powered Network Detection and Response dashboard, in 72 hours using AWS Aurora and Vercel. The tool turns raw security logs into actionable threat intelligence, aiming…
A developer built an Agentic SOC Analyst using Microsoft Sentinel, Azure Log Analytics, and Google's Gemini model to automate threat-hunting workflows. The system translates natural language requests …
Anthropic published three cyber research posts in May and June 2026 that collectively suggest AI is reducing the time between a patch and an exploit. The posts cover exploit benchmarks, mapping malici…
The open-source project 'mukul975/Anthropic-Cybersecurity-Skills' provides 754 structured cybersecurity skills for AI agents, enabling deterministic security copilots. It uses progressive disclosure t…
A new AI-powered SOC alert triage agent, governed by the open-source AgentAz specification, enriches, correlates, scores, and recommends dispositions for raw security alerts. It reduces alert fatigue …
Google DeepMind published its 'AI Control Roadmap' on June 18, 2026, detailing a defense-in-depth approach to secure internal systems against misaligned AI agents. The framework uses a threat taxonomy…
GDM published an AI Control Roadmap outlining internal guardrails to detect and prevent adversarial behavior by AI agents. The roadmap includes threat modeling, control invariants, capability-based mi…
Security researchers identified 15 malicious JetBrains plugins masquerading as DeepSeek AI assistants in a supply chain attack. The plugins harvest API keys, exfiltrate LLM chat sessions, and establis…
Google was named a Leader in the 2026 IDC MarketScape for Worldwide SIEM Vendor Assessment, recognizing its Google Security Operations platform. The platform integrates Mandiant expertise, AI agents, …
Google developed an AI Control Roadmap to secure internal systems against increasingly capable AI agents, treating them as potential insider threats with a defense-in-depth approach that includes moni…
Watch Cortex, a threat-classification AI, runs on-agent in under 8ms without cloud calls or GPUs. The system uses a gradient-boosted decision tree ensemble for primary classification and a lightweight…
A new PDF analysis tool detects parser and representation differences in documents, using 47 forensic passes with MITRE ATT&CK mapping and LightGBM machine learning to identify exploits, tampering, an…
Anthropic published an analysis of 832 accounts banned for malicious cyber activity between March 2025 and March 2026, mapping their behavior to version 18 of the MITRE ATT&CK framework. The study fou…
Anthropic analyzed 832 banned accounts that used its AI systems for malicious cyber activity between March 2025 and March 2026, finding that low-skill hackers are leveraging the technology to execute …