Sigma-Hunter is a new domain-specific LLM for generating Sigma detection rules, fine-tuned from Mistral 7B and Phi-4 with LoRA on a curated dataset of 3,635 open-source Sigma rules. It aims to fix the invalid…

#opensource #ai #cybersecurity #detectionengineering
https://arxiv.org/abs/2610.09007

SOC & MSSP leaders must move beyond logs to intelligence-led threat monitoring, not just detection engineering. #ThreatIntelligence #SOC #MSSP #DetectionEngineering #Cybersecurity thedailytechfeed.com/how-soc-mssp...

"Ask the User to Approve" Is Not a Security Control www.darinor.com/blog/human-i... #AgenticAI #AgentArchitecture #HumanINTHELOOP #DetectionEngineering

#threathunting #agenticai #thrunting #detectionengineering #THORcollective

How to Build an Agent Audit Trail Before You Need It www.darinor.com/blog/how-to-... #AgenticAI #IncidentResponse #DetectionEngineering #AgentArchitecture

Microsoft mailed 974 patches. Cisco mailed root. AI coding assistant mailed a worm. This NightWatch report is the map of KEV clocks, stolen trust, & leak sites: inferlume.com/reports/nigh...

#CyberSecurity #ThreatIntelligence #Infosec #CISO #VulnerabilityManagement #DetectionEngineering #SOC

CVE-2026-76460 gives strangers root. Federal clock emds 2026-09-19. Settra, Pixel & two Windows zero days arrived in the same 24 hours.

Full Inferlume Report: inferlume.com/reports/dail...

#CyberThreatIntelligence #CiscoISE #CISAKEV #Ransomware #DetectionEngineering #SOC #VulnerabilityManagement

From Splunk to Sigma 🔍

I rebuilt a suspicious PowerShell detection as a Sigma rule, then converted it back to SPL and tested it with existing telemetry + Atomic Red Team.

medium.com/@citadelcybe...

#Cybersecurity #DetectionEngineering #Homelab

📢 Elastic publie un framework de détection des élévations de privilèges Linux couvrant 13 CVE 2026

📅 Source et contexte : Publié le 11 septembre 2026 par Ruben Groenewoud sur Elastic Security Labs, cet article s'inscrit…

🟢 vérification factuelle haute
#DetectionEngineering #LinuxLPE #Cyberveille

Firewall managers handing out root, 122500 routers open, Magento dropping Rust, Claude rebuilding malware. KEV clocks hit 12 Sep and 13 Sep.

Full Inferlume Report: inferlume.com/reports/dail...

#ThreatIntel #CyberSecurity #CISA #SOC #IncidentResponse #DetectionEngineering #Cisco #Ransomware

Root on the firewall brain, 153M licenses on Nexus, & agents stealing creds in six hours. Patch by 12 Sep. Hunt license.tmp first.

Read full Inferlume report here: inferlume.com/reports/dail...

#CTI #ThreatIntel #Cisco #CISA #InfoSec #VulnerabilityManagement #DetectionEngineering #IncidentResponse

974 Microsoft fixes, 2 live SYSTEM elevators, a CVSS 10.0 MSP console on a 11 Sep clock, 6 hour agentic theft, & named distillation of frontier models.

Full Inferlume report: inferlume.com/reports/dail....

#ThreatIntelligence #PatchTuesday #ThreatIntel #InfoSec #DetectionEngineering #AISecurity