August 3, 2026 Emerging Threats Weekly
This week’s briefing covers: Dive deeper.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Tanium and Google Threat Intelligence bring Google-grade threat intel to the live endpoint
Security teams are under pressure to move faster, investigate more confidently, and make better decisions with fewer resources. But even the best security operations teams run into the same problem. They often do not have a reliable place to start. Threat hunting depends on high-quality intelligence and experienced analysts who know how to turn that intelligence into useful pivots. Alert triage depends on knowing which signals matter and which ones are noise.
July 27, 2026 Emerging Threats Weekly
This week’s briefing covers: Dive deeper.
LimaCharlie 101: EDR deployment, detection rules, and threat intelligence
This workshop will cover the basics of the LimaCharlie SecOps platform. You will learn how to deploy EDR agents, gather additional telemetry and write detection and response rules, and integrate threat intelligence and YARA rules to detect and mitigate threats. Key Learning Objectives: Endpoint Detection and Response (EDR) Agent Deployment and Management: Learn the best practices for deploying LimaCharlie EDR agents across diverse environments. Understand the various deployment methods, agent configurations, and how to effectively manage agent health and status at scale.
How to Build a Rail Threat Intelligence Programme: A Practical Roadmap
The final part of CYJAX's rail cybersecurity series sets out a practical, five-step roadmap for building a rail-specific threat intelligence capability, covering regulation, coverage, and where to start regardless of maturity.
When the Attacker Is the AI: What the OpenAI Sandbox Escape Means for Threat Intelligence Teams
An OpenAI agent broke out of its test sandbox and autonomously breached Hugging Face with no human direction, an incident both companies called unprecedented. CYJAX examines why this doesn't fit existing threat actor categories, maps it to the standard attack lifecycle, and outlines three additions CTI teams should make to their collection plans and PIRs to track autonomous offensive tooling before it hits their own network. On 16th July 2026, Hugging Face disclosed that it had been breached.
Cyber Threat Intelligence: How to Build a Practical Programme for Your SOC
As cyber dangers get more sophisticated and messy, company SOCs can't simply keep playing defense. An effective IT security strategy today includes hunting malicious agents down before they strike. Modern organizations need a thorough grasp of the tactics, techniques, and procedures used by industry-specific adversaries.
Let's Talk Cyber Resilience E5: Gaurav Sheth
In this series, we chat with cybersecurity and data resilience leaders from Kroll and our partners. This week's guest is Gaurav Sheth, Global Head of Digital Identity, Data and OT Security. Future episodes will cover topics such as the Cyber Threat Landscape, AI Risk Governance and Private Equity.
AI Threat Intelligence vs. Traditional Threat Intelligence: A Practical Guide for CISOs
Most CTI programs aren’t failing because analysts lack skill. They’re failing because signal volumes have outpaced what any manual workflow can process. Thousands of newly registered domains, phishing kit variants, and brand impersonation attempts surface daily. Human teams can’t triage all of it. Threat intelligence automation addresses the throughput problem by automating collection, enrichment and prioritization so analysts spend time on decisions, not data wrangling.
Why Generic Threat Intelligence Doesn't Work for Rail
Part two of CYJAX's rail cybersecurity series looks at why generic threat intelligence falls short in a rail environment, from safety-constrained response options to legacy protocols and a fragmented supply chain, and what rail-specific intelligence needs to deliver instead.