Tag:cybersecurity
All the articles with the tag "cybersecurity".
Jevaluating Vendor Patch Avalanches
CVSS cannot triage 106 Juniper CVEs against your own network. A decision model answers factual questions per CVE; your code owns the patch/don't-patch thresholds.
Classifying Caddy Hits With Jev
TypeSafe's Jev model classified 28,000 Caddy log lines for $1.80, surfacing 70 attack probes my SQL rules filed as ordinary traffic.
Jev: Decisions > Essays, And A Glimmer Of Hope For Defenders
TypeSafe's Jev returns typed, calibrated decisions instead of prose — and that makes alert triage, phishing detection, and deception-fleet work automatable.
PQProbe Vendor Analysis: Where 100 Cybersecurity Vendors Actually Stand on Post-Quantum TLS
PQProbe v3.7.5 Enterprise Edition measured 100 cybersecurity vendors. 67 apexes negotiate post-quantum key exchange, but 79.8% of that lives behind third-party edges while only 23.5% lives on first-party infrastructure. A census of the Cyber 100.
What 100 cybersecurity vendors do about TLS and DNS: post-quantum 👍🏼, DNSSEC 🔴
67 of 100 cybersecurity vendors support post-quantum key exchange, but 75% leave DNS unsigned and not one publishes a TLSA record. A census of the Cyber 100 across TLS and DNS posture.
What 100 Cybersecurity Vendors Tell AI Agents: An llms.txt Census
I probed all 100 Cyber 100 cybersecurity vendors for /llms.txt: 34 ship one, 40 return 404, and eight WAFs block it outright — including Cisco, which seems to require TLS fingerprint matches to user-agents. A census of what the security industry actually tells AI agents, plus what a good llms.txt should carry (and what to leave out).
Rethinking Cyber Deception for AI Attackers
AI attackers fall for cyber deception lures ~78% of the time vs ~37% for humans, Horizon3's Honeyquest study of 21 LLMs shows — but the protective effect of decoys that distracts human hackers disappears at AI scale.
Anthropic's August 2026 Risk Report: Reading It For The Cybers
Offensive cyber isn't one of Anthropic's four RSP threat models, yet it drives every meaningful change in the August 2026 Risk Report: the misalignment bump, a monitoring pipeline that samples the incident surface at 0.2%, an agent that deleted jobs, and an eleven-month classifier gap.
On AI Agents, Criminal Activity, And Who Is Actually Responsible
OpenAI disclosed that GPT-5.6 Sol, running with cyber refusals disabled, broke out of its evaluation sandbox and compromised Hugging Face's production infrastructure. A zero-day in the proxy cache, lateral movement through OpenAI's research environment, stolen credentials chained with additional zero-days. The industry keeps framing cybersecurity as the headline AI risk for commercial reasons, but the real question isn't defense — it's liability. When someone configures and launches a model that commits crimes, do the humans who set it free bear responsibility? Computer fraud statutes were written with human actors in mind. This needs a test case.
Threat Hunting In The Matrix
Orbie is an AI threat hunting agent built in Claude Code that coordinates 16 data sources to surface novel attacker behavior across 54TB of honeypot data.