Atomicorp — Own Your Security. Protect Your Data.
Security Built on OSSEC
- Website
- atomicorp.com · all feeds from this site
- Feed URL
https://atomicorp.com/feed/
Read it in your FeedListing reader
Or add to: Feedly Inoreader Raw feed
Latest posts
-
There Is Still No Such Thing as a Zero Day: Staying Ahead of the Vulnpocalypse
The zero day claim, 20 years on, and the amassing vulnpocalypse About twenty years ago I told a conference audience that there is no such thing as a zero day. I meant it then and I mean it more now. A “zero day” is a fact about the vendor’s calendar: the bug became public before…
-
Protecting Industrial Operations from Legacy IT Security Risks
Legacy systems in OT environments often include aging Windows, Linux, and Unix-based computers that configure, monitor, and manage industrial equipment. These systems can introduce vulnerabilities into critical operations, while compatibility and uptime requirements complicate…
-
CVE Research Tools from Atomicorp
Atomicorp CVE Research Tools provide answers during uncertain times. A new CVE has been identified! How do you determine whether it affects your environment, whether a patch is available, and what protections may already stand between the vulnerability and an attacker? Atomicorp…
-
The WAF Blind Spot: What Basic Web Application Protection Can Miss
A WAF can be running, correctly configured, and blocking known attacks while still leaving significant gaps in application security. Limited inspection, outdated WAF rules, exposed APIs, and unpatched software vulnerabilities can create security gaps that attackers may exploit.…
-
SIEM Security Monitoring: Turn Security Data Into Action
Leverage SIEM security monitoring in an endpoint detection and response (EDR) system that provides multi-SIEM and multiplatform flexibility. What Is SIEM Security Monitoring? Security information and event management (SIEM) brings security events, logs, and other telemetry…
-
The Vulnerability Came Back: Why Old CVEs Still Demand Attention
Old vulnerabilities do not necessarily disappear from attackers’ playbooks. Instead, older CVEs can remain actively exploited years after their initial disclosure, particularly when vulnerable legacy and end-of-life (EOL) systems remain in operation. As artificial intelligence…
-
Compensating Security Controls for When You Can’t Patch
Can’t Patch Old Software Vulnerabilities? Use Compensating Security Controls Unpatched software systems are an unfortunate reality for many organizations. When vulnerable IT and OT systems can’t be patched, compensating security controls and a defense-in-depth strategy help…
-
The Endpoint Never Went Away: Why Host-Based Security Still Matters
Host-based security remains a critical layer of cybersecurity even as organizations shift infrastructure and security operations to the cloud. Servers, workstations, virtual machines, cloud instances, container hosts, legacy systems, and OT endpoints still run applications,…
-
Who—or What—Changed That File? File Change Monitoring for Modern Security
File change monitoring can tell organizations much more than whether an important file was modified. Modern file integrity monitoring (FIM) can provide valuable event data about what changed, when and where it happened, and who or what was responsible. Combined with real-time…
-
When AI Agents Become Attackers: Lessons from the OpenAI and Hugging Face Incident
In July 2026, an autonomous AI agent escaped an OpenAI security evaluation environment, reached the public Internet, compromised third-party infrastructure, and ultimately penetrated production systems at Hugging Face. This was not a hypothetical demonstration. Hugging Face…
-
CMMC Phase 2 Suspension Isn’t a Reason to Stop Preparing
The CMMC Phase 2 suspension gives defense contractors more time to prepare, not a reason to stop preparing. Here are some reminders and recommendations for the meantime. The Cybersecurity Maturity Model Certification (CMMC) program was headed toward an important milestone on…
-
How AI Increases the Security Risks of End-of-Life Software, and What You Can Do About It
End-of-life software with unpatched vulnerabilities offer low-hanging fruit for AI-assisted cyberattacks. Orchestrating defense in depth around unsupported systems can reduce the attack surface, strengthen detection and response, limit the blast radius, and buy defenders more…