Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

ANOTHER new AI coding tool has been released! This is Claude 3.7 Sonnet by Anthropic. In this video, I will be putting this new AI model to the test by asking it to write me secure code. But there's a twist... if the AI can't generate secure code, I will be FIRED...

A passphrase is a more secure way to create a password that uses a string of random words instead of a string of random characters. They’re easier to remember and longer and more secure than most user-generated passwords. Learn the tips for creating strong passphrases.

Are uncontrolled privileged accounts affecting your organization’s security?

Introducing “Spark” Code Intelligence’s AI Test Agent Fuzz testing is a proven powerhouse for uncovering critical bugs, yet its full potential often goes untapped due to the heavy manual workload it demands. But what if that effort could be a thing of the past? Enter “Spark” Code Intelligence’s AI Test Agent—a revolutionary solution that automates the discovery of vulnerabilities, bringing the power of advanced security testing, like fuzzing, into reach for all.

Demo: AI Test Agent in Action Discover the benefits of CI Fuzz 2.0, our powerful tool that simplifies fuzzing to a single command. The demo will also highlight root cause analysis capabilities, showcasing how vulnerabilities can be identified and addressed efficiently, this demo will uncover several real-world severe vulnerabilities uncovered by AI Test Agent in widely used open-source libraries during the past few months.

This week’s briefing covers: KTA080 (CL0P) Update KTA080 has released the names of the previously redacted victim organizations ranging from E-H. Additionally, KTA080 has identified 183 victims’ organization names broadly covering H-W. KTA374 (Salt Typhoon) Telecoms Targeting Update Cisco Talos has released further information on the targeting of telecoms organizations identified in late 2024. This information includes the high level of living-off-the-land techniques used by the threat actor.

Now available: cybersecurity’s most trusted source for threat insights from the pioneers of adversary intelligence.

The industry’s most anticipated threat intelligence report is here.