Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CVE-2026-70111: How Corelight uncovered a 0-Day affecting Microsoft Distributed File System

In the process of fuzzing MS-RPC and Distributed File System (DFS) APIs, we discovered a one-packet mechanism set to crash an entire Windows server, which the Microsoft Security Response Center (MSRC) later assigned as CVE-2026-70111.

AI Trust Starts With Knowing the Source

An AI agent produces a recommendation that looks reasonable. It's accurate. The model didn't hallucinate. Can the organization trust it? That depends on questions the output can't answer: Enterprise trust requires knowing where information came from, how it moved, what happened to it, and whether the process behind the result deserves confidence. Provenance is where that trust starts.

Best Practices in Maintaining HIPAA Compliance for Healthcare Applications

If you build, own, or secure software that touches protected health information (PHI), you already know that HIPAA compliance for healthcare applications is not a box you check before a release and forget until the next audit. It’s a continuous operating requirement, and the gap between what most teams actually do and what HIPAA demands is widening fast.

Learning never stops: Why reskilling is Acronis' answer to a changing job market

Singapore's labour market is changing, and the numbers show it. The Ministry of Manpower's (MOM) latest Q2 2026 labour report recorded 4,620 retrenchments in the second quarter of 2026, the highest since the end of 2020. Job vacancies slipped to 68,600, with the sharpest falls in professional roles in financial services and in information and communications. Laid-off residents are also taking longer to find their next role. Only 54.9% found work within six months, down from 60.7% the previous quarter.

Intel Chat: NetScaler pre-auth RCE, OpenAI agents DDoS Wikimedia, MonsterCloud & ShinyHunters [351]

Intel Chat with Matt Bromiley and Chris Luft. Stories covered: Chapters: The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly. Subscribe wherever you listen.

Three AI SOC Differentiators That Separate Real From Marketing

Every vendor in this category now says the same word: agentic. I understand why. It’s what the market wants to hear. But when you’re the one signing the contract, “agentic” tells you almost nothing. I’ve sat on the buying side of enough of these conversations to know that the label and the capability are often two very different things.