
Corelight argues rich network data decides investigation outcomes
The partner piece says shallow connection metadata can stall analysts even when detections fire.
4 stories, newest first · one card per story

The partner piece says shallow connection metadata can stall analysts even when detections fire.
A later-found, more common configuration can trigger the same loop first scored CVSS 5.5.

Sophos uncovers a 64-bit Cyclops Blink variant on hacked Cisco FMC appliances, adding internal network scanning and selective packet capture; linked to Sandworm.
libpcap 1.10.7 fixes seven vulnerabilities, including CVE-2026-31912 affecting the deprecated bpf_filter(), and all users are advised to update.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views