Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Escalated Privileges in Azure Containers with Python in Excel

A math function in Excel became a path to root in Microsoft's cloud. SafeBreach Labs researcher Ron Ben Yizhak reverse-engineered the isolated Azure containers behind Microsoft's Python in Excel feature—and found the "isolated" part didn't fully hold. Cloud isolation claims are a trust boundary. Trust boundaries get tested. What he found: Both issues were responsibly disclosed to Microsoft and patched between March and June 2026, and the research debuted at DEF CON 34.

Preparing for an AI-Powered Future with Amazon CSO Steve Schmidt

Steve Schmidt, SVP and CSO at Amazon, sees firsthand how both defenders and adversaries are using AI to their advantage. In this episode, he joins Adam and Cristian to discuss modern AI models, evolving adversary behavior, and how Amazon is responding to shifts in the threat landscape. “The big change we’ve seen recently is the ability of models to chain things together to produce something interesting,” Steve says. As AI models grow more adept at automatically chaining and acting, he adds, the time to respond has dramatically decreased.

Episode 23 - Inside Zeek 9: Modernizing Open Source Network Monitoring & Agentic Security Scanning

In this episode, host Richard Bejtlich sits down with Christian Kreibich, Zeek's technical lead, to unpack the upcoming Zeek 9 release and what it means for practitioners. Christian explains how the project structures its three-releases-a-year cadence and how the team has spent recent cycles modernizing Zeek—including the shift to ZeroMQ for cluster messaging and new systemd-based cluster orchestration. A major thread is security.

Is Your Endpoint Strategy Broken?

Endpoint security is changing, but are organisations still protecting devices for a way of working that no longer exists? From Windows endpoints drifting out of compliance to VDI, preventative security and a radically different approach to what runs locally, the full Razorwire episode asks whether it’s time to rethink the endpoint. Watch the full episode to discover what modern endpoint security could look like.