Cortex — Veille numérique

Giving your AI a computer

There are basically two ways to give Claude or ChatGPT a computer: the AI company can provide a virtual computer for its agent to use, or you can give the AI access to your own. Let’s start with the easier (and less powerful) case. To use the computers provided by the AI companies, the mode you want is called ChatGPT Work in ChatGPT, and Cowork in Claude (the naming will not get less confusing, I am sorry to say). In this mode, you next pick the model and its thinking level — I would start with

23 juil.

Giving an AI YOUR computer

The most powerful way to use AI is to give it access to your computer. You do that by downloading the ChatGPT or Claude apps and picking a mode to use. ChatGPT's two agent modes are Work and Codex; Claude's are Cowork and Code. The names do not map onto each other in any way that will help you remember them. And yes, these use the same names as the Work and Cowork modes we discussed above, but operate differently, and have more features and capabilities because they can access your computer. It

23 juil.

Cyber Arnaque

Overview of Chaos ransomware

Cisco Talos Incident Response (Talos IR) recently observed attacks by Chaos, a relatively new ransomware-as-a-service (RaaS) group conducting big-game hunting and double extortion attacks.

23 juil.

Indicators of compromise (IoCs)

Indicators of Compromise. Contribute to Cisco-Talos/IOCs development by creating an account on GitHub.

23 juil.

Intelligence Artificielle

Main Stage keynote: Security at agentic scale

Date/Time: Wednesday, August 5 | 11:30 a.m. – 12:00 p.m. (Main Stage, Business Hall) Cisco's David Dalling and Rick Miles will be giving a Main Stage keynote all about protecting the enterprise in the age of AI agents. As AI agents become increasingly capable (and increasingly privileged) inside enterprise environments, organizations face an entirely new set of security challenges. Drawing on research from across Cisco, the talk will explore what it takes to secure organizations as autonomous sy

23 juil.

Cybersécurité

Talos workshop: When AI finds vulnerabilities faster than humans can patch

Date/Time: Wednesday, August 5 | 1:30 p.m. – 3:00 p.m. (Oceanside E, Level 2) If you're looking for something hands-on and interactive, don't miss our workshop with Talos’ Nick Biasini and Cisco’s Omar Santos. In two parts, they’ll demonstrate practical ways security teams can incorporate AI into SOC workflows to identify sophisticated adversary behavior. In Part 1, Omar will discuss the Foundry Security Spec. He’ll walk through how to deploy, build testing harnesses around its core agent roles,

23 juil.

Cybersécurité

Splunk workshop: When agents become insider threats

Date/Time: Wednesday, August 5 | 10:15 a.m. – 11:00 a.m. (Mandalay Bay I) The Splunk workshop considers the fact that the next insider threat may not be a person; it may be an autonomous agent using valid credentials and delegated authority. Attendees will see real-world attack paths in which agents move sensitive data across tools, distribute brute-force attempts under a single delegation, and manipulate internal systems without triggering traditional SIEM or UEBA alerts.

23 juil.

Développement

Why curl and wget rules are noisy in cloud environments

Attackers often transfer tools or payloads after they compromise a host. MITRE ATT&CK maps this behavior to Ingress Tool Transfer, T1105 and explicitly calls out curl and wget as common Linux utilities for moving files into a victim environment. In a cloud environment, that makes these binaries worth watching. The hard part isn’t writing the first rule; it’s keeping the rule useful after the first week. Cloud hosts lean on curl and wget constantly, whether they’re used to pull packages, retrieve

23 juil.

How ES|QL COMPLETION filters curl and wget events

The curl and wget ES|QL COMPLETION triage rules follow the same structure. They’re additive companions to existing deterministic rules, not replacements. The original rules remain enabled, while the LLM-triage versions focus on the events that survive the known-good filters. The flow is intentionally conservative: Select Linux process execution events where process.name is curl or wget. Build a normalized argument string from process.args. Parse a destination host from a schema://host URL. Drop

23 juil.

Jane the Virgin (2014 – 2019)

Wild setup here in this telenovela-inspired romcom, but that's part of the fun. Gina Rodriguez is the title's Jane Gloriana Villanueva, a religious-ish waitress with dreams of becoming a romance novelist. She'd promised her grandmother that she'd maintain her virginity until marriage, a vow thoroughly complicated when she's artificially inseminated by mistake. The show has fun blending wild, telenovela-inspired, plot twists with more grounded character relationships, including among the three ge

23 juil.

Appendix A: MITRE ATT&CK tactics and techniques

See Table 9 through Table 19 for all the threat actor tactics and techniques referenced in this advisory. Table 9: Reconnaissance Technique Title ID Use Gather Victim Identity Information: Credentials T1589.001 The payload attempts to intercept a victim’s password from their password manager. Gather Victim Identity Information: Email Addresses T1589.002 The payload attempts to grab the victim’s email address from various data st

23 juil.

I’d rather not build or vibe. Almost ever. If you can buy it — buy it.

Ok let's see if we can skip marketing automation software altogether and just vibe our own agentic newsletter builder, complete with audience segmentation We'll see So far it looks kinda aweseome

23 juil.

Organs that grow

The supercooled organs seem to work well in the long term, too. Over a 30-day period, the pigs grew by around 30%—and the kidneys grew with them, almost doubling in size to compensate for both the pigs’ growth and the lack of a second kidney. The team monitored one of the pigs for 200 days before removing and analyzing its kidney. Even at that point the organ looked healthy, says Powell Palm. He and his colleagues presented the findings at the American Transplant Congress in Boston last month. E

23 juil.

Stealth Churn Is The Form This Takes

Stealth AI Churn: Are Your Customers Starting to Leave Already? The churn signals are everywhere if you know where to look. In some segments, you can see it all over the place: In the contact cente…

23 juil.

Gemini

The data moat

McKinsey estimates that generative AI, combined with other computational tools, could cut drug discovery timelines by as much as 50%. But every AI model is only as good as its training data. In drug discovery, that means ample quantities of high-quality biological data. Experiments can provide a rich source of such data. Whether they succeed or fail, each experiment generates a signal about what does and does not work. “Data is our differentiator,” says Sapra, explaining how the company’s datase

23 juil.

Claude IA

llm-d for RL infrastructure efficiency (the bigger picture)

llm-d Router: The intelligent entry point for inference requests - llm-d/llm-d-router

23 juil.

Développement

Current release and future outlook

Contribute to llm-d-incubation/llm-d-rl-time-slicing development by creating an account on GitHub.

23 juil.

Intelligence Artificielle

Bringing trust and knowledge to the data

Introducing the Knowledge Catalog: The evolution of Dataplex into a dynamic context engine for the enterprise. Unify metadata, enrich data with Gemini, and enable reliable AI agents with high-precision, secure retrieval.

23 juil.

Two kinds of Dependabot updates

Dependabot can fix vulnerable dependencies for you by raising pull requests with security updates.

23 juil.

Développement

Case studies and GitHub Advisory Database data

Modified package published to npm, containing malware that exfiltrates private key material

23 juil.

Cortex — actualités tech et cybersécurité

jeudi 23 juillet

Giving your AI a computer

Giving an AI YOUR computer

Overview of Chaos ransomware

Indicators of compromise (IoCs)

Main Stage keynote: Security at agentic scale

Talos workshop: When AI finds vulnerabilities faster than humans can patch

Splunk workshop: When agents become insider threats

Why curl and wget rules are noisy in cloud environments

How ES|QL COMPLETION filters curl and wget events

Jane the Virgin (2014 – 2019)

Appendix A: MITRE ATT&CK tactics and techniques

I’d rather not build or vibe. Almost ever. If you can buy it — buy it.

Organs that grow

Stealth Churn Is The Form This Takes

The data moat

llm-d for RL infrastructure efficiency (the bigger picture)

Current release and future outlook

Bringing trust and knowledge to the data

Two kinds of Dependabot updates

Case studies and GitHub Advisory Database data