FireMon Agentic AI investigates access and drafts policy changes
Supplied agents query policy and stage Policy Plan changes that are not deployed until a person accepts them.
1
Stories per day · 30 days
2 RSS
Relatedintrusion-detection2suricata2advisory1agentic-ai1calibration1canada1firemon1firewall-policy1mcp1model-calibration1nsm1sonicwall1vulnerability1vx-one1
28 stories, newest first · one card per story
Stories tagged #network-security
VX-One study tests typed decision heads for perimeter triage
A 100K–10M-parameter model is measured against XGBoost and a Suricata cascade on public IDS sets.
VX-One study tests typed heads for real-time perimeter triage
Under CIC-IDS2017 drift VX-One leads detection, but calibration error rises from 0.04 to 0.40 for every method.
SonicWall security advisory (AV26-1048)
Canada’s Cyber Centre urges patches for multiple flaws in SonicWall NSM On-Prem 4.3.1 and earlier.
Implementing Data Diodes Using Commodity Hardware and Open Source Software
Researchers show commodity fiber gear and open-source software can implement reliable data diodes, releasing pydiode.
Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol
Elttam disclosed a pre-authentication remote code execution flaw in the 33-year-old TACACS+ protocol used across nearly all enterprise networks, with patches only partially available.
SASE Converges Network & Security Into One Cloud Solution
A brief Dark Reading piece argues SASE combines network and security controls in one cloud service.
Why security belongs in the network
Sponsored content advocates for embedding security directly into network infrastructure to improve agility and zero-trust enforcement.
2
Re: Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7 patches 67 vulnerabilities in the open-source network IDS/IPS engine, with follow-up discussion on oss-security.
Re: Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7 was released fixing 67 vulnerabilities; project lead Victor Julien confirmed the announcement and offered future posts.
Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7, the open-source network IDS/IPS engine, ships a patch release fixing 67 vulnerabilities with no known exploitation reported.
CISA Warns of Cisco Identity Services Engine Authentication Bypass Vulnerability (CVE-2026-76460)
CISA added actively exploited Cisco ISE authentication bypass CVE-2026-76460 to its KEV catalog, urging patches by September 19, 2026.
2
Reachability, Not Observation: Containing Systems Whose Wiring Changes
Theoretical study shows snapshot-based containment vastly underestimates required blocks when wiring changes, proposing reachability-based declared capability maps instead.
Event-Native Symbolic-Temporal Spike Encoding Framework for Heterogeneous Cyber Streams
An event-native spike encoding framework lets recurrent spiking neural networks run intrusion detection directly on heterogeneous packet and CAN bus streams.
Sociotechnical Aspects of Tor Relay Rejection
User study and simulations of Tor's relay end-of-life rejection policy find operators favor it; network churn affects anonymity more than EoL exclusions.
AL26-020 - Vulnerabilities Impacting MikroTik RouterOS - CVE-2026-67276, CVE-2026-67277 and CVE-2026-86060
Canada's Cyber Centre warns of three exploited MikroTik RouterOS vulnerabilities affecting SSH-exposed devices; CISA added two to its KEV catalog.
Are Unreachable Nodes Truly Safe? Fully Eclipsing Monero's P2P Network!
Researchers present Nyx and Moros, the first eclipse attacks against Monero nodes behind NATs, requiring no inbound access and demonstrated on mainnet.
Lightweight Zero Trust via Automotive SDN
Researchers map automotive SDN with MACsec/MKA and CORECONF/YANG to NIST SP 800-207, satisfying five of seven Zero Trust tenets without added infrastructure.
Cisco bundles fixes for multiple vulnerabilities, some critical, into one patch
Cisco patched seven IOS XR vulnerabilities, two rated CVSS 9.8, allowing unauthenticated remote code execution and root access on carrier routers; no exploitation observed.
SonicWall security advisory (AV26-884)
Canada's Cyber Centre issued advisory AV26-884 warning that SonicWall Network Security Manager On-Prem 4.3.0 and earlier are affected by multiple vulnerabilities.
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
CERT Polska warns attackers exploit internet-exposed MikroTik SSH for unauthenticated full admin control; attacks observed since at least September 2.
1
Cisco searched for IOS XR bugs and found so many it rolled them into an update release
Cisco patched three critical flaws, including CVE-2026-20212 unauthenticated remote root code execution in Nexus 9000 switches; no exploitation observed yet.
Your DNS Is Hiding in HTTPS — This Is Why It Matters
Akamai argues that unmanaged DNS over HTTPS (DoH) creates enterprise visibility gaps and advocates controlled DoH strategies to restore DNS monitoring.
AWS Console Private Access can block sign-ins to personal accounts
AWS Console Private Access goes GA, letting internet-isolated VPCs reach the console fully over PrivateLink and blocking personal account sign-ins.