How AI is Rewriting the Zero-Day Playbook for Preemptive Security
The scenario is all too familiar for any cybersecurity professional: It’s late in the day, and a critical zero-day vulnerability is disclosed. When this happens,…
Category: ThreatIntelligence-IncidentResponse
Qualys Vulnerability Scanning for AWS Lambda | Serverless SecurityQualys Vulnerability Scanning for AWS Lambda | Serverless Security
Key Takeaways Qualys now delivers automated AWS Lambda vulnerability scanning, extending serverless security beyond posture checks (CSPM) into workload-level risk visibility. CSPM alone only catches…
Intelligence Insights: July 2026 | Red Canary
= trending up from previous month= trending down from previous month = no change in rank from previous month *Denotes a tie Storming the CastleLoader…
RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)
Executive summary Qualys Threat Research Unit (TRU) identified CVE-2026-64600, a race condition in the Linux kernel’s XFS filesystem copy-on-write path. An attacker with an ordinary…
What’s New in Rapid7 Products and Services: Q2 2026 in Review
If Q1 set the pace for Rapid7’s tools, Q2 accelerated it. This quarter brought a steady stream of product enhancements, platform investments, and customer-driven innovation…
CVE-2026-8933: Local Privilege Escalation in Ubuntu snap-confine
The Qualys Threat Research Unit (TRU) has identified a Local Privilege Escalation (LPE) vulnerability in snap-confine (CVE-2026-8933). This flaw allows an unprivileged local user to…
Manual Patching Can’t Outrun AI – Automated Remediation
Executive Summary AI is rapidly transforming vulnerability discovery, outpacing many security teams’ ability to adapt. Microsoft’s July 2026 Patch Tuesday addressed a record 622 vulnerabilities,…
Oracle July 2026 Critical Patch Update 1235 CVEs
Oracle addresses 1235 CVEs in its third quarterly update of 2026 with 1449 patches, including 261 critical updates. Key Takeaways The third Critical Patch Update…
Securing AI agent harness files from config attacks
Attackers have shifted from hiding from AI tools to running inside them. By poisoning the config files that govern AI coding assistants, a new worm…
SharePoint CVEs FAQ: CVE-2026-56164, CVE-2026-32201, CVE-2026-45659
Four Microsoft SharePoint Server vulnerabilities are under active exploitation, prompting CISA to issue a hardening alert. An additional high-severity flaw recently patched adds pressure for…
SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited
SonicWall patched two recently exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances which may have been chained for unauthenticated remote code…
Understanding Claude Tag’s access model in Slack
Anthropic’s new AI agent for Slack acts under an admin-configured access bundle rather than each user’s own credentials. Here’s how that model works, what admins…