On 21 October 2026 the Node.js project published security releases for every supported line, fixing ten issues. The one that […]
The post Node.js Brotli RCE: You Can Be Exposed by the Requests You Send appeared first on HawkEye.
On 5 November 2026, OpenSSH released Portable OpenSSH 10.6p2 to fix CVE-2026-123158, an authentication bypass nicknamed sshole by its finder, […]
The post sshole: The OpenSSH Bug That Logs You In to Accounts With No Password appeared first on HawkEye.
Citrix XenServer and Unicon eLux Scout Critical Vulnerabilities Including Actively Exploited Brotli Buffer Overflow (CVE-2026-111497) Overview Cloud Software Group released […]
The post Weekly Threat Landscape Digest – Week 45 appeared first on HawkEye.
Public model leaderboards measure general reasoning on public benchmarks. None of them measure whether a model reaches the right verdict […]
The post Choosing the Reasoning Model for Your AI SOC appeared first on HawkEye.
SIEM taught security teams to budget by ingest volume. SOAR taught them to budget by seat and connector. An AI […]
The post What an AI SOC Investigation Costs, and How to Keep It Predictable appeared first on HawkEye.
WordPress Core 22 Vulnerabilities Including RCE Race Condition – Update to 7.1.4 Overview WordPress 7.1.4 addresses 22 security vulnerabilities in […]
The post Weekly Threat Landscape Digest – Week 44 appeared first on HawkEye.
PHP Critical Remote Code Execution PHP2Shell (CVE-2026-109618, CVE-2026-109619, CVSS 9.2) Overview Two critical RCE vulnerabilities in PHP (CVSS v4.0 9.2) […]
The post Weekly Threat Landscape Digest – Week 43 appeared first on HawkEye.
A pair of critical vulnerabilities in PHP has moved from advance warning to an active patching priority within roughly 24 […]
The post HawkEye Advisory: PHP2Shell Critical PHP Remote Code Execution Flaws CVE-2026-109618 and CVE-2026-109619 appeared first on HawkEye.
Every vendor in the category now has a version of the sentence “SOAR is dead.” It is a good headline […]
The post SOAR vs Agentic SOC: Where a Playbook Breaks on a Real Alert appeared first on HawkEye.
PAN-OS Authenticated RCE via Management Interface (CVE-2026-0322, CVSS 8.6) Overview High-severity RCE (CWE-94) in PAN-OS management interface; allows authenticated attackers […]
The post Weekly Threat Landscape Digest – Week 42 appeared first on HawkEye.
The loudest claim in the agentic SOC market right now is a percentage. It measures how much of Tier-1 the […]
The post Governed Autonomy: Where the Human Approval Gate Belongs in an Agentic SOC appeared first on HawkEye.
Argo CD Critical Command Execution and Access Bypass (CVE-2026-77459, CVSS 9.9) Overview Four critical CVSS 9.9 vulnerabilities in Argo CD’s […]
The post Weekly Threat Landscape Digest – Week 41 appeared first on HawkEye.
Anthropic disrupted threat actors misusing its Claude models between December 2025 and August 2026, and published the case studies in […]
The post How Attackers Are Using AI in 2026: Lessons From Anthropic’s Threat Report appeared first on HawkEye.
Dell Terraform Provider TLS Certificate Validation Bypass (CVE-2026-91881, CVSS 9.0) Overview Four vulnerabilities in Dell Terraform providers for server infrastructure […]
The post Weekly Threat Landscape Digest – Week 40 appeared first on HawkEye.
Large language models are good at explaining, summarizing and generating text. Security operations often need something different: make a bounded […]
The post Jev:TypeSafe’s New Decision Model, and What It Means for Cyber Defense appeared first on HawkEye.
Saudi security teams are being asked to use AI without giving up control of the data their SOC depends on. […]
The post Sovereign AI SOC in Saudi Arabia: How HawkEye Supports Air-Gapped and High-Security Operations appeared first on HawkEye.
Actively Exploited Check Point Security Management Directory Traversal & File Upload (CVE-2026-93616, CVSS 9.8) Overview Critical pre-authentication directory traversal and […]
The post Weekly Threat Landscape Digest – Week 39 appeared first on HawkEye.
ISC2’s 2025 Cybersecurity Workforce Study, based on responses from more than 16,000 practitioners worldwide, found that 59 percent of organizations […]
The post What Is an AI SOC? A Technical Anatomy of Detection, Triage, and Response appeared first on HawkEye.
Critical Unauthenticated RCE in Check Point Security Management (CVE-2026-91843) Overview Critical stack overflow (CVSS 9.8) in the unauthenticated login process […]
The post Weekly Threat Landscape Digest – Week 38 appeared first on HawkEye.
The AI SOC market got crowded fast. Ask five vendors what makes their platform agentic or AI-powered and you’ll get […]
The post HawkEye AI Is Listed on SecOps Unpacked’s AI SOC Capability Map, Here’s What Backs It Up appeared first on HawkEye.