Phishing campaigns and BEC attacks through Amazon SES
Introduction The primary goal for attackers in a phishing campaign is to bypass email security and trick the potential victim into revealing their data. To…
Category: VendorResearch
Microsoft Agent 365, now generally available, expands capabilities and integrations
Choose an ecosystem partner for agent security and governance AI agents aren’t coming—they’re already in your environment. They show up in places you expect (like Microsoft Copilot, Microsoft Teams, and Microsoft 365) and even more…
CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments
In this article Microsoft Defender is investigating a high-severity local privilege escalation vulnerability (CVE-2026-31431) affecting multiple major Linux distributions including Red Hat, SUSE, Ubuntu, and…
What the NVD ‘Slowdown’ Means For You: How to Stay Ahead in Vulnerability Management
Updated April 2026. National Vulnerability Database (NVD): Overview The total number of reported vulnerabilities has increased by 318% since the inception of the National Vulnerability…
Risk Scenarios for the US’s Strategic Pivot
Summary The United States (US) is shifting toward a more force-driven security strategy primarily relying on military operations and economic pressure to counter transnational criminal…
Building with AI: Here’s What No Briefing Will Tell You
I’ve spent the last three months building with AI. Not reading about it. Not sitting through vendor demos. Not nodding along to board presentations with…
What’s new, updated, or recently released in Microsoft Security
New capabilities in Microsoft Agent 365; new Microsoft Defender and GitHub integration At Microsoft, security innovations are purpose-built to help every organization protect end-to-end with…
Lazarus Doesn’t Need AGI
Last week’s reporting on unauthorized access to Claude Mythos reads as an AI security story. It is also, structurally, a North Korea (DPRK) story. Even…
The Money Mule Solution: What Every Scam Has in Common
Scams have become one of the most damaging and difficult-to-detect ways for criminals to extract funds from victims and financial institutions alike. The Global Anti-Scam…
AI-powered honeypots: Turning the tables on malicious AI agents
Generative AI allows defenders to instantly create diverse honeypots, like Linux shells or Internet of Things (IoT) devices, using simple text prompts. This makes deploying complex, convincing deceptive…
Freight Hacker Wields Code-Signing Service to Evade Defenses
Prolific Threat Actor Focused on Using Malware to Facilitate Cargo Theft Mathew J. Schwartz (euroinfosec) • April 16, 2026 Image: NetVideo/Shutterstock Cybercriminals don’t…
From Overwhelmed to Autonomous: Rethinking Threat Intelligence in 2026
Key Takeaways The real challenge in cybersecurity isn’t intelligence or visibility, it’s speed. Attackers operate at machine speed, while most organizations are still constrained by…