Skip to content

Topic

AI-Assisted Offensive Security

Use of AI models to generate exploitation scripts and attack tooling, and the effect on required attacker skill and time.

Current stories

securityOne report1 publisher

Attackers are bypassing authentication on Cisco ISE with a crafted API request

Cisco says CVE-2026-76460 is under active exploitation. It scores 10.0, needs no credentials, and puts an unauthenticated attacker past the web management interface of an Identity Services Engine appliance.

Reality

Evidence45
Adoption30
Hype gap−10
Incentives50
Confidence48
securityOne report1 publisher

Wiz research: base images account for 39 percent of critical container CVE findings; hardened images cut CVEs by 94 percent

The 39 percent comes from Wiz research with no published sample or method, and it bounds the hardened-image pitch as much as it supports it, since most critical container findings sit above the base layer.

Publishers:wiz.io

Reality

Evidence20
Adoption
Not scored
Hype gap+40
Incentives92
Confidence62
securityOne report1 publisher

Microsoft says the patch window has closed. Read the fine print on what runs in the gap.

The company's own list of what safe patching requires is also a list of what an in-between mitigation layer would have to skip. The open question is who owns the regression.

Publishers:microsoft.com

Reality

Evidence18
Adoption
Not scored
Hype gap+52
Incentives84
Confidence46