Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

From Cybersecurity to Cyber Resilience: Understanding the Shift Cybersecurity has evolved significantly over the past decade. Organizations have invested heavily in firewalls, endpoint protection, identity security, and other technologies, yet cyberattacks continue to grow in frequency and sophistication. So, what happens when prevention fails? The conversation is shifting from *“How do we prevent cyberattacks?”* to *“How do we continue operating when an attack succeeds?”*

In this episode of The New CISO, host Steve Moore welcomes Sherri Douville for a conversation that sits outside the show's usual lane — less war story, more blueprint. Sherri works alongside CISOs rather than inside the role, and arrives with a pointed argument about what the job is becoming.

In this episode, host Richard Bejtlich sits down with Steve Smoot, Chief Technical Officer at Corelight, to explore how AI is reshaping the daily work of engineers and defenders alike. Steve traces his path from early employee to CTO and explains why the flexibility of Open NDR—where a simple ten-line Zeek or Spicy script can solve a customer's edge case without a full product release—remains a core advantage. The conversation digs into practical realities of working with large language models.

By the end of this hands-on workshop, you will have deployed a working detection pipeline, ingested a cloud log source, and shipped a bespoke dashboard app, all using Claude Code integrated with Grid by LimaCharlie. Along the way, you will see how Grid compresses the traditional SIEM/EDR/SOAR stack into a single automated workspace. We go well beyond standard EDR and SIEM use cases. What to expect.

CVE of the day - CVE-2026-64607.

AI governance is failing to keep pace with AI adoption inside businesses. When 100 people at a technology event were asked whether they used AI, every hand went up, but when asked about AI governance, every hand went down.

CVE of the day - CVE-2026-73086.

Cybersecurity events have changed from major industry meeting points into an increasingly crowded mix of vendor pitches, AI hype and expensive commercial conferences. Community events offer an alternative built around stronger conversations, relevant topics and relationships rather than another sales floor.

A critical alert shouldn’t come with a scavenger hunt. But answering the obvious questions can still send analysts bouncing between threat reports, adversary profiles, underground activity, vulnerability data, and hunting tools. See how CrowdStrike’s Threat Intelligence Agent, powered by Charlotte AI, brings those answers together and helps turn them into action, from hunting queries and dark web monitoring to vulnerability checks and automated workflows. The analyst stays in control. The busywork doesn’t.