AI-Infra-Guard: Open-source security scanner for AI systems

Tencent’s Zhuque Lab built AI-Infra-Guard, an open-source security scanner for AI systems. It fingerprints running services such as Ollama, vLLM and ComfyUI and checks them against more than 1,600 known CVEs, inspects MCP servers and agent skills… Continue reading AI-Infra-Guard: Open-source security scanner for AI systems

Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results

In the Gartner report Validate the Promises of AI SOC Agents With These Key Questions, analysts Craig Lawson and Andrew Davies posit that “By 2028, 70% of large SOCs will pilot AI agents to augment Tier 1 and Tier 2 operations, but only 15% will achiev… Continue reading Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results

AWS spent years rebuilding its routing control plane without taking the network down

Every AWS API call, CloudFront video stream, and Route 53 lookup crosses the same infrastructure, which AWS calls its border network. It now runs on a routing system rebuilt from scratch over several years. The system that tells traffic where to go The… Continue reading AWS spent years rebuilding its routing control plane without taking the network down

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild.

These include 723 flaws in Windows, 111 … Continue reading Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Posted in Uncategorized

What breach and attack simulation needs to become in the AI era

Breach and attack simulation (BAS) has always had a supply chain. Somebody has to read the threat report, pull out the techniques, and turn them into something that will actually run against your controls. That somebody has always been a human red team… Continue reading What breach and attack simulation needs to become in the AI era

BleachBit 6.0.4 fixes secure wiping that skipped clusters on Windows

The open source cleaner BleachBit reached version 6.0.4 this week, erasing caches, browser traces, and files on Windows, Linux, and now macOS. If you shredded a sensitive file on Windows with an earlier build, parts of it may still sit on the disk wher… Continue reading BleachBit 6.0.4 fixes secure wiping that skipped clusters on Windows