Will AI Replace the SOC Team? Gartner on SOC Team Structure and Roles | Prophet Security
Will AI replace SOC teams? Gartner says the SOC will not shrink by 2030. Here is how SOC team structure shifts for analysts, engineers, and exposure work.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,843 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Hospital boards hear about ransomware too late in the attack
Microsoft's deputy chief information security officer argues that briefings starting at the moment files are locked miss weeks of earlier activity.
Does my email platform need a BAA?
Yes, if your email platform handles protected health information (PHI) on your behalf, you need a business associate agreement (BAA) with that platform.
TWiC: Citrix NetScaler Zero-Day, 500,000 Exposed GitHub Credentials, & Azure DevOps Pipeline Hijacking
This Week in Cybersecurity (TWiC) Security Advisory Zero-Days, Exposed Credentials, & Hijacked Cloud Pipelines Attackers continue to exploit the connections between internet-facing infrastructure, developer credentials, and trusted cloud platforms—turning a single weakness or compromised identity into a path toward broader organizational access. 2 Critical Citrix NetScalerzero-days actively exploited 543,699 Unique active credentialsfound exposed on GitHub […]
Medusa: A Threat Profile
Aliases Medusa Blog (the group’s leak-site branding) Storm-1175 (Microsoft designation for a China-based Medusa affiliate) Get Threat Intel and Security Updates Delivered to Your Inbox.   Profiling Threat Actor Type: Financially motivated ransomware-as-a-service (RaaS) operation using encryption, data theft, and leak-site extortion. Active since June 2021; a joint CISA, FBI, and HHS advisory updated in […] The post Medusa: A Threat Profile appeared first on Vali Cyber.
10 Best Open-Source AI Pentesting Tools in 2026, Ranked & Compared
Open-source AI pentesting has split into distinct categories: autonomous application pentesters, multi-agent orchestration platforms, verification-first agents, and MCP tool layers. We reviewed 10 actively developed projects and explained what each one is genuinely good at.
10 Best MCP Servers for Cybersecurity and Application Security in 2026
An editorial guide to security MCP integrations for AI-assisted development: repository findings, scanning, web testing, supply chain analysis, and cloud security.
Agentic Endpoint Risk: Enterprise Findings - Backslash
79% of assessed organizations lack agentic AI visibility. Explore Backslash’s enterprise findings on personal accounts, credential exposure, and endpoint risk.
The Video Data Myth: Why AI Hasn't "Watched" the Internet Yet
AI hasn't watched the internet yet – not due to speed, but token costs and a lack of video labels. Discover the real data bottleneck.
Your AI governance program was built for models that answer. Your agents act.
Most AI governance programs were designed around a single moment: the review. A model gets documented, assessed, approved and shipped. Everyone signs. The binder closes. That worked when AI mostly predicted things. It got harder when generative AI arrived with hallucinations, prompt injection and IP leakage, none of which show up neatly in a pre-deployment checklist. And it breaks down completely with agents. An agent doesn't just produce an answer; it decides, calls tools, reads enterprise…
Data governance for AI: The key life science and biotech prescription
There’s no debate. Today, pharmaceutical, biotech and life sciences companies are making AI a strategic priority. The ambition is clear and even heroic: Accelerate drug discovery, improve clinical trial design, automate routine tasks, generate real-world evidence and bring therapies to patients faster. , spanning drug discovery, clinical development, commercial functions, and medical affairs.1 What is far less clear is whether today’s pharma- and lifesciences-siloed data foundation are…
"I wanted the big name on my resume": Why our former interns chose a startup anyway
Emma Jin wanted a big-name company on her resume. She joined Semgrep as its first intern instead, and six years later she’s an engineering manager. Here’s why eight former interns took the startup route, what it was like to ship to production, and where they are now.
Getting Started with OpenCTI: AlienVault OTX and Threat Landscape in One Compose File
A step-by-step tutorial for standing up OpenCTI with Docker Compose and pointing it at AlienVault OTX and the Threat Landscape intelligence feed.
The Agent Memory Maturity Model: From Session-Scoped to Organization-Wide Knowledge (2026)
Explore the agent memory maturity model, from session-scoped context to organization-wide knowledge, with practical stages for building scalable AI memory in 2026.
Inspectable Agent Memory: Why Humans Must Be Able to Read What Agents Remember (2026)
Learn why inspectable agent memory matters, how human-readable memory improves AI oversight, and what teams should consider for safer agent systems in 2026.
How to Build a Memory Architecture for Multi-Agent Systems (2026)
Learn how to build a memory architecture for multi-agent systems, including shared context, persistent memory, retrieval, access control, and scalable design patterns.
Telecom Risk Determination: Beyond Threat Intelligence | iCOUNTER
Threat intelligence alone doesn't show what puts your telecom operations at risk. Learn how risk determination turns third-party threats into action.
Run incident response in your FedRAMP High environment
Run paging, incident coordination, and response automation for sensitive federal workloads with Datadog Incident Response.
Define user actions on your web app with visual labeling in Product Analytics
Learn how to label autocaptured web actions in Datadog Product Analytics without code changes, then reuse those definitions across behavioral analysis.
tensorlake npm compromise used a preinstall loader, signed provenance, and a token-triggered wipe path
On 8 October 2026, malicious [email protected] turned a normal npm install into host compromise. Attackers committed an obfuscated loader straight to tensorlakeai/tensorlake main, added `preinstall: node lib/setup.mjs`, published from the project's own workflow with provenance, skipped common CI environments, and persisted as `gh-token-monitor` so revoking a stolen GitHub token could trigger local file deletion.
NEBULA - Seven Fake AI SDK Packages on npm Install a Windows RAT That Needs No DLL
CloudSEK uncovered NEBULA, a malicious npm supply-chain campaign involving seven fake AI SDK packages distributed through four attacker-controlled accounts. Disguised as legitimate developer tools, these packages deploy a modified KNTRAT Windows trojan capable of stealthy remote access, camera and microphone surveillance, and persistence. The investigation reveals advanced syscall-based evasion techniques, active threats, and actionable indicators for security teams. Authors : Vikas Kundu
How to Tie Kubernetes Audit Logs to Individual Engineers
Learn how to attribute Kubernetes logs to individual engineer identities.
Cribl × Fireworks AI: SecIT joins the Specialized Intelligence Index
Claude Haiku 5.5 Cybersecurity: Anthropic's Answer to Jev?
Claude Haiku 5.5 scores 9.3% on the Cyber Defense Benchmark, 28th of 30 models, for about a cent per run. It quits after a tenth of its turn budget, and 16 samples still trail one Opus 5 run.
Runtime AI Defense in a shared responsibility model
An AI agent once deleted someone's entire inbox despite being told to confirm first. Not because it was malicious, but because the instruction didn't survive context compaction. Shantanu Gattani, Sysdig's SVP of Product, on why that gap is the real risk in agentic AI, and who should be responsible for closing it.
Spike in Attacks Targeting Digital Video Recorders in Ukraine
For months, GreyNoise recorded almost no Hikvision camera exploit attempts against Ukraine. On Sept 21 activity surged for nine days during Russian strikes, almost all from four IPs, then stopped. We can't say if the two are linked.
Why Is Employee Phishing Vulnerability So Easy for Attackers to Exploit?
It looks like an ordinary email. Yet it could become the most expensive click your business makes all year. A phishing attack usually starts as a nondescript email from someone you would never suspect. It could be a supplier, a trusted service provider, or even a co-worker from the next cubicle. And it usually arrives […] The post Why Is Employee Phishing Vulnerability So Easy for Attackers to Exploit? appeared first on CorKat Data.
Critical Alert: Recent CyrusOne Data Breach
Introduction The latest breach involves CyrusOne with a domain of cyrusone.com. This breach occurred on 2026-08-05. Overview In August, data centre operator CyrusOne was… The post Critical Alert: Recent CyrusOne Data Breach appeared first on HookPhish.
Ransomware Group qilin Hits: Matadero Frigorífico Avinyó
Summary In the latest cybersecurity news, Matadero Frigorífico Avinyó — an organization based in ES — has fallen victim to a ransomware attack conducted… The post Ransomware Group qilin Hits: Matadero Frigorífico Avinyó appeared first on HookPhish.
Ransomware Group qilin Hits: Qatar National Import and Export
Summary In the latest cybersecurity news, Qatar National Import & Export — an organization based in QA — has fallen victim to a ransomware… The post Ransomware Group qilin Hits: Qatar National Import and Export appeared first on HookPhish.
Smashing Security podcast #487: Clippy’s crypto comeback
Microsoft's Twitter account, with its 13 million followers, was hijacked by a paperclip. There was no ransomware or data theft, just Clippy, a dodgy crypto coin, and a corporate apology that wasn't from Microsoft either. Meanwhile, UK losses from hacked email and social media accounts have rocketed by 417%, as scammers pose as your friends to flog you tickets to gigs that don't exist. Plus, Hack The Box's Christine Bartlett joins us for a featured interview to ask what happens when AI agents joi
Internet Nations
Farsight CEO Paul Vixie disccusses how the Internet has changed the way nations act and interact.
Why is my email not sending? Causes and fixes
Email stuck in the outbox, bouncing back, or never arriving? Find the cause by symptom, decode the error message, and fix it step by step. The post Why is my email not sending? Causes and fixes first appeared on Valimail.
Der digitale Produktpass verändert den Mittelstand
Der digitale Produktpass wird ab 2027 schrittweise Pflicht. Voraussetzung sind Produktdaten über den ganzen Lebenszyklus. Wer frühzeitig agiert, schafft Compliance und die Basis für neue datenbasierte Geschäftsmodelle.
Attackers are installing real remote-support software through phishing
A phishing email can give an attacker control of a computer in your practice without delivering any malware. The email tricks someone into installing a real remote-support program, the kind your IT provider uses to fix a computer from somewhere else, and antivirus software usually has nothing to flag.
OpenAI Agents Target More Than 100 Organisations in Expanding Cybersecurity Investigation
OpenAI said on October 1 that it had notified more than 100 organisations about unauthorised activity involving its AI agents as the company continued a large-scale investigation into how its models... The post OpenAI Agents Target More Than 100 Organisations in Expanding Cybersecurity Investigation appeared first on Blackwired.com.
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]
SonicWall fixes maximum severity SMA1000 vulnerability
At a glance: SonicWall released hotfixes on October 6, 2026, for four vulnerabilities affecting SMA1000 secure remote access appliances, including a maximum-severity flaw in the Appliance WorkPlace interface. CVE-2026-102255 allows a remote, unauthenticated threat actor to make the appliance issue requests that can reach internal functionality. SonicWall has reported no evidence of exploitation. Identifying affected SMA1000 appliances, installing the latest hotfix, limiting unnecessary network a
Everything, Everywhere, All at Once: The New Rules of Exposure Management
Join Arctic Wolf for a candid conversation about what it really takes to move from point-in-time vulnerability management to continuous exposure management.
Illuminating Signposts and Guidelines for a More Secure Internet
Internet Pioneer Dr. Paul Vixie calls on the next-gen tech leaders to build simpler and better technologies rather than merely adding more layers and more complexity to solve today's cybersecurity problems