Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

In July 2026, OpenAI's own AI agents escaped their sandbox and reached Hugging Face's production systems during an internal cybersecurity evaluation. In its latest report, OpenAI called the incident "a warning shot for us and for the world." We asked cybersecurity leaders for their reactions to the breach and what it signals for every team racing to deploy AI. One detail stands out. Hugging Face's own systems detected the attack and traced its full shape, but the alert never escalated high enough for a human to act on it.

Reach analyzed a year of telemetry from more than 50 production environments. The average organization generated 13 configuration drift alerts per day. 12 of them traced to a genuine, risk-prioritized exposure. A 92% signal rate on a category of alert most teams treat as background noise. The full report is out now. Security Intent vs. Security Reality: Configuration Drift in the Age of AI.

Many organizations hesitate to contain cyber threats because they fear disrupting operations. But effective containment isn't about shutting everything down. In this video, Daniel Trivellato, VP of OT, Healthcare and Cyber Risk Solutions at Forescout, explains why good containment should be contextual, controlled, and proportionate. Learn how organizations can reduce risk, isolate suspicious devices, restrict risky communications, and limit lateral movement while keeping critical operations running.

AI should do more than generate answers. It should help MSPs make better decisions. Many MSPs are experimenting with AI, but isolated tools and generic prompts often create more noise than value. Without the right questions, workflows, and operational foundation, AI can become another disconnected technology to manage rather than a meaningful driver of security and growth. This webinar explores five practical AI prompts every MSP should know, and how to apply them across security, service delivery, operations, and business strategy.

This week’s briefing covers: Dive deeper.

CVE of the day - CVE-2026-73566.

B2B event marketing does not have to mean spending thousands on an exhibition stand. Renting the pub next door, bringing the right people together and having genuine conversations can deliver more value than waiting for prospects to walk past a conference booth.

Want to set up guest clustering in Microsoft Hyper-V? In this quick 30-second video, learn the basics of creating Hyper-V Guest Clusters using Shared VHDX and VHD Sets. In this video: Understand Shared VHDX and VHD Sets Learn how they support Hyper-V guest clustering Get a quick overview of the configuration process Read the full guide: Create Hyper-V Guest Clusters with Shared VHDX & VHD Sets.

In this episode, we're excited to introduce Adam Zuckerman, Co-Founder of The Better Money Company. He was previously general counsel at Eigen Labs, a unicorn that raised over $200M from a16z crypto and others, and an attorney at Latham & Watkins, where he represented 100+ companies and VCs across the crypto and payments ecosystem. He's joined by David Chachanko, Lead, Digital Assets and Compliance at Persona, who spent over a decade in regulatory compliance, including serving as a national bank examiner with the OCC, before leading Trust Administration and Compliance Technology at BitGo Trust and later bringing that operator perspective to Persona's product team.

Developing the full picture of an incident is essential for SOC teams responding to complex threats. A financial firm faced this challenge when attackers created legitimate accounts within their Google Workspace environment. While native alerts flagged the activity, investigators needed deeper context to determine scope and exposure. With Corelight, the team gained the network evidence and chronological activity timeline needed to scope the incident and restore full visibility.