Update: Arctic Wolf Observes Threat Campaign Targeting BeyondTrust Remote Support Following CVE-2026-1731 PoC Availability

Since our previous security bulletin, Arctic Wolf has observed malicious activities in the wild tied to suspected exploitation of CVE-2026-1731 of self-hosted BeyondTrust Remote Support and Privileged Remote Access deployments. We are sharing threat intelligence related to this activity to help defenders protect against this campaign. CVE-2026-1731 allows unauthenticated remote threat actors to execute operating system commands in the context of the site user via specially crafted requests.

From Shadow APIs to Shadow AI: How the API Threat Model Is Expanding Faster Than Most Defenses

The shadow technology problem is getting worse. Over the past few years, organizations have scaled microservices, cloud-native apps, and partner integrations faster than corporate governance models could keep up, resulting in undocumented or shadow APIs. We’re now seeing this pattern all over again with AI systems. And, even worse, AI introduces non-deterministic behavior, autonomous actions, and machine-to-machine decision-making. Put simply, shadow AI is much, much riskier than shadow APIs.

Why Every Website Needs a Reliable URL Checker

Links are the connective tissue of the web. They guide users to content, help search engines understand structure and distribute authority across pages. When links fail, everything from user trust to search visibility can suffer. This is where a URL checker becomes essential. A URL checker is more than a quick "does this page load?" tool. At its most basic level, it confirms whether a URL resolves successfully. At a deeper level, it reveals status codes, redirect chains, DNS issues and server errors that aren't obvious from simply clicking a link.

Episode 8 - Enterprise Nervous System: Using Network Signal to Direct Business Strategy

In this episode of Corelight Defenders, I’m joined by Bernard Brantley, Chief Information Security Officer at Corelight, as we delve into the concept of the enterprise nervous system. Bernard shares insights from his extensive experience in network analysis, explaining how organizations can leverage their network traffic data to enhance security and drive business outcomes. We discuss the importance of understanding the interdependencies between assets, processes, and goals, and how security teams can position themselves as integral to business success rather than just risk mitigators.

Data Governance Policy: 9 Fundamental Components

In 2026, you’re not just managing clusters and pipelines; you are managing the risk associated with the data flowing through them. As environments become decentralized and agentic, traditional, static data governance policies have morphed from inefficient to a security liability. The financial stakes of data governance failures have reached an all-time high. The average cost of a data breach in the United States has reached $10.22 million.

CrowdStrike Named a Customers' Choice in 2026 Gartner Peer Insights Voice of the Customer for User Authentication

CrowdStrike has been named a Customers’ Choice in the 2026 Gartner Peer Insights “Voice of the Customer for User Authentication” report. For the second consecutive year, CrowdStrike has the highest volume of verified reviews and more 5-star ratings (129) than any other vendor in the report based on 179 overall responses in the 2026 report.

The AI SOC Org Chart for 2026 and Beyond

See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo John White is the Field CISO for EMEA at Torq. A respected security executive with more than 20 years of leadership experience, John previously served as CISO at Virgin Atlantic, where he led a multi-year transformation deploying the Torq AI SOC Platform to modernize cyber operations.

Five shifts that will shape your security team in 2026

The new year brings renewed energy, refreshed goals, and sharper priorities. But at the same time, clarity can be hard to find as AI changes how work gets done, expectations rise, and cyber risk grows. As 2026 begins, several major shifts are already shaping how security teams operate, collaborate, and find satisfaction in their work.