CISA issued BOD 26-04, which replaces BOD 22-01 with a four-variable vulnerability prioritization model requiring federal agencies to patch the most dangerous vulnerabilities in as few as three days. Key…
A keynote is about to start. Thousands of people are opening apps, joining sessions, checking schedules, scanning badges, and expecting the digital layer around the event to simply work. If…
By Yarden Porat AI agents need memory. Frameworks like LangGraph provide it through checkpointers – persistence layers that store execution state. But what happens when that persistence layer isn’t locked…
Rapid7 has been named a Major Player in the IDC MarketScape: Worldwide SIEM 2026 Vendor Assessment (#US54126826, June 2026). This is the first IDC SIEM MarketScape to bring the enterprise…
Welcome to this week’s Threat Source newsletter. There’s a fairly cliché phrase in cybersecurity that I’m sure our audience is familiar with: Attackers only need to be right once, whereas…
TL;DR Underlying the US–China AI race, there’s arguably a more sinister arms race—the race to identify zero-day threats. Frontier AI algorithms, such as Anthropic Mythos (here) and China’s Qihoo 360…
Introduction Nine new models entered the CASI Leaderboard in June, among them claude-opus-4-8, OpenAI’s gpt-5.5, DeepSeek-V4-Pro, and Kimi-K2.6. The most instructive reading this month lies in the widening distance between two properties…
When a major cyber incident hits, all eyes are on the CISO. They become the invisible CEO of crisis, steering the entire enterprise through the storm, managing stakeholders and making…
Discover how continuous control validation in Tenable One can improve your CTEM program by filtering out alert noise and factoring in your active cyber defenses. Focus your team on accessible…
Why a product engineer ended up in a SOC As a product quality engineer, our days are usually spent building/testing the thing — writing code, closing bugs, arguing about edge…
