Cyber Threat Digest

SOC Detection Resources

• PowerShell Persistence Attack Simulation: New 6-minute Splunk video demonstrates simulation steps and detection rules...

AI is accelerating both zero-day discovery and evasion tactics, pushing defenders beyond signature-based tools.

• Criminal groups used AI to identify...

Novo Nordisk confirmed unauthorized access to internal systems, with limited clinical trial participant data copied externally. Exposed categories...

SOC teams adopt AI tools widely but lack governance and validation structures, while staffing shortages block visibility and retention. Executives see...

Cyber threat intelligence sharing fails to prevent real-world breaches for small organizations without staff to convert alerts into action, demanding...

CVE-2026-20262 is actively exploited in the wild with confirmed real-world abuse. Rapid7 flags SD-WAN platforms as high-value targets, demanding urgent patching for SOC teams and researchers tracking enterprise edge threats.

Agentic AI Security Guidance

• Preparing for Agentic AI Risks: The article 'Preparing Security Programs for the Agentic AI Security Era' provides...

Three major policy shifts from the June 12 memo:

• NSA Empowerment: Director gains authority to deploy full NSA capabilities for NSS protection
  -...

Building a SOC requires careful planning across five core areas: strategy, technology, staffing, incident response and continuous improvement.

• Real incidents confirmed: Over 21% of macOS organizations suffered losses or attacks from AI tools, with deeper integration linked to 27% incident...

Organizations face agentic AI risks that demand both targeted IAM fixes and wider program updates.

• Practical IAM layer: Aembit now issues blended,...

ShinyHunters compromised Infinite Campus's Salesforce environment, leaking records from 137,100 accounts including names, emails, phones, addresses,...

AI enables defenders to learn complex patterns directly from heterogeneous security data and generalize beyond known signatures.

Agentic AI Incident Response

• 🔥 Salesforce Agentforce Limitations: Salesforce AI failures lack stack traces and break traditional root cause...

OpenAI's Daybreak promises to unify security workflows by combining threat modeling, vulnerability discovery, exploit validation, and remediation in...

A major database leak at Homers.fr exposed personal, financial, and behavioral customer data, with the breach scope highlighting critical vulnerabilities in protection measures.

Ransomware and OT Threat Intelligence

• 🔥 The Gentlemen Ransomware: Analysis of a ransomware operation first observed in mid-2025 that follows a...

• Middle East advisory supplies IOCs and detection guidance for BAUXITE, APT33, and APT34 campaigns.
• Ransomware in OT frequently begins with...

AI is accelerating threats across education and enterprise, forcing a move from prevention to resilience.

• Higher ed faces amplified phishing and...

Everyday wireless devices create hidden attack paths in sensitive environments where guards and gates offer no protection.

• Wearables, health...