ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Product

Nuclei

1 mentions in 7 days · 2 in 30 days · 2 total · first seen · last

Search everything

Timeline

Proofpoint Expands AI-Powered Investigations to Microsoft 365 and Deepens Insider Risk Visibility into AI Activity

Proofpoint expands AI-powered investigations into Microsoft 365 and adds AI interaction visibility to insider risk investigations.

Proofpoint announced that Prism Investigator will connect directly to Microsoft 365 email, Teams, and files without requiring archived content, expected in Q4 2026. Human Communications Intelligence agents will incorporate AI communications governance signals, capturing interactions with copilots and AI agents, into Insider Threat Management. The vendor positions these as part of a unified platform for data security, insider risk, and communications governance.

Proofpoint Threat Insight · 5d agoIndustry1

Recorded Future Announces Automated Signature Creation, Accelerating Vulnerability Prioritization

Recorded Future launched Automated Signature Creation in ASI, turning new CVEs into deployable detection signatures in as little as 31 minutes.

Recorded Future announced Automated Signature Creation within its Attack Surface Intelligence product, autonomously generating production-ready detection signatures for newly surfaced vulnerabilities in as little as 31 minutes. The platform correlates an organization's internet-facing assets, live threat activity (malware, ransomware, actor intent), and vulnerability intelligence to prioritize which CVEs warrant detection. The company reports a tenfold increase in in-platform signatures and maps the capability to the four prioritization criteria in CISA's June 2026 directive on risk-based vulnerability mitigation.

Recorded Future · 11d agoToolsCVE-2025-0994

Related CVEs

  • CVE-2025-09948.631%
    Authenticated Deserialization RCE in Trimble Cityworks
    Trimble Cityworks, a GIS-based asset management platform used largely by local governments and utilities, contains a deserialization vulnerability (CWE-502). An authenticated user triggers the flaw by submitting maliciously crafted serialized input to the Cityworks web application. Successful exploitation yields remote code execution on the underlying Microsoft IIS web server hosting the product. Any organization running Cityworks on IIS is affected, especially where the server is internet-facing. The flaw was added to CISA's Known Exploited Vulnerabilities catalog on 2025-02-07, confirming exploitation in the wild; no public PoC is known, CVSS scoring is pending, and EPSS assigns roughly a 31% probability of exploitation within 30 days.
    · Trimble Cityworks KEVniche

Appears with

organization CISA 1organization Insikt Group 1organization Proofpoint 1organization Recorded Future 1product Attack Surface Intelligence 1product Human Communications Intelligence 1product Microsoft 365 1product Prism Investigator 1product Proofpoint Capture 1vendor CISA 1vendor Microsoft 1vendor Proofpoint 1vendor Recorded Future 1
Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.