Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

When I got back from Black Hat USA, I was stunned. Of course, it’s easy to be overwhelmed by Black Hat. There is so much going on. Las Vegas casinos are loud and flashy. Going outdoors feels like standing on the surface of the sun. Everywhere you walk there are strong smells, and you hope it’s a delicious meal, but sometimes it’s not.

In Hunting Citrix NetScaler zero-days with Corelight, we explored how network evidence from Corelight’s Open Network Detection and Response (NDR) Platform can help identify candidate NetScaler appliances, observe DTLS use and hunt for suspicious activity.

For the last few years, when somebody says “AI,” what they are usually referring to is a Large Language Model, or LLM for short. You chuck some text in, it has a think, and it gives you some more text back. This is brilliant if you want code written, documents summarised, or quantum physics explained to you in a limerick, but while this is great for humans, most software doesn’t actually want a beautifully written paragraph. Software just wants an answer so it can make a decision.

Access to powerful AI models is opening new possibilities for cybersecurity. Models can help uncover weaknesses, investigate threats, and explore how attackers might break into an environment. Using several models can bring different strengths to that work. But model access alone does not answer a critical question: can your defense stop an attack while it is happening? In the frontier AI era, discovery needs to connect to action.

Your last firewall audit came back clean. Every rule documented, every exception justified, every box checked, exactly what PCI DSS and your other compliance frameworks and attestations require. None of that tells you whether a compromised laptop in marketing can actually reach your payment systems right now. The audit verifies your firewall policy. It was never built to verify your network.

In modern network environments, maintaining both operational efficiency and strong security controls requires careful design and planning. One of the more common challenges Sophos Professional Services encounters, especially during firewall upgrades or redesigns, is asymmetric routing.

Organizations today face a common challenge: networks are growing, wireless connectivity is supporting more users and devices, and security threats continue to evolve. At the same time, IT teams are expected to deliver stronger protection, better performance, and greater visibility without increasing operational complexity. To help organizations meet these demands, WatchGuard is introducing three new additions to its Network Security portfolio: Firebox T175, Prime Security Suite, and AP340 Wi‑Fi 7.