Microsoft’s Five AI Agent Risk Classes: A Practical Security Control Map
A practical control map for Microsoft’s five AI agent risk classes, with implementation guidance and a safe offline policy-audit lab.
NIST’s 5G False Base Station Tests: What Defenders Should Do
NIST tested six simulated 5G false base station scenarios. See what resisted manipulation, why denial of service remained, and how defenders can detect it.
Cloudflare’s Account Abuse Dashboard: A Defender’s Guide to Stateful Login Analysis
Cloudflare released a stateful dashboard for investigating credential stuffing. Learn its signals, limits, deployment steps, and a safe detection lab.
GitHub’s 520-Character App Tokens: Audit Before November 30
Audit GitHub App integrations for 520-character stateless installation tokens, safe secret redaction, storage limits, and the November 30 deadline.
Ubuntu GStreamer Security Update: Audit and Patch USN-8863-1
Audit and patch Ubuntu GStreamer flaws in AVI, FLAC, MP4 and MOV parsing with fixed package versions, verification commands, and safe rollout steps.
npm Trusted Publishing Adds OIDC Dist-Tag Control
Secure npm release workflows with OIDC dist-tag permissions, protected promotion jobs, token removal, provenance, and a tested offline audit lab.
Exploited NetScaler RCEs: Patch and Investigate CVE-2026-88771/88772
Citrix and CISA confirm active exploitation of two NetScaler RCE flaws. Check affected builds, preserve evidence, and plan a verified response.
CISA KEV Vulnerability Prioritization After the Weekly Bulletin
CISA retired its Weekly Vulnerability Bulletin. Build a KEV-first prioritization workflow with asset context, automation, and a safe hands-on lab.
