Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

88% of organizations are running AI in at least one workflow, yet nearly two-thirds report more rework than savings. The model is rarely the bottleneck. Everyone has access to the same frontier models now. The difference is what sits underneath: content that's unstructured, ungoverned, and disconnected from the workflows that need it. Fixing the content problem usually means giving AI broad access to content, and that's where governance breaks down.

At Corelight Labs, our mission is to help organizations stay a step ahead of evolving threats. When our researchers came across Censys' detailed write-up on ScoutC2, a rapidly growing open-source command-and-control (C2) framework favored by threat actors, we knew we needed to bolster community defenses quickly.

In Part 1 of this series, we addressed 18 Kubernetes best practices spanning across container hardening, observability, availability, and fault tolerance. Those practices secure the containers that agents run in. But the CNCF AI Technical Community Group's cloud-native agentic standards go further, establishing that securing containers is only the beginning.

Today, the UK government launched the Cyber Resilience Pledge: a voluntary framework inviting organizations to commit to foundational cybersecurity governance, board-level accountability, and comprehensive cybersecurity coverage across supply chains.

Your SOC probably already has good tools. A SIEM collects logs. An EDR agent watches endpoints. Threat intel feeds add context. Ticketing systems track work. Yet the team still feels slow, overloaded, and inconsistent. That gap is where most leaders start asking what is SOAR. Not because they want another acronym, but because they need a way to make the tools they already own work together, reduce manual effort, and respond with less chaos.

Cloud keys, shell history, SSH keys, AI agent caches: a complete inventory of where credentials hide on a developer's machine, and why infostealers go looking there.

For years, enterprise security focused on protecting users, endpoints, applications and data. Today another identity is entering the enterprise. AI agents. Unlike traditional chatbots that simply answer questions, modern AI agents can perform tasks on behalf of users. They can search corporate knowledge, summarize documents, create reports, interact with business applications and, with appropriate permissions, execute multi-step workflows.

A lot moved across the platform in June. Ticketing becomes a proper collaborative workspace, SQL Server monitoring goes from basic to comprehensive, and the Knowledge Base gains the kind of permission controls and team features that make it genuinely useful at scale. Here’s everything that landed.

If your business builds or uses artificial intelligence, two names often come up. They are the EU AI Act and ISO/IEC 42001. They are easy to confuse, and getting the relationship wrong either wastes budget or leaves you exposed. This guide explains what each one requires, where they overlap, and how they work together.It shows how compliance leaders, CISOs, and AI product owners can use them without repeating work.It also helps you avoid gaps that could lead to an audit failure. Contents.

Summer is a good time to catch up on hardening work that gets postponed the rest of the year. Change freezes ease up, project calendars thin out, and the servers that quietly drifted out of spec during Q1 and Q2 finally get some attention. Over the next eight weeks, we’re publishing one practical hardening review each week. None of these require a project plan or a change advisory board meeting.