We sat down with @GigaOm Field CTO Chris Ray to talk agentic SOC use cases where AI handles the high-volume work and humans make the business-critical calls. Listen to the full conversation: lnkd.in/eePxmyfp
Download his 2026 GigaOm XDR Radar: lnkd.in/e_5FmkEA
Cynet retweeted
Cynet Security is now a CVE Numbering Authority assigning CVE IDs for Cynet Security products & services
cve.org/Media/News/item/news…
#cve #cna #vulnerability #vulnerabilitymanagement
#cybersecurity @CVEnew @Cynet_Security
We've been authorized by @CVEannounce as a #CVE Numbering Authority (#CNA), enabling us to assign and publish vulnerabilities in Cynet products and services.
Faster, more accurate disclosure from the source with the context defenders need to prioritize.
bit.ly/43GYCsf
On this week’s #MacMonday, we cover the weak link in your supply chain: #OAuth. Vercel shows how attackers use OAuth as a bridge.
#MSPs should:
- Audit OAuth
- Detect session anomalies
- Continuously validate vendors
- Protect API tokens
CyOps brief: bit.ly/4vlsYwg
Cynet is a Leader in 8 @G2dotcom Summer Reports for #XDR, #EDR, #MDR, UEBA, SIEM, Incident Response, System Security, and Cloud Security.
Read our reviews with top marks in usability, relationships, and results: g2.com/products/cynet/review…
Relaunched our newsletter in February with our favorite influencers: Cynet's CyOps MDR team.
"Stories from the SOC" is now nearly 10K strong — a ride-along as CyOps investigates adversary tactics & extends partner teams.
Add it to your monthly reads 👇
lnkd.in/eiMTtnAj
Congrats to our EMEA teams on achieving Cyber Essentials Plus and CCN-STIC Qualification. This milestone allows public sector and regulated organizations in the UK and Spain to leverage our unified, AI-powered cybersecurity platform. 🇬🇧 🇪🇸
Read more: bit.ly/49wRoe3
ShinyHunters stole the show (among other things) in April, but that's not all we're watching. This month's Last Call webinar covers:
- ShinyHunters ADT and Canvas hacks
- Vercel breach and Shadow AI
- Mini Shai-Hulud worm
- Krybit vs 0APT
Register here: cynet.com/resources/last-cal…
Recent coverage of our day-zero response playbook on @CRN. #MSPs are using AI to identify suspicious activity based on behavior. The mandate isn't "patch faster," but "kill the technique" even before its tied to a specific CVE: bit.ly/4ukiJIq
We're entering a world where AI can autonomously discover (and even chain together) thousands of vulnerabilities at scale, including zero-days that have gone undetected for decades. How we detect which ones matter on this week's #MacMonday and our blog: bit.ly/4wALv9d
🪱 A mini Shai-Hulud worm is compromising hundreds of npm and PyPi packages. AI-powered development can inadvertently accelerate the spread, as AI coding agents and build systems may install or update packages before humans review.
Read the CyOps report: bit.ly/4wn7yjI
💰 Instructure reached a ransom deal in the Canvas hack.
Attackers target trusted apps schools use every day. CyOps recently dissected a similar breach at Striv, a streaming platform that many high schools use to broadcast sporting events. Read the brief: bit.ly/4tvOdtU
Let's talk about defending Defender. 🛡️
From a disgruntled researcher who leaked Defender zero-days that chain together legitimate functionality, to dueling ransomware groups, this month's newsletter shows the fight is happening on home turf.
Subscribe: bit.ly/4uLwaRJ
🚨 Attacks are multi-actor, not just multi-vector.
CyOps is seeing initial access change hands before encryption. Dormancy between initial access and ransomware. The TeamPCP-Vect partnership. MacKenzie Brown takes you inside "initial access brokerage" on this week's #MacMonday.
⚠️ Inbox rule abuse is on the rise.
This is a post-compromise technique where attackers control the flow of where mail is going, send wire transfers, intercept links, and move laterally into connected applications like OneDrive and SharePoint.
Inbox abuse 101 on #MacMonday.
We dropped new products partners have been waiting for.
Fight AI with AI
Automate identity security
Discover unmanaged devices
Integrate with new PSA/RMMs
Cynet's April release is here.
See what's new: bit.ly/422yzv5
⚠️ Emerging threat: CVE-2026-32202 preserves a zero-click credential theft vector even after Microsoft's February patch. Patch now, then harden NTLM policies and restrict outbound SMB traffic.
🔗 Full CyOps investigation → bit.ly/42apXCy
#Cybersecurity #InfoSec #CVE
We've added 1,500+ active readers since launching our "Stories from the SOC" newsletter Feb 17, 2026. 📈 A monthly ride-along with our CyOps team hunting the latest attacks, with advice for partners & customers.
Not subscribed yet? 👉 bit.ly/4rV03gY
📸 ClickFix variant
Fighting AI with AI requires a feedback loop. ♾️
New CyAI capabilities learn from automated and analyst input to continually improve detection and response:
- CyOps Recommendations
- GenAI Console Explanations
- CyAI Support Agent
Our April release: bit.ly/4sWhqhr
An interesting trend CyOps seeing is dormancy after initial access while attackers sell that access to the highest bidder.
MacKenzie Brown covers why we're likely to see more alliances and partnerships like this and TeamPCP and Vect Ransomware on this week's #MacMinute.






















