[ News | Newsletters | Blogs | Lists | Media | Jobs ] HoneyDB
The Cybersecurity Pulse
Identity Governance Needs a GPU
TCP 150: PHP Patch Race, OpenCode’s Breach, and Varonis’ $6.3B Deal
BSides NYC: AI audit trails and Gatsby fits
TCP 149: Hackers x Fridges on Fire, Workday x C1, and Rippling Comes for GRC
TCP 148: Codex Exploited at Pwn2Own, LLM Safety Checks Bypassed, and Armadin Raises $255.5M
TCP 147: Cribl Joins the SIEM Party, NVIDIA Puts Agents on a Leash, Island Lands $400M
TCP 146: Oktane Updates, Gemini Joins the Party, and Cyera Adds $400M
The SOC Readiness Pyramid for Agentic Threat Hunting
TCP 145: Stolen AI keys fund more hacking, AI slowdown theater, and Splunk’s next move
TCP 144: LG’s TV Privacy Mess, CrowdStrike’s SecOps Push, and $245M Before Beta
Deploy Securely
Maintaining trust with AI deployments at LastPass
AI governance at MarketAxess
The top 5 contract terms AI vendors should watch out for in 2026
StackAware and Harmonic Security partner to strengthen enterprise AI governance
How AI hyperscalers can use ISO 42001 internal audit to comply with Illinois SB 315
StackAware and Nudge Security
How StackAware uses agentic AI to manage AI risk
7 things nobody tells you about ISO 42001 certification
Slack just overrode your AI settings
Prescient Security and StackAware: building audit-ready AI governance
Omer on Security
Can Splunk Overcome Its Innovator's Dilemma?
How to Jumpstart Your Collaboration with the Data Team
The Inside Scoop on Insider Risk
Help Stop SOAR Abuse
You've Never Seen Lock-In Like This Before
Survivor's Guide to SIEM in 2024
Navigating a Market for Lemons
Lacework’s AI Didn’t Work
Busting Four Myths on Usage-Based Pricing for Security Operations
The Security Data Fabric Identity Crisis
Cloud Native Detection
Multi-Cloud Detection at Scale: A Normalization Framework
The Cloud-Native Detection Engineering Handbook
Return on Security
💰 Security, Funded #267 - Shell Happens
💰 Security, Funded #266 - Varonis & Chill
If You Can't Beat Them, Buy Them
💰 Security, Funded #265 - Breach for the Stars
💰 Security, Funded #264 - Armadin to the Teeth
💰 Security, Funded #263 - Ctrl+C, Ctrl+VC
💰 Security, Funded #262 - Firmware Believer
💰 Security, Funded #261 - [AI] Agent Provocateur
💰 Security, Funded #29
💸 Security, Funded #28
Venture in Security
From firefighters to building inspectors: rethinking the cyber market
Both AI skeptics and AI enthusiasts in cyber are wrong
Fighting AI slop with human insight
How AI is actually remaking security
Not all cyber acquisitions are created equal: what to look for to make sense of the M&A noise
If everyone agrees with your cyber startup idea, you’re either wrong or too late
Many of the best security leaders aren’t on LinkedIn
What it’s like being the only security company in your YC batch
11 generalist mental models applied to cyber: CISOs’ and founders’ guide
What Israeli dominance in cyber means for non-Israeli cybersecurity founders
Detection at Scale
D@S #77 – Closing The Alert vs. Closing The Loop: How AI Is Reinventing the SOC
Agents That Don't Wait for Alerts to Fire
What Happens to Detections When Agents Do the Work
D@S #76 - Google's Detection Director: 99% of Our Million Annual Tickets Never Reach a Human
D@S #75 - The Bigger Risk Is Refusing to Adopt AI Agents At All
D@S #74 - Compass' Ryan Glynn on Why LLMs Shouldn't Make Security Decisions — But Should Power Them
Threat Hunting with Claude Code and MCP
D@S #73 - Veeva Systems' Mike Vetri on Building Resilient Security Teams in the Age of AI
Building Threat Models with MCP and AI Agents
D@S #72 - Trustpilot's Gary Hunter on Structuring Security Knowledge for AI Success
Latio Pulse
The New Normal: What the Recent Incidents Mean for the Future of Security
The 2026 Latio AI Security Market Report is Live!
Detecting and Preventing the Hugging Face / OpenAI Incident
The Privatization of Vulnerability Management
The 2026 Latio Security Operations Report is Live!
Building an AI Ready Vulnerability Management Program After NVD Changes and Claude Mythos
Agentic Development Security (ADS): Enterprise Governance for AI Generated Code
The Complete Guide to Preventing Open Source Malware
How to Know If the Trivy Supply Chain Attack Hit You
The 2026 Latio Application Security Report is Live!
Detection Engineering Weekly
DEW #171 - Threat Emulation Context, Onboarding a Security Agent & lol php
What are Security Logs? Part 1
DEW #170 - Zack on a podcast, Hunting DNS and Citrix 0days
A September Break for Detection Engineering Weekly
DEW #169 - Realistic AI SOC evaluation scenarios, tricking EDRs with fake telemetry and Anthropic/OAI cyber eval guardrails
DEW #168 - The Detection Rule Stork, OpenWeight models vs your SIEM and Sigma vs. YARA
DEW #167 - More Security Agentic Breaches, Cheap and Scalable Threat Hunting & Detection Skills
DEW #166 - Figma's Agentic SecOps, AI-EDRs and Anthropic Evals Breaking into Companies
DEW #165 - Starved & Neglected Rules, Agentic IR Notebooks and Hacker Summer Camp
DEW #164 - Your Benign Set Stinks, OpenAI Models Break into Hugging Face & Chinese Openweight Models
Resilient Cyber
AI Cyber FUD and the Apocalypse That's Always Around the Corner
From Vulnpocalypse to Breachpocalypse?
The Resilient Brief: PHP2Shell Goes From Leak to Millions of Attempts in Under Two Days
Agency Isn’t Authorization
Trust the Model the Least
AI Least Privilege and the Agent Identity Problem
Resilient Cyber Newsletter #118
Alignment vs. Security Is a False Dichotomy
Faster to the Wrong Answer
AI-Accelerated Micro Tabletops and Incident Readiness
The OSINT Newsletter
The OSINT Newsletter - Issue #127
The OSINT Newsletter - Issue #126
Episode 24: Looking Behind the Marketing, Searching Telegram Through Google, and Building Persistent OSINT Apps
The OSINT Newsletter - Issue #125
The OSINT Newsletter - Issue #124
The OSINT Newsletter - Issue #123
Episode 23: Locking Down Your OpSec, Mapping Online Communities, and Mining Vinted for OSINT
The OSINT Newsletter - Issue #122
The OSINT Newsletter - Issue #121
The OSINT Newsletter - Issue #120
© 2026 RiskDiscovery | Sponsored by: Deception Logic