Artificial intelligence continues to change the way businesses operate. From automating repetitive tasks and accelerating decision-making to identifying cyber threats in real time, AI is quickly becoming a foundational business capability. For many organizations, the…
On July 26 and 27, 2026, a coordinated cyberattack hit operational technology (OT) systems at more than 30 community water and wastewater utilities across Minnesota. Attackers disrupted automated control functions, forcing some plants to switch…
OpenAI put two of its most advanced models inside a locked room to test how well they could hack. The models picked the lock, opened the door, walked out of the building, and broke into…
On July 28, 2026, JFrog confirmed what the security industry had been speculating about for a week, the package-registry proxy that OpenAI’s AI models exploited to escape their sandbox and hack Hugging Face was a self-hosted JFrog Artifactory…
On July 14, Microsoft released security updates addressing 570 vulnerabilities, nearly triple the previous record and more than any single Patch Tuesday in the company’s history. Almost 60 of those bugs were rated Critical. Three…
Cyber attacks are no longer a question of if, they’re a question of when. Organizations face a sophisticated threat landscape, from ransomware and phishing attacks to insider threats and supply chain vulnerabilities. While traditional cybersecurity…
Something we track in the Adversary Operations Group is residential proxy networks. Infoblox uncovered an operation they call Lurking Lizard, running since at least August 2022, that uses fake software installers to conscript devices as…
Someone pretending to be an Adidas recruiter sent me a meeting invitation last week. At least, that is what the email looked like. The branding was right. The recruiter’s name was real. The company logo…
Cybersecurity architecture is the strategic framework that defines how an organization protects its users, applications, devices, networks, and data. Rather than focusing on individual security products, it creates a united security ecosystem where technologies work…
Microsoft released an emergency patch on July 9, 2026, for a Microsoft Defender zero-day vulnerability dubbed “RoguePlanet” (CVE-2026-50656) that allows attackers to gain SYSTEM privileges on fully patched Windows 10 and Windows 11 devices (BleepingComputer,…
We track vulnerabilities in the Adversary Operations Group that have a clear exploitation path and no viable workaround. This pair on the SonicWall SMA 1000 is both. SonicWall confirmed on July 15 that attackers are actively…