Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Fueling Cisco XDR with Corelight high-fidelity network evidence

From hunting threats to solving complex problems to coding on a couch, adventures in the Black Hat NOC (Network Operations Center) are always interesting. Over the last few months and several shows, I’ve had the privilege of working with one of the other NOC partners, Cisco, to design and test our first integration between Corelight Investigator and Cisco XDR.

Android and The Sideloading Security Gap

For years, debates about Android security have essentially focused on the wrong questions. Is the operating system secure enough? Are mobile exploits becoming more sophisticated? Are app stores doing enough to screen malicious software? These questions assume modern mobile risk begins with technology vulnerabilities. But increasingly, it does not.

SIP Trunking Security in 2026: What Enterprises Must Know Before Their Next Breach

Telecom fraud exceeded an estimated $41.82 billion in losses in 2025 - and a substantial share of that exposure runs directly through SIP trunks. The SIP trunking market itself reached $73.14 billion that same year, and is projected to more than double to $157.91 billion by 2030, according to Mordor Intelligence. That collision of rapid adoption and surging fraud is not a coincidence. Enterprises are migrating voice infrastructure to IP-based systems faster than security teams are adapting their threat models to cover them. In 2026, SIP trunking is business-critical infrastructure.

The Digital Homestead: A Guide to Navigating the World of Virtual Private Servers

Imagine you've finally decided to move out of your crowded family home. You're tired of sharing the kitchen and waiting for the shower, but you aren't quite ready to buy a massive mansion with a ten-car garage. You find the perfect middle ground: a modern, sleek apartment in a high-rise. You have your own front door, your own kitchen, and total privacy, even though you share the building's foundation and plumbing with neighbors. This is exactly what happens when you decide to rent a virtual server.

Event Layout Planning Using Rentals

Event layout is what makes a party feel smooth instead of chaotic. Guests rarely say "wow, great layout," but they definitely feel it. They can find a seat without awkward searching, grab food without a long jammed line, and move between areas without bumping into people. Rentals play a big role here because they aren't just décor. They define how people enter, where they gather, and how traffic naturally flows through the space.

Everyone Is Deploying AI Agents. Almost Nobody Knows What They're Doing.

One constant I hear from CISOs I speak with is that AI agents are not coming. They are already inside organizations, reasoning through goals, selecting tools, and taking action through the same APIs that connect your most sensitive systems. And most security teams have no idea what those agents are doing.

Baking accessibility into our product foundation

TL;DR: Building for everyone, faster. We’re moving from the why to the how. To scale accessibility without losing speed, we’ve overhauled our foundation: In our previous post, we explored why accessibility is a non-negotiable for modern cybersecurity. But moving from philosophy to practice required a fundamental shift in our toolkit.

Closing the gaps in your identity lifecycle management strategy

A lot happens during a user’s identity lifecycle. However, many organizations don’t always ensure user identities are securely created, removed and managed. There are also the risks around compliance violations, insider threats, lower productivity and higher costs from managing sprawling and complex environments. That’s why it’s business-critical to deliver holistic identity lifecycle management (ILM).

Introducing Agent Privilege Guard: Runtime Privilege Controls for the Agentic Era

The question enterprises are asking is no longer whether to deploy AI agents. It is how to do it without creating security risk they cannot control. In December 2025, Amazon’s own AI coding tool Kiro triggered a 13-hour AWS outage after autonomously deciding to delete and recreate a production environment.