SANS survey finds cloud security maturity lagging widespread adoption
Of 400 professionals surveyed, 93% run production cloud workloads, but only 40% call their strategy advanced.
32
- Mentions · 7d0
- Mentions · 30d7
- All mentions15
- First seenSep 3, 2026
- Last mentioned8d ago
Timeline
15 articles · newest firstSmall Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
SANS argues defenders should build small least-privilege AI agents rather than caging general-purpose ones, citing Check Point's tool-call deviation detection.
45
Why AI Confidence Is Not Validation
SANS says DFIR teams must independently validate AI findings and keep humans in authority.
38
Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)
SANS published two Python scripts that reconstruct OpenCode and Hermes AI agent activity for forensic review.
44
Alert Overload, Tool Sprawl and Evasive Phishing: The 5 Bottlenecks Slowing Down US SOCs
ANY.RUN says US SOCs are slowed by alert overload, tool sprawl, and evasive phishing.
32
5 Critical Pain Points of Modern US SOCs and How to Solve Them
ANY.RUN outlines five US SOC pain points and pitches its sandbox to cut manual alert investigation.
18
Attackers Abuse Legitimate ScreenConnect Client in Phishing Campaign to Gain Remote Access
Phishers deliver a legitimately signed ConnectWise ScreenConnect client preconfigured to call back to attacker infrastructure, bypassing malware detection for remote access.
56
Zero Trust for AI Agents Starts With Fixing Zero Visibility
Guidance says AI-agent Zero Trust needs inventory first, citing shadow agents and a $600,000 METR token theft.
46
Half of threat hunters say bad data is their biggest problem
SANS 2026 survey finds half of threat hunters cite bad data as their top barrier.
42
HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th)
RFC 10008 standardizes the HTTP QUERY method, creating potential WAF inspection bypasses, cache poisoning, and CSRF gaps because most defenses don't recognize the new verb.
38
ISC Stormcast For Friday, September 18th, 2026 https://isc.sans.edu/podcastdetail/10100, (Fri, Sep 18th)
SANS Internet Storm Center published its daily Stormcast podcast episode for Friday, September 18th, 2026.
10
ISC Stormcast For Thursday, September 10th, 2026 https://isc.sans.edu/podcastdetail/10088, (Thu, Sep 10th)
SANS Internet Storm Center published its daily ISC Stormcast podcast episode for Thursday, September 10, 2026, with no substantive content in the feed.
5
ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th)
SANS Internet Storm Center publishes its daily Stormcast cybersecurity news podcast for Wednesday, September 9th, 2026.
10
AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance
Huntress maps AD RMS architecture and recon paths, setting up an offline key-extraction attack against its unrotatable 255-year root key.
55
Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)
A SANS ISC guest diary describes batch.py, a Python tool that consolidates honeypot logs and enriches IOCs with threat intelligence data.
14
Appears with
- SANS Internet Storm Centervendor · 4
- FBIorganization · 2
- ANY.RUN Interactive Sandboxproduct · 2
- ISC Stormcastproduct · 2
- ANY.RUNvendor · 2
- Palo Alto Networksorganization · 2
- Optivorganization · 2
- Ponemon Instituteorganization · 2
- Stormcastproduct · 1
- Outlookproduct · 1
- Huntressvendor · 1
- Officeproduct · 1
- METRvictim · 1
- ChatGPTai model · 1
- tcpdumpproduct · 1
- Hugging Faceorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.