Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

This week’s briefing covers: Dive deeper.

Ten government agencies across seven countries put their names on one advisory. AA26-281A profiles Integrity Technology Group — a China-based, for-profit contractor that builds, sells and hosts the tooling behind large-scale intrusions, and whose domains the FBI seized on October 8. Tova Dvorin and Adrian Culley break down MicroScan’s 1,300 pentest scripts, the eBurst spray that tries ten interfaces into one Microsoft 365 mailbox, SoftEther VPN hiding behind trusted Windows process names, and a 12-year-old Bash CVE still exploited in the wild.

AI is reshaping how we build and how we're attacked, often at the same time. If an agent can touch the data that runs your business, that data has to be recoverable. The Rubrik AI + Identity Resilience Summit brought together security leaders to answer one question: what does resilience look like when agents operate on both sides of the perimeter? From identity recovery to securing the agents inside your environment, every session is now available on demand.

When attackers compromise internet-facing devices, they may use them to access internal services and move laterally through the environment. Falcon Next-Gen Identity Security helps identify and stop this activity with dedicated detection and prevention for connections originating from classified internet-facing devices. With conditional access and automated response, organizations can block suspicious access, disable compromised users, and contain threats before they spread.

See how the Falcon Next-Gen SIEM Data Onboarding Agent simplifies the process of connecting and validating third-party security data. Using natural language, teams can identify the right connector, understand setup requirements, configure credentials, and create connections through a guided workflow.

The FBI and US Secret Service just dropped joint advisory JCSA 2026-1601 on FortiBleed—and there is no CVE to patch. Tova Dvorin and Adrian Culley walk the full chain: credential stuffing against internet-facing FortiGate SSL VPNs, legacy SHA-256 admin hashes cracked on rented GPUs, fake vendor-style admin accounts, and attackers deleting your accounts to lock you out of your own firewall. Plus the INC/Lynx ransomware link, what the 86,000 figure really means, and the question that matters: would a new admin on your edge device at 3am fire anything?

Every enterprise runs on identity — and machines and AI agents now outnumber people in many environments. This 2-minute overview covers why identity has become a board-level priority, and how One Identity governs every identity — human, machine, and AI agent — on one unified platform. Validated by Omdia: 150% ROI, go-live in as little as one day, zero-touch onboarding.

Same pricing, same tech, zero re-issuing required—just a cleaner name for how you access your doors. Whether you're unlocking via the Brivo app, Apple Wallet, Google Wallet, or partner integrations like HID, Brivo Mobile Key is now the all-in-one umbrella for seamless digital access.

Nearly 5 billion people rely on smartphones daily for coffee, payments, flight tickets, and navigation.

Adding a Brivo Mobile Key to your Apple or Google Wallet is as simple as adding an airline boarding pass.