It's honestly hard to follow everything. - Critical PHP vulnerabilities – Two RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619) trigger emergency patching and exploitation concerns. - LiteLLM supply-chain attack – Malicious package version 1.107.0 reportedly distributes credential-stealing malware and backdoors. - Microsoft Storm-0940 campaign – China-associated attackers reportedly use AI-assisted techniques for password spraying and OAuth abuse. - GitLab critical RCE – CVE-2026-110264, reportedly rated CVSS 10.0, threatens self-managed GitLab installations. - SafePay ransomware – CISA and FBI warn of ransomware activity affecting approximately 600 organizations. - Railway cloud breach – Attackers access customer environment secrets, potentially exposing API keys and database credentials. - Oracle security update – October Critical Patch Update reportedly addresses over 1,200 vulnerabilities across Oracle products. - Lazarus malware campaign – North Korean attackers reportedly adopt post-quantum cryptography in malware delivery. - AI Agents Becoming a Security Nightmare for U.S. Banks – Major banks, including JPMorgan, Bank of America and Wells Fargo, are restricting third-party AI agents after reports of unauthorized account access and actions potentially exceeding customer instructions. I'm listening to AI news summary each day and it's getting longer and longer.

Microsoft is pushing the SOC further toward an agentic operating model. ISOC brings SIEM, XDR, Threat Intelligence, automation and AI together directly inside the Microsoft Defender portal. 🤖 AI agents can investigate, reason and help take action 🔄 Detection, investigation and response become one continuous workflow 🧠 Humans move more toward decision-making, engineering and directing the defense ⚡ Some SIEM capabilities are available without starting with a traditional Sentinel deployment Microsoft describes ISOC as a foundation for the agentic SOC — and I think that wording matters. We are slowly moving away from the traditional model where L1/L2 analysts manually process endless queues of alerts. The future SOC will likely be built around security engineers + AI agents + automation, all operating on the same context. ISOC is currently in preview. In this preview phase, it is available to eligible Microsoft Defender Suite, Microsoft 365 E5 and E7 customers that don't already have an active Microsoft Sentinel workspace. Definitely something worth watching. 👉 Learn more: https://www.microsoft.com/en-us/security/blog/2026/09/23/reimagining-the-soc-for-the-agentic-era-in-microsoft-defender/

AM HAVING A CHALLENGE TO SET UP MY LAB

Am I can move forward! I help to set up my lab

Please help soc lab so i get a soc analyst job. I have just got security plus certificate but not getting job yet. i am burn-out with my current job.