Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

This week on the podcast, we take a look at the impact of the US National Institute of Standards and Technology (NIST) backing away from their previous role of enriching vulnerability CVE records. Before that, we discuss Huntress's insider threat drama before ending with an AI-assisted vulnerability discovery in the Front Gate Tickets platform.

This week’s briefing covers: Dive deeper.

Automatically enrich CrowdStrike endpoint detections with VirusTotal and create fully enriched alerts in TheHive. When a new endpoint detection fires in CrowdStrike, this Tines story instantly creates a structured alert in TheHive and kicks off three parallel enrichment paths; checking every IP, file hash, and URL against VirusTotal. By the time your analyst opens the alert, the context is already there.

Discover everything new in June 2026 update of Acronis Cyber Protect Cloud! In this release overview, we cover the latest innovations designed to help MSPs improve security, simplify operations, and deliver better protection for customers.

Explore how Acronis Cyber Protect Cloud transforms IT management with AI-assisted scripting and remote remediation. This video demonstrates unified backup, security, and endpoint management, empowering IT professionals and MSPs to automate tasks, respond rapidly to incidents, and manage endpoints securely from a single console.

What happens when Keeper Security, a production company and Atlassian Williams F1 Team driver Alex Albon enter a studio? Watch to find out.

AI agents are creating a new penetration testing risk when they act beyond the tester’s intent and leave messy accountability behind. Once an agent touches email, tickets or workflows in a user’s name, legal, forensic and control problems start stacking up fast.

The FBI just issued a FLASH alert on TeamPCP — the group behind a wave of software supply chain attacks that compromised widely-used developer and security tools, harvesting cloud credentials, SSH keys, and Kubernetes secrets at scale. Tova Dvorin and Adrian Culley break down how TeamPCP operates with an APT's patience, and the open question the FBI alert doesn't answer: is a nation-state pulling the strings? Full breakdown on The Cyber Resilience Brief.

A criminal crew with APT-grade patience is trojanizing the very tools defenders trust. Host Tova Dvorin sits down with Adrian Culley to break down FBI FLASH-20260702-01 (coordinated with CISA) on TeamPCP — the group compromising Trivy, KICS, LiteLLM, and the Telnyx SDK to sit inside CI/CD pipelines. Inside: the CanisterWorm and SANDCLOCK credential stealers, the self-replicating "Mini Shai-Hulud" worm across npm and PyPI, npm account takeovers via expired recovery domains, and five concrete defenses — starting with searching your GitHub org for "tpcp-docs" right now.

Human in the loop AI security is failing because analysts are asked to review machine-speed output at human speed. AI now produces too many alerts, findings and decisions for manual review to remain the main safety control in modern cyber defence.