Prophet AI Blog
Discover the Prophet AI Blog, your go-to source for the latest security insights and news, helping you stay ahead in threat detection and investigation.
Discover Prophet AI for Security Operations
See for yourself how AI can transform the way security teams operate
.webp)
.webp)
Data Exfiltration Detection: How to Hunt Staging, DNS Tunneling and Bulk Downloads
Data exfiltration detection beyond DLP: how to hunt staged archives, transfer tools, DNS tunneling and bulk cloud and SaaS downloads in the logs you have.
php2shell: Detecting and Investigating CVE-2026-109618 and CVE-2026-109619
CISA lists php2shell (CVE-2026-109618, CVE-2026-109619) as exploited. How to scope exposed PHP hosts and appliances, and hunt for signs of exploitation.
BeyondTrust Remote Support Zero-Day: Detecting and Investigating CVE-2026-102764
ARMORY CASTLE used the BeyondTrust Remote Support zero-day, CVE-2026-102764, to get root and target the credential vault. How to hunt for it once logs are gone.
Session Hijacking: Detection and Investigation
How to detect and investigate session hijacking: the four signals that separate a replayed session from a traveling user, and what containment has to revoke.
What the CrowdStrike Agentic SOC Means for Security Operations
The CrowdStrike agentic SOC puts AI agents to work on Falcon data. Which parts are available today, what the agents see outside Falcon, and what to check first.
