Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Episode 7 - Practical AI for Zeek, MITRE, and Security Docs

In Episode 7 of Corelight DefeNDRs, join me, Richard Bejtlich, as I sit down with Dr. Keith Jones, Corelight's principal security researcher, to discuss the practical applications of AI in enhancing network security. We delve into how large language models (LLMs) can assist in cleaning up documentation and generating Zeek scripts, sharing insights from our extensive experience in incident response and coding. Keith reveals the challenges and successes he has encountered using LLMs to streamline processes, including their role in analyzing MITRE techniques.

Introducing Forward AI

As enterprises move toward agentic operations, speed without data accuracy becomes a liability. At Forward Networks, we recognized this challenge and set out to deliver a solution: speed backed by mathematical accuracy. In networking, acting on incomplete or approximate data is not an inconvenience, it is a cause of outages, security exposure, and operational risk.

CVE-2026-24858: FortiCloud SSO Authentication Bypass Vulnerability Exploited

On January 27, 2026, Fortinet released an advisory detailing a critical authentication bypass vulnerability affecting FortiOS, FortiAnalyzer, FortiManager, and FortiProxy products. Designated CVE-2026-24858, the vulnerability allows an unauthenticated threat actor with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.

Why Kubernetes Flat Networks Fail at Scale-and Why Your Cluster Needs a Security Hierarchy

Kubernetes networking offers incredible power, but scaling that power often transforms a clean architecture into a tangled web of complexity. Managing traffic flow between hundreds of microservices across dozens of namespaces presents a challenge that touches every layer of the organization, from engineers debugging connections to the architects designing for compliance. The solution to these diverging challenges lies in bringing structure and validation to standard Kubernetes networking.

How Cafés Use Digital Tools to Attract Repeat Customers

Winning repeat business in a café isn't about blasting discounts; it's about staying usefully present between visits. The smartest way to do that today is to turn something customers already use your free WiFi into a gentle but consistent marketing engine. Beambox is built for that job, letting cafés capture real customer profiles, automate thoughtful messages, and nudge reviews without extra staff time. What you get is quieter marketing that compounds week after week and helps regulars feel known, not targeted.

Digital Nomads in 2026: The Tools That Make Location-Independent Work Possible

Five years ago, working from a beach in Bali or a café in Lisbon sounded like a fantasy reserved for influencers and trust fund kids. Now? It's Tuesday for millions of people around the world. The digital nomad movement has gone from niche lifestyle to legitimate career path, and the infrastructure supporting it has evolved dramatically. What once required exceptional circumstances now just requires the right preparation.

When Sensitive Data Becomes a Picture: Introducing ML-Powered Image Classification for DLP

Dr. Carter finishes a long shift at the hospital, exports a patient X-ray as a regular image file, and drags it into an AI assistant to double-check a diagnosis. The image included the patient’s name and ID. Across town, Jason, a travel agent, scans a stack of passports and uploads the images to an AI tool to automatically fill bookings. In a support center, Sarah snaps a quick photo of a credit card and sends it to an AI service to avoid retyping the number.

Turning Network Chaos into Strategy: A NaaS Success Story

For many organizations, the network has quietly become one of the biggest barriers to growth. It is the almost invisible nervous system of the enterprise, yet when it fails or becomes overly complex, it is the only thing anyone talks about. As projects expand, offices multiply, and cloud adoption accelerates; IT teams are finding the network is an increasingly difficult piece of the puzzle, and hard to control.

Building a Resilient City: How Cato Rolls Out PoP Changes Safely

Imagine a new city that promises cheap housing and ultra-modern infrastructure. People move in, only to discover that the roads are constantly jammed, power cuts happen every evening, water pressure drops without warning, and there are no cameras or sensors to detect where things are breaking. There is no central control room to test changes safely before the next “improvement” hits the streets. It does not matter how attractive the city looked on paper.

Uncovering A Mass VPN Phishing Campaign - The 443 Podcast - Episode 355

This week on the podcast, we cover some first-hand research from the WatchGuard Threat Lab on a phishing campaign targeting users of nearly every major VPN vendor. After that, we discuss two recently resolved vulnerabilities in the Fortinet FortiSIEM application, then end with research from Varonis on a new attack flow against Copilot called RePrompt.