security

This week's verified threat intel digest: agentic AI tool abuse in real campaigns, actively exploited autumn 2026 CVEs, and infostealer tradecraft blue teams must action now.

A hands-on deep dive into non-human identity for agentic AI: why service accounts carry the real risk, and how token scoping and least privilege keep autonomous agents in check.

Hands-on lab guide to MCP server attacks: exploit tool shadowing, rug pulls, and confused deputy patterns step-by-step with real commands and blue-team…

A hands-on deep dive into OSINT & recon: how attackers chain certificate logs, DNS records, and social profiles into an intrusion plan—and how defenders detect each step.

Hands-on tutorial: install and tune SpiderFoot and Recon-ng, filter OSINT noise, and turn raw recon findings into a clean, actionable report. Commands and configs included.

Hands-on tutorial: map an attack surface using Shodan, Amass and theHarvester. Real commands, passive and active recon workflow for a lab domain.

Learn to build a low-noise deception layer with Canarytokens and OpenCanary. Hands-on configs for AWS, internal networks, and identity canaries with tuned…

This week's threat intel digest: agentic AI tool abuse by attackers, the Autumn 2026 CVE exploitation surge, and infostealer trends — with defender actions for blue teams.

Build a hands-on Sigma + Velociraptor detection lab in one afternoon: wire Sigma rules into Velociraptor hunts and validate detections against real…