How AI is actually remaking security
AI spells the end of security by obscurity
First reported Aug 25, 2026 23:44 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordPublished file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
2 sources: 0 stale, 0 needing attention, 0 paused, 2 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
AI spells the end of security by obscurity
First reported Aug 25, 2026 23:44 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordA few questions I think about when I evaluate if a company or a market category is going to stick around.
First reported Jun 02, 2026 15:10 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordIn security or otherwise, trends are temporary. Stick to fundamentals.
First reported May 12, 2026 16:25 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordThe dust is settling, and CISOs are refocusing on what actually matters to their organizations, not just what marketers want them to care about (no offense to my marketing friends!)
First reported Mar 31, 2026 23:22 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordAnd also, there has never been a billion-dollar security company built based on Gartner’s insight alone
First reported Mar 24, 2026 14:52 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordIn cyber, not everything is what it seems
First reported Jul 28, 2026 18:57 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordThis also means that there are plenty of B2B companies that could be potential acquirers of security startups
First reported Mar 17, 2026 14:35 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordEvery major cyber company was built on conviction, not consensus
First reported Jul 14, 2026 22:24 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordOur view of cybersecurity is defined by our backgrounds, and that perspective is usually very limiting
First reported Apr 07, 2026 21:09 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordPeople who understand the power of AI are paying attention to the wrong things, and those skeptical about what AI will do for cyber are behind on what’s already possible
First reported Oct 07, 2026 15:10 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordI had to step away from Venture in Security for ~2 months. I am back with some big announcements about the future of this blog.
First reported Oct 04, 2026 20:26 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordDiscussing the convergence of infra and security and what this means for CISOs, founders, and the industry as a whole
First reported Apr 28, 2026 18:09 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordSharing some thoughts about Israeli and non-Israeli security startups
First reported Jun 10, 2026 15:03 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordA set of generalist frameworks (mental models, principles, or whatever you want to call them) that 100% apply to cyber.
First reported Jun 16, 2026 19:12 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordWe designed a behavioral clustering model to map cloud identity roles from audit logs, enabling continuous threat detection using standard SQL queries. The post Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection appeared first on Unit 42.
First reported Sep 14, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordUnit 42 is aware of possible 0-day activity against NetScaler devices. Citrix reports CVE-2026-88771, CVE-2026-88772 have been exploited in the wild. The post Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30) appeared first on Unit 42.
First reported Sep 30, 2026 20:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordUnit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization reinforce its enterprise defenses. The post 3 Consulting Myths Debunked by Unit 42 Experts appeared first on Unit 42.
First reported Sep 25, 2026 23:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordWe introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities. The post OperTraitors: How Kubernetes Operators Betray Your Security Posture appeared first on Unit 42.
First reported Sep 29, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordAnalysis of Blinder Tunnel, an Iran-nexus campaign using fake Dubai Airports recruitment lures and GitHub C2 malware to target critical infrastructure. The post Blinder Tunnel Campaign Targets Iraqi Infrastructure appeared first on Unit 42.
First reported Oct 06, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordModern macOS malware uses deceptive setup guides to steal credentials and sensitive user data. Learn how to identify and block these threats. The post Atomic macOS (AMOS) Stealer Activity appeared first on Unit 42.
First reported Sep 16, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordUsing autonomous AI agents, an attacker breached an enterprise network in a matter of hours. Understand how to address and defend against agentic attacks. The post An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation appeared first on Unit 42.
First reported Sep 02, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordAn investigation into how cybercriminals used YouTube gaming lures and SEO poisoning to deliver multi-payload malware to enterprise networks. The post Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure appeared first on Unit 42.
First reported Sep 09, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordAnalysis of how default configurations in AWS AgentCore Harness allow prompt injection to exfiltrate credentials, and key steps to secure your agents. The post A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity appeared first on Unit 42.
First reported Sep 18, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordLearn how root access on a compromised K8s node allows attackers to utilize SPIFFE/SPIRE metadata to spoof and harvest co-located workload identities. The post The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE appeared first on Unit 42.
First reported Sep 10, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.