Hello, stay ahead with CISO Brief 🚀

🛡️ Check Point Research presented four technical talks at Black Hat USA 2026 exposing trusted layers attackers abuse. Researchers dissected a decade-old Windows kernel driver in Defender, found post-injection exploitation paths across major AI agent frameworks, developed a pipeline to decompile compiled V8 bytecode malware, and identified sandbox escape vulnerabilities in Cloudflare’s Code Mode. Each talk highlighted how trusted or overlooked components can be repurposed offensively.

📰 OpenAI has released updated GPT-5.6 models: GPT-5.6 Sol for Plus and Pro users and GPT-5.6 Luna as the default for Free users. The upgrades aim to produce more direct, factually accurate, and consistent responses across quick queries and complex reasoning. A new slider lets users trade speed for deeper reasoning, while Free users gain unlimited text chats and a new Think button to extend processing time. OpenAI reports substantial reductions in factual errors versus prior versions, and additional safety protections for minors are being introduced. Rollout is gradual and some usage limits remain on non-text features.

🛡️ A Go-based malware delivered via a ClickFix campaign targets macOS users to steal cryptocurrency, browser passwords, Apple Keychain data, and cached credentials. Researchers at Huntress found the attack uses a Bash profiler and Mach-O payload tailored to the victim’s CPU, persists by faking errors with osascript, and removes quarantine flags to bypass Gatekeeper. The malware can intercept and divert crypto transactions and selectively drain a percentage of funds.

🔒 This post announces ACME protocol support in AWS Certificate Manager (ACM), enabling customers to use familiar ACME clients like certbot and cert-manager to automate public certificate issuance and renewal. It explains the new ACME endpoint resource, domain validation scopes, EAB credentials, and IAM controls for isolating environments. The article outlines setup steps, operational best practices, and monitoring recommendations to help scale certificate automation securely.

🚀 Amazon Elastic Container Service (Amazon ECS) now supports fractional GPU scheduling on Amazon EC2 G6f instances, allowing containers to request GPU partitions as small as one-eighth of an NVIDIA L4 Tensor Core GPU (3 GB). This enables cost-efficient runs for small-model AI inference, model experimentation, and graphics rendering by right-sizing GPU resources. Configure fractional GPUs by setting GPU=0.125, GPU=0.25, or GPU=0.5 in your ECS task definition; support is available on ECS Managed Instances and ECS on EC2 with integrated monitoring and automated instance lifecycle handling.

🛠️ AWS Lambda console now extends console-to-IDE integration to support Kiro and Cursor IDEs, building on earlier Visual Studio Code support. Developers can follow a guided setup from the Lambda console to start local development in Kiro or Cursor while preserving code and configurations. The integration also enables conversion to AWS SAM templates to simplify IaC and CI/CD workflows. This feature is available in all commercial AWS Regions at no additional cost.

🔍 Traditional vulnerability management finds issues, but that doesn't equal reduced risk. Modern environments are interconnected, and attackers chain weaknesses, identities, and permissions to reach valuable targets. The Gartner CTEM framework shifts the focus from individual findings to the broader exposures attackers can exploit. Organizations must prioritize reducing exposure, not just counting or patching vulnerabilities.

🚀 Amazon EC2 G7 instances powered by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs are now available in the Europe (Spain) Region. G7 delivers up to 4.6x AI inference and up to 2.1x graphics performance versus G6, with faster GPU-accelerated analytics. Instances offer up to 8 GPUs (32 GB each), custom Intel Xeon 6 CPUs, up to 192 vCPUs, 768 GiB memory, 700 Gbps EFA, and 7.6 TB NVMe local storage. G7s are available as On-Demand, Spot, and Savings Plans in four regions today.

🚀 Amazon Web Services (AWS) announced general availability of runtime instances for Amazon Bedrock AgentCore, enabling agents to run on customer-managed EC2 instances without manual infrastructure management. The feature complements existing microVM-based runtimes and supports diverse EC2 families including GPU-accelerated, memory-optimized, and compute-optimized types. Runtime instances allow long-running agent sessions up to 14 days and integrate with the AWS Console, CLI, SDKs, and APIs to create capacity providers and attach agents. Availability spans multiple regions and billing includes EC2 costs plus management fees, with documentation and pricing details provided by AWS.

🔒 Check Point has joined the Open Secure AI Alliance, an initiative introduced by NVIDIA to advance open, measurable, and enterprise-ready AI security. The company will contribute open research, objective benchmarks, datasets and runtime protection experience to support collaborative AI safety and security efforts. This participation aims to help organizations identify, remediate and responsibly disclose vulnerabilities while preserving control over data and infrastructure.

🔒 This post shows how to route Amazon Bedrock Guardrails intervention events into Amazon Security Lake by transforming model invocation logs into OCSF-compliant Detection Finding records. It outlines an automated pipeline using CloudWatch Logs subscription filters, an AWS Lambda transformer, Parquet output, and Security Lake partitions so analysts can query guardrail events alongside identity, network, and application telemetry. The solution maps guardrail fields to OCSF attributes, supports multi-account deployment, and offers scaling guidance and an alternative CloudWatch-only approach.

🚀 Amazon ElastiCache now supports Graviton4-based M8g, R8g, and C8gn node families for Valkey and Memcached. These nodes deliver up to 47% higher throughput, up to 43% lower P99 latency, and up to 31% better price-performance for on-demand pricing compared with Graviton3 equivalents, varying by family, size, and workload. Graviton4 instances also provide more memory per node and enhanced networking, with C8gn offering up to 200 Gbps. The new sizes are available from large to 16xlarge across 30+ AWS Regions, including AWS GovCloud and China Regions; use the Console, SDK, or CLI to create or modify clusters.

📢 The AWS Glue Schema Registry is now available in ten additional regions, including New Zealand, Thailand, Hyderabad, Osaka, Malaysia, Melbourne, Mexico (Central), Israel (Tel Aviv), Taipei, and Canada West (Calgary). The serverless, free registry supports Apache Avro, JSON, and Protobuf formats to validate and manage streaming data evolution. It serves as a centralized repository that reduces validation logic and cross-team coordination, improving data quality and lowering downstream failures. The registry integrates with C# and Java apps for Apache Kafka/MSK, Amazon Kinesis Data Streams, Apache Flink/Managed Flink, and AWS Lambda.

🛡️ At Black Hat USA 2026, researcher Malcolm Stagg disclosed NatJack, a class of attacks that manipulates NAT connection tracking tables to hijack TCP connections, poison DNS, and cause DoS without needing IP spoofing or Layer 2 access. Testing across 32 products revealed vulnerabilities in every implementation examined. Vendor responses varied from patches and CVEs to arguments that the issues reflect design limitations rather than security flaws. Stagg recommended monitoring NAT tables, enabling source IP protections, segmenting untrusted traffic, and disabling loose connection tracking modes as mitigations.

🛡️ Researchers at MIT CSAIL disclosed a new CPU side-channel exploit called TONTOU that bypasses neutralization-based Spectre v2 mitigations on Intel and AMD processors. They developed an Interrupt Injection technique to re-poison branch predictors after mitigation cleaning and demonstrated leaking kernel memory, including /etc/shadow hashes, from Linux machines. The team presented results at Black Hat USA and will publish further details at USENIX Security 2026.

🧭 Metaphor frames how we interpret emerging cybersecurity events, especially reports of autonomous AI agents escaping sandbox environments. The article argues that initial narratives — whether innovation or containment failure — shape long-term priorities like speed versus safety. Cisco Talos presents data showing adversaries weaponizing AI in diverse ways, urging defenders to adopt AI-enabled tools to triage alerts and shorten response windows.

🔒 Zapscape (CVE-2026-64561) is a Linux KVM/x86 shadow-MMU flaw that can let an attacker with kernel privileges in an L1 guest escape KVM isolation and run code on the host. Disclosed by researcher Hyunwoo Kim, the issue is a stale-root ordering bug causing a use-after-free during page-fault handling when nested virtualization is exposed. The upstream fix has been merged; administrators should update kernels or vendor packages that backport the patch.

🔒 Cisco issued patches for multiple critical vulnerabilities in Catalyst SD‑WAN and IOS XE Software discovered during an internal security review. The flaws—ranging from improper input validation and access control to command injection—affect many releases and have been fixed across several patched versions. Cisco noted these were found during testing, including use of frontier AI models, and are not known to be actively exploited, urging customers to update promptly.