Cortex — Veille numérique

Cybersécurité

Splunk workshop: When agents become insider threats

Date/Time: Wednesday, August 5 | 10:15 a.m. – 11:00 a.m. (Mandalay Bay I) The Splunk workshop considers the fact that the next insider threat may not be a person; it may be an autonomous agent using valid credentials and delegated authority. Attendees will see real-world attack paths in which agents move sensitive data across tools, distribute brute-force attempts under a single delegation, and manipulate internal systems without triggering traditional SIEM or UEBA alerts.

23 juil.

Développement

Why curl and wget rules are noisy in cloud environments

Attackers often transfer tools or payloads after they compromise a host. MITRE ATT&CK maps this behavior to Ingress Tool Transfer, T1105 and explicitly calls out curl and wget as common Linux utilities for moving files into a victim environment. In a cloud environment, that makes these binaries worth watching. The hard part isn’t writing the first rule; it’s keeping the rule useful after the first week. Cloud hosts lean on curl and wget constantly, whether they’re used to pull packages, retrieve

23 juil.

How ES|QL COMPLETION filters curl and wget events

The curl and wget ES|QL COMPLETION triage rules follow the same structure. They’re additive companions to existing deterministic rules, not replacements. The original rules remain enabled, while the LLM-triage versions focus on the events that survive the known-good filters. The flow is intentionally conservative: Select Linux process execution events where process.name is curl or wget. Build a normalized argument string from process.args. Parse a destination host from a schema://host URL. Drop

23 juil.

Jane the Virgin (2014 – 2019)

Wild setup here in this telenovela-inspired romcom, but that's part of the fun. Gina Rodriguez is the title's Jane Gloriana Villanueva, a religious-ish waitress with dreams of becoming a romance novelist. She'd promised her grandmother that she'd maintain her virginity until marriage, a vow thoroughly complicated when she's artificially inseminated by mistake. The show has fun blending wild, telenovela-inspired, plot twists with more grounded character relationships, including among the three ge

23 juil.

Appendix A: MITRE ATT&CK tactics and techniques

See Table 9 through Table 19 for all the threat actor tactics and techniques referenced in this advisory. Table 9: Reconnaissance Technique Title ID Use Gather Victim Identity Information: Credentials T1589.001 The payload attempts to intercept a victim’s password from their password manager. Gather Victim Identity Information: Email Addresses T1589.002 The payload attempts to grab the victim’s email address from various data st

23 juil.

I’d rather not build or vibe. Almost ever. If you can buy it — buy it.

Ok let's see if we can skip marketing automation software altogether and just vibe our own agentic newsletter builder, complete with audience segmentation We'll see So far it looks kinda aweseome

23 juil.

Organs that grow

The supercooled organs seem to work well in the long term, too. Over a 30-day period, the pigs grew by around 30%—and the kidneys grew with them, almost doubling in size to compensate for both the pigs’ growth and the lack of a second kidney. The team monitored one of the pigs for 200 days before removing and analyzing its kidney. Even at that point the organ looked healthy, says Powell Palm. He and his colleagues presented the findings at the American Transplant Congress in Boston last month. E

23 juil.

Stealth Churn Is The Form This Takes

Stealth AI Churn: Are Your Customers Starting to Leave Already? The churn signals are everywhere if you know where to look. In some segments, you can see it all over the place: In the contact cente…

23 juil.

Gemini

The data moat

McKinsey estimates that generative AI, combined with other computational tools, could cut drug discovery timelines by as much as 50%. But every AI model is only as good as its training data. In drug discovery, that means ample quantities of high-quality biological data. Experiments can provide a rich source of such data. Whether they succeed or fail, each experiment generates a signal about what does and does not work. “Data is our differentiator,” says Sapra, explaining how the company’s datase

23 juil.

Claude IA

llm-d for RL infrastructure efficiency (the bigger picture)

llm-d Router: The intelligent entry point for inference requests - llm-d/llm-d-router

23 juil.

Développement

Current release and future outlook

Contribute to llm-d-incubation/llm-d-rl-time-slicing development by creating an account on GitHub.

23 juil.

Intelligence Artificielle

Bringing trust and knowledge to the data

Introducing the Knowledge Catalog: The evolution of Dataplex into a dynamic context engine for the enterprise. Unify metadata, enrich data with Gemini, and enable reliable AI agents with high-precision, secure retrieval.

23 juil.

Two kinds of Dependabot updates

Dependabot can fix vulnerable dependencies for you by raising pull requests with security updates.

23 juil.

Développement

Case studies and GitHub Advisory Database data

Modified package published to npm, containing malware that exfiltrates private key material

23 juil.

Why three days

A 7-day package delay would have blocked installs in most short-lived malicious publish attacks from the last 8 years

23 juil.

Defense in depth

The dependabot.yml controls automated dependency updates in your repository.

23 juil.

Microsoft

Why do software companies need new metrics?

In December 2024, one year ago, Microsoft CEO Satya Nadella declared on the BG2 podcast that “SaaS is dead.”

23 juil.

How this shift is impacting pricing

Effective software portfolio management and product lifecycle management are essential to spark innovation, growth, TSR and investor trust.

23 juil.

CRM becomes an action hero

CRM platforms have traditionally served as passive, static systems of record. Now, agentic AI is transforming CRM into a powerful, real-time solution that can act autonomously. “Organizations that rethink CRM as a real-time, AI-powered system of action — and embrace agentic AI to handle complex, unpredictable work — are better positioned to deliver exceptional customer experiences,” says IDC analyst Neil Ward-Dutton. “This approach not only enhances satisfaction and loyalty but also drives opera

23 juil.

Intelligence Artificielle

Agentic ushers in pricing complexity

Salesforce has priced its agent per conversation, but several other pricing models are emerging. The best choice depends on how much an organization uses agents.

23 juil.

Cortex — actualités tech et cybersécurité

jeudi 23 juillet

Splunk workshop: When agents become insider threats

Why curl and wget rules are noisy in cloud environments

How ES|QL COMPLETION filters curl and wget events

Jane the Virgin (2014 – 2019)

Appendix A: MITRE ATT&CK tactics and techniques

I’d rather not build or vibe. Almost ever. If you can buy it — buy it.

Organs that grow

Stealth Churn Is The Form This Takes

The data moat

llm-d for RL infrastructure efficiency (the bigger picture)

Current release and future outlook

Bringing trust and knowledge to the data

Two kinds of Dependabot updates

Case studies and GitHub Advisory Database data

Why three days

Defense in depth

Why do software companies need new metrics?

How this shift is impacting pricing

CRM becomes an action hero

Agentic ushers in pricing complexity