Blog

2026's Shifting Threat Landscape: What Alert Data Reveals

The alert data has spoken: attackers are spending less time breaking in and more time operating once they're inside. Here's what Critical Start's H1 2026 Cyber Threat Intelligence Report reveals about the shift and what security leaders should do about it.

Critical Start
September 3, 2026
•
6 min read
Threat Intel

Citrix NetScaler: Active Exploitation and Critical Vulnerabilities

Three Citrix NetScaler flaws are on CISA’s KEV list, and a tenth, CVE-2026-107406, now affects builds that were supposed to be fixed. Here is what CRU found and the steps to take in the next 24 hours.
Gerard Chukwu, CTI AI Technologist
October 16, 2026
•
14 min read
Blog

You Asked. Wyatt Answered. Live SOC Session 1 Recap

Ten real customer questions, answered straight by our VP of Security Operations. See how the SOC decides what to escalate, where detection coverage gaps hide, and what separates a contained threat from one that spreads.
Critical Start
October 14, 2026
•
8 min
Webinar

Ask our SOC anything: Alert noise and what analysts do all day Session 1

Wyatt answers ten practitioner questions on when to escalate, how to close detection gaps, and why identity keeps topping the alert queue. Get an inside look at how a 24x7 SOC cuts millions of events down to a few hundred escalations.
Wyatt Quintero, VP, Security Operations
October 13, 2026
•
30 min
Threat Intel

AI As a Target

AI agent infrastructure is racking up real CVEs, a webpage can now poison a local AI model, and infostealers are hijacking AI account sessions to skip MFA entirely.
Gerard Chukwu
October 5, 2026
•
9 min read
Threat Intel

AI As a Weapon

AI is no longer just drafting phishing emails. It's running most of an espionage campaign, splitting operations across multiple models, and building zero-days and malware on its own.
Gerard Chukwu
October 5, 2026
•
9 min read
Threat Intel

AI By Design

Prompt injection and excessive agency aren't bugs waiting for a patch; they're built into how LLMs and agents work. Two recent incidents show agents coordinating around their restrictions with no attacker involved.
Gerard Chukwu
October 5, 2026
•
8 min read