Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI Is Shrinking Attack Timelines: Why Containment Can't Wait

How fast do organizations need to respond to cyber threats today? In this short video, Daniel Trivellato, VP of OT, Healthcare and Cyber Risk Solutions at Forescout, explains why containment can no longer be treated as the final step in incident response. As AI accelerates the time between vulnerability discovery and exploitation, security teams have less time than ever to investigate and react.

Opera VPN Extensions What Users Should Check Before Installing One

The phrase "VPN" can describe different kinds of browser tools. Opera also has a built-in VPN feature, while third-party add-ons may route browser traffic through a proxy service. Before comparing features, establish exactly what traffic the extension handles and what it leaves untouched.

When the fuzzers come knocking on port 389: Hunting injection canaries in LDAP

It's easy to think of core infrastructure protocols like LDAP, Kerberos, DNS, SMB, and NTP as furniture. They're so old, so ubiquitous, and normally so quietly reliable that we almost stop seeing them. However, history teaches us that Infrastructure protocols can and do have serious vulnerabilities. They say when you kick a rock over, dozens of bugs crawl out from under it. In this vein, this blog delves into how I went looking for one security issue and uncovered 6 other ones.

Episode 23 - Inside Zeek 9: Modernizing Open Source Network Monitoring & Agentic Security Scanning

In this episode, host Richard Bejtlich sits down with Christian Kreibich, Zeek's technical lead, to unpack the upcoming Zeek 9 release and what it means for practitioners. Christian explains how the project structures its three-releases-a-year cadence and how the team has spent recent cycles modernizing Zeek—including the shift to ZeroMQ for cluster messaging and new systemd-based cluster orchestration. A major thread is security.

Ransomware's AI Adoption Curve: From Marketing Claim to Operating Model

Somewhere in the first nine months of 2026, AI stopped being a talking point in ransomware and became part of how the work actually gets done. Tracking new ransomware-as-a-service (RaaS) launches, darknet recruitment ads and public incident reporting through this period shows a three-step progression: AI as advertising, AI as an assistant, and AI built directly into ransomware.