The AI Attack Surface: How Threat Actors Abuse Trusted AI Platforms
Background AI is here, and we’re hearing about all the high-profile security risks that come with it. AI security discussions often focus on attacks against…
Category: ThreatIntelligence-IncidentResponse
New Huntress Managed ITDR Dashboard: Faster Identity Investigations
When an employee says, “I clicked a link. Am I compromised?” you probably don’t want to spend the next 20 minutes jumping between tools, logs,…
UEBA & entity analytics: Why entity record quality matters
There’s an uncomfortable truth in security analytics that nobody talks about at conferences: The quality of your detections, alerts, and investigations is only as good…
PaperCut Zero-Day: Active Exploitation and Pre-Auth RCE
Acknowledgements: Special thanks to Tanner Filip, Jai Minton, Max Rogers, Ben Nahorney, Lindsey Welch, Aaron Deal, Dray Agha, Lindon Wass, Michael Elford, and Craig Sweeney…
Proactive threat hunting with Elastic’s AI-generated hunting leads
Threat hunting has always been a human art; a practitioner staring at logs, forming a hypothesis, and patiently chasing it down. What if the hardest…
Why cryptographic inventory is key for post-quantum security
When quantum computers become generally available, they’ll be able to crack current public-key cryptographic algorithms, putting digitally stored and transmitted data at risk. But the…
Entity Analytics Watchlists in Elastic Security: organizational risk context as a scoring signal
Elastic Security v9.4 introduces Entity Analytics Watchlists, a new capability in the Entity Analytics suite that lets security teams create named, weighted lists of users,…
Detecting Web Server Probing & Fuzzing in Traefik with Automated Cloudflare Response
Introduction Self-hosted services exposed through a reverse proxy inevitably attract automated scanners probing for misconfigurations, admin panels, and vulnerable endpoints. In this article, I show…
Elastic Security MCP App: fast & interactive security operations
Every SOC analyst knows the drill: an alert fires, and the next ten minutes are spent switching between a triage dashboard, a threat hunt, a…
PCI DSS 4.0.1: The App & API Requirements QSAs Now Score
Key Takeaways Since March 31, 2025, all 51 former “best practice” requirements in PCI DSS 4.0 have been fully scored. Every 2026 assessment covers them.…
Building an exposure management program the business trusts
Discover how Tenable’s shift to an AI-driven exposure management program helped Tenable’s CSO, Robert Huber, overcome tool sprawl, unify data silos, mitigate the risk of…
Google Threat Intelligence in Elastic Security
Elastic Security natively ingests Google Threat Intelligence: known-malicious IPs, domains, URLs, and file hashes matched against your telemetry the moment they appear, each carrying a…