Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Mythos and Beyond: Cato Addresses the Generational Shift in Cyber Threats with Agentic Security Researchers

Anthropic’s upcoming Mythos model points to something far more consequential than another leap in artificial intelligence. It signals a shift that could redefine the balance between attackers and defenders in cyberspace.

Corelight and Microsoft: A smarter way to fight alert fatigue

For SOC teams, the battle against cyber threats can feel like trying to solve a 3D jigsaw puzzle in a bouncy house with missing pieces and a timer blasting every few seconds. Despite the increase in security spending, most teams still struggle with inefficient investigations, alert fatigue, and the non-stop guessing game of prioritizing threats. That’s why we’re excited about our latest integration with Microsoft Security that we hope will help address these persistently common challenges.

TeamPCP: Supply Chain Attack Targets Trivy, KICS GitHub Action, and LiteLLM

Security vendors have linked recent incidents involving trusted software components to a supply chain attack campaign by TeamPCP, a cloud-focused threat actor group. The reported activity involved three widely used types of development components, which include.

How Fidelis Network Delivers Forensic-Level Visibility Across Hybrid Environments

Hybrid environments combine on-premises data centers with public cloud platforms like AWS, Azure, and GCP. This creates complex east-west traffic and north-south flows where advanced cyber threats hide in encrypted tunnels. Fidelis Network addresses this challenge with patented Deep Session Inspection (DSI) technology. DSI captures communication sessions across monitored network segments, recursively decodes nested protocols, data, and extracts network forensic evidence for hybrid networks.

Securing Agentic AI: Why Visibility, Behavior, and Guardrails Matter

Agentic AI is quickly transitioning from experimentation to production. Enterprises are deploying AI agents to interpret goals, decide what actions to take, interact with business tools and APIs, and execute those actions autonomously, with limited or no human oversight. The promise is speed and efficiency, but the proverbial “blast radius” is bigger and fundamentally different from anything security teams have managed before.

Why Your AI Workflow Should Never Depend on a Single Model

Network engineers have long understood redundancy. Redundant power, redundant links, redundant clusters. The reasoning is simple: any single component that can fail, will. But AI introduces a category of failure that most infrastructure teams have not yet built defenses against. Unlike hardware, AI models can become unavailable for reasons entirely outside your organization's control.

Episode 11 - The AI Maturity Journey: Data, Agents, and the Shift from Craft to Art

Richard Bejtlich talks with Vijit Nair, VP of Product at Corelight, about the evolving "AI Maturity Journey" for modern security teams. Vijit outlines a three-level spectrum of AI adoption, moving from basic human-driven assistance to automated swarms of agents, and eventually toward fully autonomous systems. They discuss why high-quality, unopinionated data remains the essential foundation for building trust in AI and how technologies like the Model Context Protocol (MCP) are turning human language into the primary interface for tool integration.

How Can Network-Based Detection Help Stop Zero-Day Exploits?

Zero-day exploits rarely announce themselves. There is no public advisory yet. No CVE identifier. No detection signature sitting inside a rule library. The vulnerability exists quietly until someone discovers it and unfortunately attackers often discover it first. Once that happens, the exploit becomes a test of visibility. Attackers do not usually rush into environments using zero-days. They explore carefully. They check which systems respond. They observe how security tools behave.