Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cybersecurity Awareness Month: Securing the Next 250 with Cyber Threat Hunting

October has made a strong case for this year’s Cybersecurity Awareness Month (opens in a new tab) theme, “Securing the Next 250,” chosen in honor of the U.S.’s 250th anniversary. The initiative, started by the Cybersecurity and Infrastructure Security Agency (CISA) and the National Cybersecurity Alliance (NCA), occurs annually in October to raise awareness about online safety and empower individuals and businesses to protect themselves from cybercrime.

Handling PHP2Shell with Tanium Atlas: Tanium Tech Talks #175

PHP2Shell is here. See how Tanium finds PHP across your environment, scopes your exposure, and maps attack paths so you know what to patch first. In this special edition, we walk through how Tanium gives you visibility into the new PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and the resources available to help you respond.

eMudhra CA Compromise: Find and Fix Your Exposure with Tanium

On October 17, 2026, a researcher reported that eight intermediate certificate authorities (CAs) run by eMudhra have private keys that anyone can calculate from the public certificates. Six of the CAs are for TLS (website) certificates and two are for code signing. Sectigo cross-signed the same eight keys, so 16 certificates are affected in total With these keys, anyone can issue a certificate for any website, or sign software, and it chains to root CAs that many systems trust.

HTTP2Shell: Find and Fix Vulnerable Brotli Copies with Tanium

If you run Node.js, update to 26.12.1, 24.22.1 or 22.23.4 now. If you run Python, upgrade the Brotli package to 1.2.1 and brotlicffi to 1.2.1.0. If you run Bun, move to 1.4.4. All three carry a fix for CVE-2026-111497, an out-of-bounds write in Google's Brotli decoder that can let a remote, unauthenticated attacker crash a process, read its memory or potentially run code by sending it crafted compressed data. Google's CVE record scores it 9.2 under CVSS v4.0.

Tanium Certified Operator: 2026 Refresh: Tanium Tech Talks #174

The refreshed Tanium Certified Operator (TCO) exam swaps simulations for concept-based Q&A. See what changed, what didn’t, and how to prep. The TCO is the foundational Tanium exam: testing whether you understand the basics of interacting in Tanium. This episode covers what changed in the latest cert refresh, what stayed the same, which version to take, and how to prepare.

Patching at the Speed of Mythos

Can you move faster without risking downtime? Mythos is putting pressure on IT teams to patch in days, not weeks. But September's Patch Tuesday was a reminder that speed comes with its own risk: what happens when the patch you need to deploy quickly is the thing that causes an outage? In this session, we'll unpack what September taught us about faster patch cycles and look at how teams can shorten remediation timelines without giving up the testing and control that keep production running.

AI Compute Just Became an Endpoint Problem

For the last three years, enterprise AI happened somewhere else. Models trained in someone’s cloud, inference ran behind an API, and the endpoint stayed where it had always been: on a laptop that opened a browser. With local AI computing platforms like NVIDIA DGX Spark (opens in a new tab), RTX Spark (opens in a new tab), and DGX Station (opens in a new tab), that framework is ending.