HAWKEYE

Microsoft 365 Outage Advisory: The Phishing Started Before the Service Came Back

On 12 November 2026 a Microsoft 365 failure centred on Exchange Online took Outlook, Teams and a long list of […]

Alert Advisory, CVE, Cyber Threat Intelligence, Threat Hunting Insights

Weekly Threat Landscape Digest – Week 46

Adobe Multiple Products Vulnerabilities Including Code Injection and SQL Injection (Adobe Connect, AEM, After Effects, Photoshop, and More) Overview Security […]

Agentic SOC, AI, AI SOC

Node.js Brotli RCE: You Can Be Exposed by the Requests You Send

On 21 October 2026 the Node.js project published security releases for every supported line, fixing ten issues. The one that […]

AI SOC, Cyber Threat Management

sshole: The OpenSSH Bug That Logs You In to Accounts With No Password

On 5 November 2026, OpenSSH released Portable OpenSSH 10.6p2 to fix CVE-2026-123158, an authentication bypass nicknamed sshole by its finder, […]

Alert Advisory, CVE, Cyber Threat Intelligence, Threat Hunting Insights

Weekly Threat Landscape Digest – Week 45

Citrix XenServer and Unicon eLux Scout Critical Vulnerabilities Including Actively Exploited Brotli Buffer Overflow (CVE-2026-111497) Overview Cloud Software Group released […]

Agentic SOC, AI

Choosing the Reasoning Model for Your AI SOC

Public model leaderboards measure general reasoning on public benchmarks. None of them measure whether a model reaches the right verdict […]

Agentic SOC, AI, AI SOC

What an AI SOC Investigation Costs, and How to Keep It Predictable

SIEM taught security teams to budget by ingest volume. SOAR taught them to budget by seat and connector. An AI […]

Alert Advisory, CVE, Cyber Threat Intelligence, Threat Hunting Insights

Weekly Threat Landscape Digest – Week 44

WordPress Core 22 Vulnerabilities Including RCE Race Condition – Update to 7.1.4 Overview WordPress 7.1.4 addresses 22 security vulnerabilities in […]

Alert Advisory, CVE, Cyber Threat Intelligence, Threat Hunting Insights

Weekly Threat Landscape Digest – Week 43

PHP Critical Remote Code Execution PHP2Shell (CVE-2026-109618, CVE-2026-109619, CVSS 9.2) Overview Two critical RCE vulnerabilities in PHP (CVSS v4.0 9.2) […]

Cyber Security, PHP, Threat Intelligence, Vulnerability Assessment

HawkEye Advisory: PHP2Shell Critical PHP Remote Code Execution Flaws CVE-2026-109618 and CVE-2026-109619

A pair of critical vulnerabilities in PHP has moved from advance warning to an active patching priority within roughly 24 […]

Agentic SOC, AI SOC, SOAR

SOAR vs Agentic SOC: Where a Playbook Breaks on a Real Alert

Every vendor in the category now has a version of the sentence “SOAR is dead.” It is a good headline […]

Alert Advisory, CVE, Cyber Threat Intelligence, Threat Hunting Insights

Weekly Threat Landscape Digest – Week 42

PAN-OS Authenticated RCE via Management Interface (CVE-2026-0322, CVSS 8.6) Overview High-severity RCE (CWE-94) in PAN-OS management interface; allows authenticated attackers […]

Agentic SOC, AI SOC, Cyber Security, Cyber Threat Intelligence, Cyber Threat Management, SOC Governance

Governed Autonomy: Where the Human Approval Gate Belongs in an Agentic SOC

The loudest claim in the agentic SOC market right now is a percentage. It measures how much of Tier-1 the […]

Alert Advisory, CVE, Cyber Threat Intelligence, Threat Hunting Insights

Weekly Threat Landscape Digest – Week 41

Argo CD Critical Command Execution and Access Bypass (CVE-2026-77459, CVSS 9.9) Overview Four critical CVSS 9.9 vulnerabilities in Argo CD’s […]

AI, AI SOC, Cyber Threat Intelligence, Cyber Threat Management, Cybersecurity

How Attackers Are Using AI in 2026: Lessons From Anthropic’s Threat Report

Anthropic disrupted threat actors misusing its Claude models between December 2025 and August 2026, and published the case studies in […]

Alert Advisory, CVE, Cyber Threat Intelligence, Threat Hunting Insights

Weekly Threat Landscape Digest – Week 40

Dell Terraform Provider TLS Certificate Validation Bypass (CVE-2026-91881, CVSS 9.0) Overview Four vulnerabilities in Dell Terraform providers for server infrastructure […]

Cyber Security, EDR

Jev:TypeSafe’s New Decision Model, and What It Means for Cyber Defense

Large language models are good at explaining, summarizing and generating text. Security operations often need something different: make a bounded […]

Cybersecurity, Managed Security Services, Managed SOC Services, Security Operations Center

Sovereign AI SOC in Saudi Arabia: How HawkEye Supports Air-Gapped and High-Security Operations

Saudi security teams are being asked to use AI without giving up control of the data their SOC depends on. […]

Alert Advisory, CVE, Cyber Threat Intelligence, Threat Hunting Insights

Weekly Threat Landscape Digest – Week 39

Actively Exploited Check Point Security Management Directory Traversal & File Upload (CVE-2026-93616, CVSS 9.8) Overview Critical pre-authentication directory traversal and […]

Active Directory Security, Cyber Security, Security Operations Center

What Is an AI SOC? A Technical Anatomy of Detection, Triage, and Response

ISC2’s 2025 Cybersecurity Workforce Study, based on responses from more than 16,000 practitioners worldwide, found that 59 percent of organizations […]

Alert Advisory, CVE, Cyber Threat Intelligence, Threat Hunting Insights

Weekly Threat Landscape Digest – Week 38

Critical Unauthenticated RCE in Check Point Security Management (CVE-2026-91843) Overview Critical stack overflow (CVSS 9.8) in the unauthenticated login process […]

Cyber Security, Cyber Threat Intelligence, Cyber Threat Management, Incident Response

HawkEye AI Is Listed on SecOps Unpacked’s AI SOC Capability Map, Here’s What Backs It Up

The AI SOC market got crowded fast. Ask five vendors what makes their platform agentic or AI-powered and you’ll get […]

Alert Advisory, CVE, Cyber Threat Intelligence, Threat Hunting Insights

Weekly Threat Landscape Digest – Week 37

Cisco UCS UEFI Secure Boot Bypass Vulnerability (CVE-2026-20293) Overview High-severity vulnerability (CVSS 7.1, CWE-749) in the UEFI Shell implementation on […]

Alert Advisory, Breach Detection, Incident Response

Identity Based Cyberattacks in the GCC: What the 2026 Data Says to Fix First

Nearly 9 in 10 incidents investigated by Unit 42 in 2025 involved an identity weakness, and 65% of initial access […]

Weekly Threat Landscape Digest – Week 46

Node.js Brotli RCE: You Can Be Exposed by the Requests You Send

sshole: The OpenSSH Bug That Logs You In to Accounts With No Password

Weekly Threat Landscape Digest – Week 45

Choosing the Reasoning Model for Your AI SOC

What an AI SOC Investigation Costs, and How to Keep It Predictable

Weekly Threat Landscape Digest – Week 44

Weekly Threat Landscape Digest – Week 43

HawkEye Advisory: PHP2Shell Critical PHP Remote Code Execution Flaws CVE-2026-109618 and CVE-2026-109619

SOAR vs Agentic SOC: Where a Playbook Breaks on a Real Alert

Weekly Threat Landscape Digest – Week 42

Governed Autonomy: Where the Human Approval Gate Belongs in an Agentic SOC

Weekly Threat Landscape Digest – Week 41

How Attackers Are Using AI in 2026: Lessons From Anthropic’s Threat Report

Weekly Threat Landscape Digest – Week 40

Jev:TypeSafe’s New Decision Model, and What It Means for Cyber Defense

Sovereign AI SOC in Saudi Arabia: How HawkEye Supports Air-Gapped and High-Security Operations

Weekly Threat Landscape Digest – Week 39

What Is an AI SOC? A Technical Anatomy of Detection, Triage, and Response

Weekly Threat Landscape Digest – Week 38

HawkEye AI Is Listed on SecOps Unpacked’s AI SOC Capability Map, Here’s What Backs It Up

Weekly Threat Landscape Digest – Week 37

Identity Based Cyberattacks in the GCC: What the 2026 Data Says to Fix First

Ready to get started?

Ready to get started?

Packages

CSOC

Explore