Google and others warn that this trend will continue. If rapid AI-assisted discovery and exploitation keep accelerating, defenders cannot afford “unprioritized mass-patching” as in the past. Instead, they must move to a threat-intelligence-driven triage model: focus on the vulnerabilities actually… Read More "The ‘Mythos moment’ has already passed. Now comes the hard part for cybersecurity"
Frontier AI advancements have created a world where exploitation outpaces defense. The average enterprise takes 32 to 43 days to patch, but the mean time to exploit a vulnerability is 10 hours. This asymmetry creates questions around how enterprises can… Read More "Moving past autonomous exploitation to machine-speed security"
An unsupported controller is a budget line, not a patch ticket Claroty’s Team82 published three flaws in the current model, the AK-SM 800A, in August, all fixed in firmware 4.3.1 or earlier, and counted 2,765 of its management interfaces reachable… Read More "When defrost becomes sabotage: 3 OT lessons from France’s supermarket attack"
Most of you will already have something like this for people, usually as just-in-time elevation through a PAM platform. Workloads tend to get there through workload identity federation instead. The workload presents a signed token from a platform the target… Read More "The password nobody owns: Taking machines to zero standing privilege (ZSP)"
That is a leadership and management requirement, not something structural separation can solve on its own. Cybersecurity may be undermanaged, not just underfunded Security spending tells a similar story. Cybersecurity investment has risen substantially over the past decade, and some… Read More "Cybersecurity is a leadership problem: Why the management model needs to catch up"
There’s an old leadership fantasy that goes something like this: The CISO surveys a sprawling technology estate, discovers 11 tools doing the work of four, calculates the licensing savings, selects a shiny new strategic platform and declares that consolidation has… Read More "These ARE the droids you’re looking for"
Detection engineering follows the same pattern. A rule that produced useful signals 18 months ago may generate mostly benign activity today. New attacker techniques may also create gaps that did not exist when the rule was written. Continuously evaluating detection… Read More "When building an AI-native security program, start with outcomes"
