Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Sponsored Post

Endpoint Central through the AV-Comparatives lens

Getting certified by AV-Comparatives is not straightforward. The organisation runs one of the most thorough independent endpoint security evaluations available. Vendors must comply with comprehensive security software evaluations to receive unbiased feedback regarding their products and feature updates.

Corelight in the Black Hat USA NOC: A playlist of attendee mistakes

When I got back from Black Hat USA, I was stunned. Of course, it’s easy to be overwhelmed by Black Hat. There is so much going on. Las Vegas casinos are loud and flashy. Going outdoors feels like standing on the surface of the sun. Everywhere you walk there are strong smells, and you hope it’s a delicious meal, but sometimes it’s not.

Hunting Citrix NetScaler zero-days with Corelight: Part 2

In Hunting Citrix NetScaler zero-days with Corelight, we explored how network evidence from Corelight’s Open Network Detection and Response (NDR) Platform can help identify candidate NetScaler appliances, observe DTLS use and hunt for suspicious activity.

Securonix Introduces Advanced Behavioral Analytics to Detect Human and AI-Driven Threats

New solution uses behavioural intelligence and governed Agentic AI to uncover human and AI-driven threats while keeping analysts in control, backed by new ISO/IEC 42001:2023 certification for responsible AI management.

Episode 25 - Zeek at 30: Vern Paxson on Origins and Enduring Logs (Part 1)

Richard Bejtlich sits down with Vern Paxson, Corelight co-founder and Chief Scientist, to explore Zeek's 30-year journey from a Berkeley Lab research project to a data-rich backbone of modern NDR. They unpack how Zeek evolved from early TCP health measurements into a flexible, scriptable network analysis platform, the value of neutral, long-term logs over real-time alerts, comparisons to intrusion-detection approaches like Snort, and the challenges and opportunities of visibility in enterprise gear.

Understanding Asymmetric Routing Risks in Modern Firewall Deployments

In modern network environments, maintaining both operational efficiency and strong security controls requires careful design and planning. One of the more common challenges Sophos Professional Services encounters, especially during firewall upgrades or redesigns, is asymmetric routing.

Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation

On October 4, 2026, Citrix disclosed a high-severity (CVSS score of 8.7) memory overflow vulnerability (CVE-2026-88779) affecting Citrix NetScaler ADC and Citrix NetScaler Gateway deployments that are configured as either a SAML Service Provider (SP) or SAML Identity Provider (IdP). Successful exploitation can cause a denial of service (DoS) condition, potentially disrupting authentication services and remote access functionality.

Sophos Named a Leader in the IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises 2026

Sophos has been named a Leader in the IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises 2026, recognizing the strength of our prevention-first approach and stopping AI-era threats as early as possible. Attackers using frontier AI models can now find vulnerabilities and generate exploits faster than organizations can patch them. And when malicious code is already running before an alert fires, detection alone is too late.

Sophos Launches CISO Advantage, Bringing CISO-Level Security Strategy Within Reach of Every Organization

Delivered through Sophos Fusion, Sophos CISO Advantage uses agentic AI with human judgement to give every organization, with or without a CISO, a security program it can measure, fund, and prove.