Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

A widespread supply chain attack has impacted hundreds of organizations through the marketing software-as-a-service (SaaS) product, Drift, owned by Salesloft. The campaign, attributed to a threat group tracked by Google as UNC6395, is believed to have occurred between August 8 and August 18, 2025. The attackers used stolen OAuth and refresh tokens associated with Drift's AI chat agent to access the systems of impacted companies.

You’ve built an arsenal of security tools, but they aren’t even fighting the same war. Today, the average company balances 83 different security systems from 29 vendors. This massive tool sprawl has created a costly problem: fragmented defenses. Although each of your legacy endpoint solutions once served a specific purpose, their lack of integration and communication makes them insufficient today.

Today we’re announcing the beginning of the next phase of our journey. We’re launching our Vulnerability Intelligence feed, Nucleus Insights. As we’ve worked with many companies, partners, and clients over the years, this became an obvious next step for Nucleus, and I want to share with you why. Fixing vulnerabilities is expensive. Not just in terms of patching costs or system downtime, but in people, time, and lost focus.

The digital landscape is expanding at an unprecedented rate, driven by the mass migration to the cloud, the proliferation of IoT devices, and the rapid growth of AI. While this growth presents limitless opportunities, it also creates a daunting new reality for cybersecurity teams. As a company's digital footprint and attack surface expand, it becomes increasingly vulnerable to the growing number of threats, particularly those originating from the open, deep, and dark web.

The rapid expansion of the Internet of Things (IoT) has fundamentally changed how organizations operate, enabling smarter, more connected enterprise networks. IoT devices—ranging from security cameras and smart TVs to advanced medical devices—are now embedded in nearly every aspect of business operations. These devices help organizations streamline processes, enhance productivity, and improve the management of critical systems.

This blog post may sound a bit personal. That’s because it is. It is also a long story, so you might want to grab yourself some coffee (or your favorite beverage).

An AI Bill of Materials (AIBOM) addresses this gap. It is a concise, living profile for every AI capability an organization can invoke—models, agents, SaaS features, plug‑ins, and APIs. Kept in a machine‑readable format, it serves as a practical record that can inform runtime decisions in a control plane. An AIBOM summarizes five things about each AI capability: who provides it, what it can do, what data it sees, where it runs, and how it should be treated.