The Watch
Breaches, disclosure, and the vendors selling the fix — what actually changed for defenders today.
A ThreatMark benchmark reports behavioral intelligence rated effective by 83% of respondents and deployed by 18%. The gap, not the technology, is the story.
Reality
The macOS feature is off by default, and Business and Enterprise tenants need administrator approval first. That approval is the entire policy decision, and it happens once.
Reality
Bill Swearingen ran roughly 31 million tests to produce printable patterns that make detectors ignore what they cover. His best validated result is 61.7 percent non-detection, in simulation.
Reality
The stated impact is arbitrary code execution from merely processing a malicious image. Treat this class of fix as a standing patch cycle, not a news event.
Reality
Recorded Future logged three CopyCop impersonations against the US-Armenian Firebird AI data center in a 20-day window, the last of them fabricating an Iranian military case for hitting it.
Reality
Two years of SIEM ingestion cuts left the data layer that agentic detection will run on, and 24% of security leaders now rank visibility above staffing as their top barrier.
Reality
Rangers are objecting to plate readers at Yosemite and elsewhere, and an internal Park Service letter describes Verkada cameras filling the license plate gap where Flock is absent.
Reality
Wiz says rogue device registrations are drifting toward benign names, while nearly one in seven Entra tenants saw such an attack in 90 days. Naming strings were never the signal.
Reality
CVE-2026-59086 yields code execution in Simcenter Femap and Nastran below V2606. The fix already exists; the engineering workstations that need it rarely sit inside the monthly cycle.
Reality
Nine agencies across four countries refreshed the #StopRansomware Akira advisory on Nov. 13 with indicators current to November 2025 and a three-item action list.
Reality
TheHatman's claimed Entra haul and the FortiBleed spraying wave share one detectable seam: a successful authentication landing just behind a spike of failures.
Reality
Anthropic's model reasons its way to new bugs instead of matching known CVEs, and one vendor-sourced breakdown puts comparable capability in wider hands inside six to 24 months.
Reality
Picus says its 338-million-simulation dataset shows prevention recovering. The same dataset shows one credential-dumping tool blocked 94% of the time by one route and 3% by another.
Reality
Dream Security recovered a 160-megabyte workspace from a framework built on open-source agents. Taiwan's Ministry of Digital Affairs has confirmed AI-assisted attacks on government systems in July.
Reality
Recorded Future says one PurpleDelta cluster applied at more than 1,100 companies and was likely employed at ten or more. The control point is the recruiting funnel, not the SOC.
Reality
Coveware says four bytes of the per-file public key get overwritten on the stack, so no private key exists for anything Nitrogen encrypted on ESXi. Not even the attacker can undo it.
Reality
Reco says one Contabo-hosted server has been pulling records from misconfigured Salesforce and ServiceNow guest portals for over a year. The indicator is a static IP and a default Go user agent.
Reality
Self-propagating payloads did move between agents through editable soul files, but one inoculation paragraph held against 150-plus optimized strains, and nothing propagated in the wild.
Reality
Fortinet says the price was immaterial to its business. For teams budgeting a standalone AI red-teaming and guardrails tool, that is the number that matters.
Reality
The open-source demo treats the model as untrusted and pushes controls outward: signed database writes, a gVisor sandbox with no network, and a deterministic gateway in front.
Reality
Black Kite's read of 13,336 disclosed incidents puts 73% of victims in the mid-market, a share that held while volume rose 44%. The upper band is the only one shrinking.
Reality
A benchmark called CIMemories reports frontier models pushing sensitive attributes into tasks that do not need them, with GPT-5 violations climbing from 0.1% at one task to 9.6% across 40.
Reality
An expert witness for 3M told ChatGPT to show the company was "0% at fault" in a fatal Houston explosion. Opposing counsel obtained the full conversation log mid-deposition.
Reality
A Tenable walkthrough of the Azure ransomware crew makes one operational point worth keeping: the alert that matters fires in the control plane, before anything is encrypted.
Reality
The 2026 GenAI LLM Top 10 leaves the first two entries untouched and promotes Excessive Agency three places. The list increasingly reads as guidance for containing damage rather than preventing it.
Reality
Zscaler says a Rust backdoor tied to ransomware activity moved its command channel onto GitHub. The first version beaconed once a second to a bare HTTP endpoint. The second one does not need a domain at all.
Reality
Rapid7 recovered an exposed server running an active vishing operation. Alongside the phishing kit sat the operator's development trail, including a custom jailbreak written after one model pushed back.
Reality
Kaspersky says an Iranian-linked framework now picks its channel per transaction from a DNS record, and can swap the Google relay behind it. Allowlisted SaaS domains carry the traffic.
Reality
A Hacker News explainer makes the structural case: plaintext configs, unrotated tokens, broad scopes and prompt injection put agent plumbing outside secrets management.
Reality
Gambit Security says a ransomware operator asked Claude Code which databases mattered most, and got a ranked answer. Binary-focused detection does not see that step.
Reality