Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Over 300 million people rely on Microsoft Teams to get their work done every day. That’s a lot of messages, meetings and “you’re on mute” moments happening every day. Teams makes it easy to collaborate. Too easy, sometimes. Anyone can create a new channel, add users and start sharing files in minutes. That’s great for getting work done, but it’s also how things get out of control. If you manage Teams, you’ve probably seen this happen.

CVE-2026-10818 is an arbitrary file upload vulnerability in WPForms Pro, the paid edition of a widely deployed WordPress form builder plugin. It was published on July 25, 2026, with Wordfence as the assigning CNA. The flaw sits in the ajax_chunk_upload_finalize function, which handles the final step of a chunked file upload. File type validation runs after the chunk metadata and the file contents have already been written to disk, and the assembled file is not deleted when that validation fails.

AI is changing the speed and scale of cyber defense, and the speed and scale of the adversary. As AI becomes embedded across government, critical infrastructure, and enterprise environments, defenders need the ability to inspect, test, adapt, and secure the systems they depend on.

For the past couple of years, most of the industry’s attention has gone toward agents that respond to a single prompt. They ask a question, get an answer, and move on. Enterprises are now deploying long-horizon agents; autonomous systems that execute extended, multi-step tasks across hours or days, without a human checking in on every step. These agents plan, reason, and improvise their way toward a goal, and that changes what security has to protect against.

Debugging privacy-preserving protocols is hard. Oblivious HTTP has several different steps across four different parties, not to mention binary HTTP encoding and details spread across many draft RFCs. We've taken what we've learned operating protocols like Oblivious HTTP at the scale of millions of requests per second, and wrapped it up in a nice, clean CLI tool — that we are open-sourcing today. We call it our privacy-client, or pvcli.

Scenario-based cyber risk quantification (CRQ) calculates the financial impact of specific cyber incidents in real dollars, one modeled scenario at a time, rather than producing a single blended exposure number for the whole organization.