Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Howler Episode 36 - Sam McLane, Chief Technical Services Officer

This month, we sit down with Sam McLane, Chief Technology Services Officer and one of Arctic Wolf's original team members, as he reflects on the company's journey from six employees to more than 3,500 worldwide. Sam shares lessons learned from nearly 15 years of building Arctic Wolf, why relationships have been at the heart of his career success, how he thinks about leadership, innovation, and staying ahead in the ever-changing cybersecurity landscape, and so much more!

2026 Security Operations Summit - Building Cyber Resilience Together

Two days. Hundreds of security leaders. Countless conversations about what's next in AI and cybersecurity. Thank you to everyone who joined us for the 2026 Security Operations Summit. From discussions on AI-driven security operations and cyber resilience to insights from industry leaders, the event was packed with ideas, innovation, and real-world expertise. We're especially grateful to our customers, partners, speakers, Cyber Resilience Leadership Award winners, and sponsors for making this year's event such a success.

What are AI Hallucinations?

AI hallucinations are outputs that sound accurate and authoritative but are false or invented. This Arctic Wolf video explains what AI hallucinations are, why they happen, and what they mean for cybersecurity. They happen because of incomplete data, data bias, lack of context, and processing complexity. AI predicts from patterns and doesn’t check its answers against reality. In security, the consequences include hallucinated threat assessments, incorrect remediation recommendations, fabricated indicators of compromise, wasted time, and increased risk.

Is My Organization Exposed to PHP2Shell? See It in Aurora Vulnerability Management

PHP2Shell is two unauthenticated remote code execution (RCE) flaws with public exploit code. As AI speeds up the path from vulnerability to exploit, security leaders keep asking two questions. Are we exposed? And what do we fix first? This walkthrough shows how Aurora Vulnerability Management from Arctic Wolf answers both.

Inside the Aurora Agentic SOC: How the Swarm of Experts Investigates and Responds at Machine Speed

Meet the Aurora Agentic SOC and the Swarm of Experts. Powered by a large team of specialized AI agents, the Aurora Agentic SOC coordinates investigation, response, and continuous learning at machine speed while bringing human analysts into the process when additional expertise, validation, or judgment is required.

Explaining PHP2Shell | Arctic Wolf Threat Brief

In this explainer from Arctic Wolf's Peter Ingebrigtsen, we break down what the PHP2Shell vulnerabilities are, how attackers are exploiting them, and the steps organizations should take now to reduce exposure. Arctic Wolf customers can use Aurora Exposure Management to identify affected assets and prioritize remediation, while the Aurora Agentic SOC helps detect and respond to post-exploitation activity such as webshell deployment, unauthorized command execution, persistence, and lateral movement.

Beyond the Inbox: How Threat Actors Abuse Microsoft Teams External Chat for Initial Access

Arctic Wolf Labs has observed a recurring social engineering pattern in hundreds of cases where threat actors have used Microsoft Teams’ external chat creation feature for impersonation scams, or to deliver malicious files. A consistent pattern of attacker behavior has emerged across these incidents: the use of the same throwaway tenants, the same “IT Support (Internal)” display names, the same remote-access tools, and increasingly, the same payload domains.

PHP2Shell Is a Wake-Up Call for Every Business Leader

AI is changing how vulnerabilities are discovered and exploited for defenders and attackers alike, and the practical effect is that the time organizations have between a flaw being found and a flaw being exploited keeps shrinking. Today, we have more known vulnerabilities than at any point in history, and they’re being exploited faster than ever.

PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution

On October 21, 2026, the PHP development team released emergency security updates addressing two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively referred to by researchers as PHP2Shell. Both vulnerabilities carry a CVSS v4.0 score of 9.2 (Critical Severity) and can allow an unauthenticated attacker to execute code with the privileges of the affected PHP worker process.