Cy Khormaee

This is 🔥, Alex Hurtado. The sunburst visual just gave shape to what most detection engineers already feel: they're bending telemetry toward the paths of least resistance. Windows processes, auth logs, endpoint noise they can wrangle. It’s a tactical reality born from structural limits. But as teams start to scale behavioral detections across data lakes (shoutout Databricks Snowflake + Anvilogic), that center of gravity is going to shift. Not because the ATT&CK matrix changes, but because the architecture does. Let’s keep this convo going!

6

1 Comment

Checkmarx Redefines Application Security for the Age of Agentic Development The new platform embeds AI-driven security across code, dependencies, and runtime, enabling software delivery at machine speed PARAMUS, NJ – March 16, 2026 – Checkmarx, the leader in agentic application security, today unveiled a new Checkmarx One platform built for the new era in AI development. As AI accelerates software creation beyond human speed and scale, traditional application security models are fundamentally misaligned. The new platform embeds agentic, AI-driven security across code, open-source dependencies, AI assets, and runtime, enabling organizations to innovate at machine speed with security built in from the start. At the core of the reimagined Checkmarx One https://lnkd.in/gR3apxdV #msp #channelPartners #carriers #enterprise #Telecommunications #ai #messaging #mobility #ucaas #ccaas #cpaas #Mobility

1

2 lines of code to detect audio, video, and still image deep fakes, via a seamless, high-scale API 2 lines of code to save your business or government agency from disaster 👇

9

OpenAI just quietly unveiled an AI agent that finds source code vulnerabilities and prescribes patches. Let’s see how this impacts startups and bigger vendors doing the same. Or doesnt. 🤔

17

1 Comment

The two very cool things about the OpenID Foundation's CAEP interoperability event at the FIDO Alliance Authenticate conference last month were: - We tested interoperability with the final SSF and CAEP specs! - All participating companies had production implementations! Thanks to Google, IBM, Jamf, Okta, Omnissa, SailPoint, and of course my company, SGNL for your enthusiastic participation! Read the full blog post on the OpenID website here: https://lnkd.in/gqQndD5A

40

2 Comments

FedRAMP Moderate Equivalency tells you GovDash is built securely. In-app CUI tagging is how we make that security useful in your workflows. You mark something CUI once, and GovDash enforces it everywhere it touches: capture intel, resumes, past performance, proposal volumes, awards, contract files, partner docs. Update classifications anytime, keep the audit trail, keep moving fast. Compliance without killing velocity.

40

1 Comment

We’ve just released AI-powered chat integration inside CoPilot, designed specifically for teams running an open-source SIEM stack. This new feature enables direct natural language interaction with: Wazuh Velociraptor DFIR SOCFortress CoPilot itself You can now ask questions like: What are the most critical vulnerabilities on this endpoint? What integrations are deployed for Customer A? Run the Velociraptor artifact to show recent RDP activity. The AI agent interprets your request, queries the appropriate backend system, and responds with actionable data — all within the CoPilot UI. This release is built to support security teams leveraging fully open-source stacks without sacrificing usability or automation. https://lnkd.in/g_-xFp3z

180

4 Comments

Security stacks keep growing, yet data exfiltration remains one of the hardest problems to solve. The issue isn’t tooling. It’s shared data context. Most architectures were built around infrastructure - endpoints, networks, workloads. But risk follows data: where it lives, who can access it, and how it moves across cloud, SaaS, and AI systems. A data-first model connects four capabilities: ✔️ DSPM: discover and classify sensitive data ✔️ DAG: enforce least privilege ✔️ DLP: control data in motion and in use ✔️ DDR: detect abnormal data activity This isn’t DSPM vs DLP. They address different parts of the lifecycle. The opportunity is aligning them around a unified understanding of the data. When that foundation exists, prevention improves, noise drops, and response becomes precise. I shared a deeper look at how this architecture comes together here 👇 https://lnkd.in/d4KusXBZ

34

2 Comments

via Vulnerable U "A security researcher spent months trying to get Bluspark Global's attention about some pretty gnarly vulnerabilities in their shipping platform. Plaintext passwords, unauthenticated APIs that spilled customer data going back to 2007, and the ability to create admin accounts without any verification. The researcher tried emails, voicemails, LinkedIn messages - but Bluspark ghosted him completely. It wasn't until TechCrunch stepped in and literally included part of the CEO's password in an email that the company finally responded (through lawyers, naturally). This hits different because Bluspark isn't some random startup - they're powering freight shipments for major retailers and grocery stores worldwide. Researchers have been warning about hackers increasingly targeting logistics companies to redirect cargo shipments to criminals. The good news is everything's patched now, and Bluspark claims no evidence of exploitation. But the fact that it took including someone's actual password in an email to get a response? That's not exactly inspiring confidence in their security posture." https://lnkd.in/ep2YfR6Y

5

1 Comment