PHP Critical Remote Code Execution PHP2Shell (CVE-2026-109618, CVE-2026-109619, CVSS 9.2) Overview Two critical RCE vulnerabilities in PHP (CVSS v4.0 9.2) […]
The post Weekly Threat Landscape Digest – Week 43 appeared first on HawkEye.
A pair of critical vulnerabilities in PHP has moved from advance warning to an active patching priority within roughly 24 […]
The post HawkEye Advisory: PHP2Shell Critical PHP Remote Code Execution Flaws CVE-2026-109618 and CVE-2026-109619 appeared first on HawkEye.
Every vendor in the category now has a version of the sentence “SOAR is dead.” It is a good headline […]
The post SOAR vs Agentic SOC: Where a Playbook Breaks on a Real Alert appeared first on HawkEye.
PAN-OS Authenticated RCE via Management Interface (CVE-2026-0322, CVSS 8.6) Overview High-severity RCE (CWE-94) in PAN-OS management interface; allows authenticated attackers […]
The post Weekly Threat Landscape Digest – Week 42 appeared first on HawkEye.
The loudest claim in the agentic SOC market right now is a percentage. It measures how much of Tier-1 the […]
The post Governed Autonomy: Where the Human Approval Gate Belongs in an Agentic SOC appeared first on HawkEye.
Argo CD Critical Command Execution and Access Bypass (CVE-2026-77459, CVSS 9.9) Overview Four critical CVSS 9.9 vulnerabilities in Argo CD’s […]
The post Weekly Threat Landscape Digest – Week 41 appeared first on HawkEye.
Anthropic disrupted threat actors misusing its Claude models between December 2025 and August 2026, and published the case studies in […]
The post How Attackers Are Using AI in 2026: Lessons From Anthropic’s Threat Report appeared first on HawkEye.
Dell Terraform Provider TLS Certificate Validation Bypass (CVE-2026-91881, CVSS 9.0) Overview Four vulnerabilities in Dell Terraform providers for server infrastructure […]
The post Weekly Threat Landscape Digest – Week 40 appeared first on HawkEye.
Large language models are good at explaining, summarizing and generating text. Security operations often need something different: make a bounded […]
The post Jev:TypeSafe’s New Decision Model, and What It Means for Cyber Defense appeared first on HawkEye.
Saudi security teams are being asked to use AI without giving up control of the data their SOC depends on. […]
The post Sovereign AI SOC in Saudi Arabia: How HawkEye Supports Air-Gapped and High-Security Operations appeared first on HawkEye.
Actively Exploited Check Point Security Management Directory Traversal & File Upload (CVE-2026-93616, CVSS 9.8) Overview Critical pre-authentication directory traversal and […]
The post Weekly Threat Landscape Digest – Week 39 appeared first on HawkEye.
ISC2’s 2025 Cybersecurity Workforce Study, based on responses from more than 16,000 practitioners worldwide, found that 59 percent of organizations […]
The post What Is an AI SOC? A Technical Anatomy of Detection, Triage, and Response appeared first on HawkEye.
Critical Unauthenticated RCE in Check Point Security Management (CVE-2026-91843) Overview Critical stack overflow (CVSS 9.8) in the unauthenticated login process […]
The post Weekly Threat Landscape Digest – Week 38 appeared first on HawkEye.
The AI SOC market got crowded fast. Ask five vendors what makes their platform agentic or AI-powered and you’ll get […]
The post HawkEye AI Is Listed on SecOps Unpacked’s AI SOC Capability Map, Here’s What Backs It Up appeared first on HawkEye.
Cisco UCS UEFI Secure Boot Bypass Vulnerability (CVE-2026-20293) Overview High-severity vulnerability (CVSS 7.1, CWE-749) in the UEFI Shell implementation on […]
The post Weekly Threat Landscape Digest – Week 37 appeared first on HawkEye.
Nearly 9 in 10 incidents investigated by Unit 42 in 2025 involved an identity weakness, and 65% of initial access […]
The post Identity Based Cyberattacks in the GCC: What the 2026 Data Says to Fix First appeared first on HawkEye.
Multiple Vulnerabilities in Cisco Nexus 9000, IOS XR, and SIP Phones Overview Critical issues include remote code execution, unauthorized access, […]
The post Weekly Threat Landscape Digest – Week 36 appeared first on HawkEye.
Multiple Vulnerabilities in OpenSSL Overview Multiple vulnerabilities in QUIC, CMS, CMP, DTLS, RPK, and cryptographic functions addressed in this update. […]
The post Weekly Threat Landscape Digest – Week 35 appeared first on HawkEye.
known malware, suspicious hashes, and obvious command execution. They are looking for weak signals across identity, cloud, endpoint, SaaS, network, […]
The post AI Threat Hunting: Finding What Detection Tools Already Missed appeared first on HawkEye.
Multiple Vulnerabilities in NVIDIA Triton Inference Server Overview CVE-2026-47627 (CVSS 9.8): Critical path traversal vulnerability allowing unauthenticated denial of service. […]
The post Weekly Threat Landscape Digest – Week 34 appeared first on HawkEye.