July 2026 CVE Landscape
In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had a Very Critical Recorded Future Risk…
Category: VendorResearch
8 Ways AI is Changing Threat Intelligence
The fundamentals haven’t changed — the clock speed has. Defending everything is still the job, but adversaries can now move at machine-speed, which means the…
Hype vs. Reality: What the Hugging Face Incident Means for AI Safety
Agentic defense will be essential to countering agentic offense. However, defenders must actively mitigate the risk of autonomous systems operating outside of their expected parameters.…
Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)
As organizations adopt AI, they must secure both cloud and AI environments through a unified security control plane as their attack surface expands. Because modern…
128 Seconds to disruption: Microsoft Defender stops ransomware at QNET
In this article Microsoft Defender’s attack disruption now includes device isolation, a new response action that extends autonomous protection directly to compromised endpoints. At QNET,…
Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps
The calculus of cybersecurity has changed. AI is reshaping how organizations build, deploy, operate, and defend digital systems. AI-powered development tools, agents, and autonomous workflows…
Almost Half of Malware Samples Communicate Direct to IP
Executive Summary Malware samples often bypass DNS entirely, communicating directly to IP addresses instead. Our analysis of 4 million dynamic analysis reports indicates that almost…
You were onto something with “It’s the Climb,” Miley
Welcome to this week’s edition of the Threat Source newsletter. For my fianceé’s 30th birthday, I took her on a weekend trip to Shenandoah National…
What’s new in Microsoft Security: July 2026
Every organization needs security that protects end to end with the speed and scale of AI. Microsoft’s vision is simple: security should be ambient and…
Dealing with AI-Generated Extortion
Proving a Negative How do you prove a negative in cybersecurity? How do you prove that you weren’t attacked, or that there is no intruder…
Software Supply Chain Attacks: Weaponizing Trusted Developer Workflows
From Shai-Hulud to the leaked Miasma source code — here’s how adversaries are exploiting trusted developer workflows. Security teams have spent years preparing for operational…
Rethinking security for the age of AI
Why security needs a new Cyber Stack — Introducing Project Perception The physics of cybersecurity are changing. Autonomous systems can now reason, adapt and operate…