AI and Security
The Harness Is the Product: What Cloudflare's Vulnerability Harness Teaches AppSec TeamsMost of the conversation about AI and vulnerability research is about models. Which one found the most bugs, which one …
Vulnerability Management
PHP2Shell: What We Know About CVE-2026-109618 and CVE-2026-109619, and What to Do TodayOn October 20, two critical vulnerabilities in PHP core leaked a day before their planned disclosure. They’re …
Security Operations
The SOC Gets a New Org Chart: Five Security Operations Predictions for 2027Last week I argued that the bottleneck in detection engineering moved from writing rules to investigating alerts. If you …
OS Weekly
OS Weekly: A Chrome Zero-Day, Microsoft's Biggest-Ever Patch Tuesday & Lessons From Museum HeistsThis week’s news skewed toward patching math over dramatic new attack techniques: an actively-exploited Chrome …
OS Weekly
OS Weekly: A New Defender Zero-Day, a Critical vCenter Flaw & Patching SmarterIt was a loud week for patching discipline. A brand-new Microsoft Defender zero-day landed days after Patch Tuesday, …
OS Weekly
OS Weekly: Patch Deadlines, a Note-Free Ransomware, and AI Reshaping Security TeamsThis week brought two maximum-severity vulnerabilities with hard patch deadlines, a ransomware operator that changed the …
AI and Security
SPECTRA: AI-Powered Vulnerability Triage That Actually Works for Security TeamsSecurity teams are not losing the fight because of bad tools. They’re losing it because of volume. In 2025, 131 …
Cyber Policy and Resilience
Cyber Resilience in Real Time: New Realities, Rapid Responses, and Next-Gen StrategiesThe New Landscape of Cyber Threats Cybersecurity today is no longer confined to firewalls and antivirus software—it’s a …
Security Engineering
Foundations of Vulnerability Management: Strengthening Your Cybersecurity PostureIn today’s digital world, no organization is immune to cyber threats. From small businesses to global enterprises, …