Hunt or be Hunted: FalconFlank Zero-Day
Sweep your entire Windows estate for a public CrowdStrike Falcon Zero-day in about a minute, from one prompt. Here's how Tanium HuntIQ threat hunters built the hunt. No vendor patch required.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
"Eye" spy: Cyclops Blink returns with extended capabilities
In August 2026, Counter Threat Unit (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was discovered on multiple compromised Cisco Firewall Management Center (FMC) devices. The sophisticated modular implant provides persistent remote access to a compromised Linux system.
From Agreement to Action: What's Actually Stopping Us?
Over the course of this series, I’ve laid out the case for a fundamentally different security operating model — one built around Outcome, Judgment, and Execution layers, where AI handles the execution at machine speed, and humans focus on the decisions that actually need them. I’ve argued that the CISO’s role is changing, that human-centric security no longer scales, and that the org chart needs to reflect where AI fits on the team.
Beyond the Login Screen: Why Qualified Electronic Signatures Belong in Identity Security
For years, identity security was mostly discussed as an access problem. Can the right person log in? Is multi-factor authentication enabled? Are privileged accounts protected? Can stolen credentials be used from an unknown device? Those questions still matter. But they describe only the beginning of a digital transaction.
LinkedIn to CRM Extensions: A Security Checklist (2026)
Browser extensions that copy LinkedIn profiles and conversations into a CRM are now standard in most sales teams. They are useful, and they are also a data security decision that usually never reaches the security team. Each one runs inside the rep's authenticated browser session, reads personal data from LinkedIn, and moves it into a second system under the rep's own credentials. This article sets out the questions a security or IT function should ask before allowing one, and how the common tools answer them.
How to Improve AI Search Visibility Without Exposing Sensitive Data
AI search visibility creates a useful tension for security and marketing teams. A company wants its expertise, products, and evidence to be easy for search engines and AI systems to find. At the same time, it cannot afford to expose customer data, internal documents, credentials, or operational details simply to make its content more "machine readable." The right goal is not maximum crawlability. It is controlled public visibility: publish enough reliable information for a search system to understand and cite the company while keeping private information behind real access controls.
Breach fatigue: Why your team has switched off and how to fix it
Cybersecurity continues to face continued challenges in the Australian environment. The Australian Signals Directorate’s (ASD's) Annual Cyber Threat Report 2024–25 revealed that there were more than 84,700 cybercrime incidents and over 42,500 calls to the Australian Cyber Security Hotline, representing a 16% increase in comparison to the previous reporting period. More threats. More notifications. More training events. Yet, surprisingly, employee vigilance is continually decreasing.
What is a backdoor attack?
A backdoor attack is hard to detect. Since they bypass standard security measures, backdoor attacks can enter your system and go unnoticed for a long time. While some cyberattacks tend to be smash-and-grab, backdoor attacks are stealthier. They allow hackers to enter secretly, gather more secure data than typical attacks, and can cause significant damage. Because they can be so difficult to detect and cause so much damage, you need to know the signs of a backdoor attack and learn how to mitigate it.
Looking Ahead from VMware Explore
Our time at VMware Explore reinforced what we believe and continue to see across the industry: VMware remains the leader in virtualization and cloud infrastructure. VMware Cloud Foundation (VCF) continues to push the envelope with a powerful set of built-in capabilities that help organizations build, operate, and secure modern environments. Time and again, we saw how these capabilities are enabling businesses to simplify complexity and operate with greater confidence.
Is prevention essentially a solved problem?
Stopping new security issues in agent-generated code from being deployed is, architecturally, a solved problem. Prevention is the act of keeping a new vulnerability in code from reaching production at any point in the development and release process, including but not limited to preventing its introduction in a feature branch.