In order to provide you with the best experience possible we might sometimes track information about you. Sometimes this may involve writing a cookie. We use this information for things like experience enrichment, analytics and targeting advertising. We recommend allowing these functions to get the most out of your experience.
OK
PHP2Shell: Your website may be vulnerable. What can an attacker reach next?
/by Jane Paolucci, CMOThis morning, I woke up to cybersecurity news stronger than a double espresso. Two critical vulnerabilities in PHP, the programming language behind WordPress and millions of other websites, had security teams scrambling to patch their servers. As CMO of RedSeal, I found myself looking at the news from two perspectives: as the executive responsible for […]
SINET New York 2026: Five Takeaways on AI, Exposure, and the Future of Cyber Defense
/by Jane Paolucci, CMOI recently joined cybersecurity leaders at SINET New York for a day of candid conversations about some of the industry’s toughest challenges. With 11 sessions, nearly 70 cybersecurity experts, and plenty of lively discussions in between, there was no shortage of opinions or ideas.
The opening session set the tone with a compelling […]
AI Is Accelerating Vulnerability Discovery. Exposure Management Has to Accelerate With It.
/by Renee HaasAI is changing cybersecurity on both sides of the equation.
Defenders are using AI to find vulnerabilities faster. Attackers are gaining new ways to analyze disclosures, develop exploits, and compress the time between discovery and attack. Meanwhile, security teams are already managing more vulnerabilities than they can realistically investigate or remediate.
New research from Google […]
One Packet, One Crash: What the TDengine Zero-Day Means for OT and IoT Environments
/by Wayne Lloyd, Federal CTO, RedSealIntroduction
Every so often a vulnerability disclosure isn’t remarkable for its sophistication it’s remarkable for how ordinary it is. That’s the case with CVE-2026-42542, a newly disclosed flaw in TDengine, the open source time-series database used across manufacturing, energy, automotive, and IoT environments to store sensor and telemetry data. Researchers at Ridge Security put […]
The Asymmetry Problem
/by Wayne Lloyd, Federal CTO, RedSealThis blog article is the second blog in a two-part series on the 2026 AI platform security incidents, and what they actually teach network defenders.
Why the most capable AI models refused to help defend against the attack — and what that tells us about AI-era network security
Here is a detail from Hugging Face’s […]
The Attacker Was the Model
/by Wayne Lloyd, Federal CTO, RedSealA two-part series on the 2026 AI platform security incidents, and what they actually teach network defenders
Part One: The Attacker Was the Model
What the 2026 Hugging Face intrusion actually teaches network defenders — and what the coverage got wrong
On July 16, 2026, Hugging Face published a security disclosure that read like the […]
When the Freezers Fail: What the DoD Commissary Incident Tells Us About OT Cyber Risk
/by Wayne Lloyd, Federal CTO, RedSealMost people don’t think of a grocery store freezer as part of the cyberattack surface. Maybe we should.
Beginning August 26, 2026, refrigeration systems at Defense Commissary Agency (DeCA) stores across the United States began experiencing unusual failures. Public reporting has confirmed problems at multiple military installations, while independent researchers have tracked as many as […]
The Future of Exposure Management is Preemptive
/by Renee HaasIs Your Security Program Ready for Autonomous Interdiction?
Security teams have never had more data. More vulnerability findings. More asset inventories. More threat intelligence. More dashboards.
Yet AI-enabled attackers can identify and exploit weaknesses faster than traditional, human-led remediation processes can respond. The challenge is no longer limited to finding and prioritizing exposures. Organizations need […]
Ten Mistakes, One Blind Spot: How RedSeal Helps You Preempt the Misconfigurations Attackers Count On — Across IT and OT
/by Wayne Lloyd, Federal CTO, RedSealHere is the uncomfortable truth every security leader already suspects: the agencies found these weaknesses even in organizations “with mature cyber postures.” Not because those teams are careless, but because modern hybrid environments have grown too large, too interconnected, and too fast-changing for any human or any spreadsheet, or any static Visio diagram to fully […]
The AI Was New. The Attack Path Wasn’t.
/by Jane Paolucci, CMOWhen OpenAI disclosed that one of its advanced models had compromised parts of Hugging Face’s infrastructure during a security evaluation, most of the coverage went to the obvious headline: an AI system acted like an attacker.
That’s the interesting part. Here’s the part that actually […]