AKS clusters get probed 18 minutes after creation, EKS at 28. That kills the "weekly scan" mindset and forces eBPF into the runtime critical path.
A researcher's ShieldBreak PoC claims 100% success bypassing Microsoft's patch for CVE-2026-50656 in Defender, spawning SYSTEM shells on Windows 11 25H2 and Server 2025.
A CVSS 10 zero-day in Metabase let unauthenticated attackers walk in as admin, hit Metabase Cloud, and burned Framework's customer database. Here's the anatomy.
Unit 42's NOVA system found 14,090 vulnerabilities across 3,915 OSS projects in two months. 99.4% previously unreported. The patch economics just broke.
Sysdig's Secure AI is now GA, promising 10x more investigations at 88% lower cost. The pitch lands as AI-run ransomware moves from theory to documented incident.
Okta's report on Work Panel reveals a three-role vishing platform with self-destruct DNS, cloning Okta, Microsoft 365, and Salesforce logins at scale.
Aryon Security's ShutterGap research shows 20% of public RDS snapshots vanish within two minutes. Daily CSPM scans can't see what disappears in 120 seconds.