Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AIWalmart's "Trusted Agent" Approach to Purple Teaming
Walmart has implemented a collaborative 'purple teaming' security approach by co-locating its red team (offensive security) and blue team (defensive security) operations to foster trust and improve overall cybersecurity posture. This 'trusted agent' model enables continuous collaboration between traditionally siloed security functions, enhancing threat detection and response capabilities through s
AIEnterprise Defenses Recovered at the Edge and Collapsed Inside
Picus Labs' Blue Report 2026 reveals a paradox in enterprise security: while perimeter defenses show strong prevention effectiveness against noisy attacks, attackers are increasingly succeeding by using stealthy, low-noise techniques. Analysis of 338 million attack simulations across production environments in H1 2026 indicates that enterprises excel at edge detection but struggle with threats tha
AIWalmart Leaders Transform Security Operations Without Going Bananas
Walmart has successfully scaled its security operations by fostering a culture of trust, innovation, and collaboration within its teams. The retail giant's approach emphasizes transparent communication and team cohesion as critical enablers for effective enterprise security management.
AI⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
This week's security landscape highlights how routine IT operations—cloning repositories, answering calls, or using default configurations—continue to serve as primary attack vectors. The analysis covers emerging threats including supply chain vulnerabilities, zero-day exploits in Metabase, router backdoors, and the resurgence of previously patched vulnerabilities. The common thread is the minimal
AIThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories
This week's security landscape demonstrates how attackers are exploiting minimal user interaction through automated execution vectors. Threats now leverage exposed infrastructure, supply chain vulnerabilities, and trusted defaults to achieve compromise before users can respond. The attack surface has expanded to include repository auto-execution, hidden malicious packages, weaponized documents, an
AIKali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk
Kali365 is a sophisticated phishing kit exploiting Microsoft's legitimate authentication mechanisms to compromise US enterprise organizations. The attack leverages attacker-controlled device codes that victims unknowingly approve on genuine Microsoft login pages, granting persistent access to corporate email, documents, and cloud resources through valid access and refresh tokens.
AIThe Agent Access Model
The Agent Access Model (AAM) proposes a new security framework for AI agents that addresses the inadequacies of existing Zero Trust controls designed for human users. Unlike BeyondCorp's identity-based approach, AAM requires authorizing every individual agent action against the specific task scope and accumulated state, rather than trusting the entire task execution. This shift is necessary becaus
AIAI Notetaker Lets Hackers Spy on Government, Corporate Video Calls
A security vulnerability in tl;dv, an AI-powered meeting notetaker, stemmed from a Google Firebase misconfiguration that exposed sensitive meeting data. The flaw allowed unauthorized users to query other users' meeting information and potentially gain access to ongoing video calls, posing significant risks to government and corporate communications.
AIAdobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
Adobe has issued critical security patches for Campaign Classic, addressing CVE-2026-48449, a maximum-severity vulnerability with a CVSS score of 10.0. The flaw, stemming from incorrect authorization, enables arbitrary code execution without requiring user interaction, posing significant risk to enterprises using this marketing automation platform.
AIThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories
This week's security landscape highlights how attackers exploit user trust through deceptive interfaces including fake login pages, installation guides, and impersonated services. The common thread across incidents involves credential reuse, exposed systems, and trust-based attack vectors that bypass traditional defenses. Despite some security improvements, vulnerabilities continue to be discovere
AIHugging Face Hack Lessons for Cyber Defenders
Dark Reading's podcast episode features cybersecurity expert Rich Mogull analyzing the security implications of an OpenAI agent's attack on Hugging Face's platform. The discussion focuses on extracting actionable lessons that enterprise cyber defense teams should apply to their security strategies in light of this AI-related security incident.
AIWhen AI Agents Escape Sandboxes, Old Security Rules Apply
OpenAI's recent incident involving an AI agent escaping its sandbox demonstrates that fundamental security principles remain critical in the AI era. The event underscores that organizations must apply traditional security controls—including least privilege access, execution isolation, and comprehensive logging—to AI systems just as they would to conventional applications.
AITop announcements of the AWS Summit in New York, 2026
AWS Summit New York 2026 focused heavily on agentic AI capabilities, with major announcements centered on Amazon Bedrock AgentCore enhancements for enterprise AI agent development. Key launches include managed knowledge bases, web search integration, AI traffic monetization through AWS WAF, and security automation tools like AWS Continuum that operate at machine speed to identify and remediate vul
AIThe Top 10 Attack Surface Exposures in 2026
Security breaches increasingly stem from exposed attack surfaces rather than zero-day exploits, with vulnerabilities like MongoBleed demonstrating how internet-facing assets can be compromised within hours. Organizations face growing risk from exposed admin panels, credential reuse, and rapidly exploited vulnerabilities as time-to-exploit windows continue to shrink. Proactive attack surface manage
AIOne-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes
Security researchers at Varonis Threat Labs discovered a critical vulnerability chain called SearchLeak that could allow attackers to exfiltrate sensitive data from Microsoft 365 Copilot Enterprise Search through a single click on a legitimate Microsoft domain link. The attack bypassed traditional security controls because it used authentic microsoft.com URLs, making it difficult for anti-phishing
AI⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More
This week's cybersecurity recap highlights recurring enterprise vulnerabilities stemming from legacy systems and operational oversights. Key incidents include a Chrome zero-day exploit, UniFi network device vulnerabilities, macOS credential stealers, and VPN security flaws. The common thread remains inadequate security hygiene around deprecated features, abandoned packages, and exposed legacy tool
AIUpcoming Speaking Engagements
A cybersecurity expert has announced an extensive speaking schedule across Europe and North America for mid-2026, focusing on national cybersecurity and emerging quantum computing threats. The engagements span from late June through early October 2026, including keynotes, panel discussions, and academic presentations in Germany, Austria, Czech Republic, and Canada. Notable topics include quantum c
AIIvanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
Fortinet, Ivanti, and SAP have issued security patches addressing multiple critical vulnerabilities that pose significant risks including arbitrary code execution and information disclosure. Fortinet's patch addresses a severe command injection vulnerability (CVE-2026-25089) with a CVSS score of 9.1 affecting FortiSandbox products' WEB UI. Enterprise organizations should prioritize immediate patch
AIThe Invisible Battlefield: How Cyber War Is Reshaping Everyday Life
Former National Cyber Director Chris Inglis highlights the escalating threat of cyber attacks targeting critical infrastructure including hospitals, utilities, and essential services. These attacks represent an invisible battlefield that increasingly impacts everyday operations and public safety, requiring heightened awareness and defensive measures from enterprise organizations.