Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Corelight

Hunting Citrix NetScaler Zero-Days with Corelight

Sep 28, 2026 By Ben Reardon In Corelight
Citrix’s security bulletin CTX697096, the NetScaler security blog, and WatchTowr’s vulnerability FAQ describe an urgent situation for organizations using NetScaler ADC and NetScaler Gateway. Two vulnerabilities (CVE-2026-88771 and CVE-2026-88772) are known to be exploited. CISA confirms active exploitation globally and has added both to its Known Exploited Vulnerabilities catalog.
Read Post
Corelight

Canada Raises the Bar for Critical Infrastructure Cybersecurity. Is Your Network Ready?

Sep 25, 2026 By Eliane Guindon In Corelight
Canada has taken a significant step toward strengthening national cyber resilience. With Royal Assent now granted to Bill C-8, the Government of Canada is establishing a new framework for protecting critical cyber systems and securing the country's most essential services.
Read Post
Corelight

Investigate your network in plain English: introducing Natural Language Query

Sep 25, 2026 By Adam Pumphrey In Corelight
Every SOC analyst has been there. An alert fires. You know what you need to find. Maybe it's all outbound connections from a specific host that spiked overnight. Maybe it's every DNS query over 100 characters from a subnet you're watching. You know the question. What you don't know is the exact query syntax you need to ask it. So you open the documentation. You search for field names. You try a query, get it wrong, adjust, and try again. Minutes pass.
Read Post
Corelight

Post-Quantum Cryptography: The upgrade nobody asked for (but everyone's getting)

Sep 25, 2026 By Josh Porto In Corelight
Post-Quantum Cryptography (PQC) is the security equivalent of showing up at the airport and discovering TSA changed the rules overnight again: Laptops out, laptops in, shoes off, shoes on, and declare your shampoo like it’s contraband uranium. You can argue with the signage, but the plane is still leaving, and compliance is not optional. The good news is you don’t need a physics degree, a quantum computer, or a wellness crystal to deal with it.
Read Post
Corelight

The water system attacks were simple. Securing OT isn't.

Sep 24, 2026 By Paul Mathis In Corelight
Recent cyberattacks against U.S. water and wastewater systems have put some familiar operational technology (OT) security problems back in the headlines. Federal agencies have warned about malicious actors targeting internet-facing programmable logic controllers (PLCs), changing device configurations, and disrupting operations at utilities across multiple states.
Read Post

Episode 24 - Speaking Security So Leaders, Boards, and Buyers Actually Listen

Sep 24, 2026 By Corelight In Corelight
In this episode, Richard Bejtlich talks with Julie Parrish, CMO at Corelight, about how security professionals can communicate more effectively with CISOs, boards, and buyers who each measure success differently. Julie explains why practitioners should frame requests in terms of risk instead of raw technology, why CISOs need to connect security investments to reputation, compliance, and business continuity, and why marketers lose credibility when they lean on buzzwords, analogies, or FUD instead of clarity and education.
View Video
Corelight

Recognizing and detecting data exfiltration

Sep 18, 2026 By Tim Chiu In Corelight
Every breach that lands a CISO in front of the board has a common final act: Data leaving the building. Attackers don't get paid for breaking in. They get paid for what they take out. And by the time stolen data appears on an extortion site or in a regulator's inbox, the window to stop the damage has already closed. That is what makes exfiltration so dangerous. It rarely looks like an emergency.
Read Post

Corelight Agent Builder Library: AI Investigation Demo

Sep 18, 2026 By Corelight In Corelight
What happens when you ask a generic SIEM AI assistant and a Corelight-powered threat hunter agent the exact same question about a suspicious IP? The difference is not the model. It is the investigation expertise. In this demo, we walk through a side-by-side comparison using Elastic's agent builder. A default AI assistant returns a surface-level summary. An agent built with the Corelight Agent Builder Library identifies lateral movement, flags potential ransomware and data exfiltration, surfaces IDS alerts, maps involved hosts, and recommends next steps.
View Video
Corelight

From shadow AI visibility to AI threat detection

Sep 17, 2026 By Tim Chiu In Corelight
AI adoption is outpacing enterprise control. The 2026 Verizon DBIR found that 45% of employees regularly use AI on corporate devices, and 67% of those users access AI through non-corporate accounts. Cyberhaven Labs reports that 39.7% of data sent to AI tools is sensitive, while endpoint AI app adoption grew 509% year over year.
Read Post
Corelight

Corelight Sensor v29.2: Visibility into multi-stage intrusions, Shadow AI governance, and self-managing sensors

Sep 16, 2026 By Cynthia Gonzalez In Corelight
With Corelight Sensor v29.2, generally available September 16, 2026, your team gains the ability to behaviorally detect and disrupt multi-stage intrusions, govern AI usage across your network without decryption, and deploy sensors in minutes instead of hours. This post covers what’s new and how it accelerates your security operations.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.