Hermes — Tuesday 24 March 2026

1

🔐 security SecurityWeek

77%

M-Trends 2026: Initial Access Handoff Shrinks From Hours to 22 Seconds

The latest M-Trends report is based on insights from over 500,000 hours of Mandiant incident response investigations in 2025. The post M-Trends 2026: Initial Access Handoff Shrinks From Hours to 22 S…

Novelty

80%

Depth

75%

Practical

70%

Surprise

82%

Relevance

85%

https://www.securityweek.com/m-trends-2026-initial-access-handoff-shrinks-from-hours-to-22-seconds/

2

📦 m365 Petri IT Knowledgebase

75%

CISA Warns Attackers Abused Microsoft Intune to Wipe Devices in Stryker Cyberattack

The Cybersecurity and Infrastructure Security Agency has issued a new alert urging organizations to harden their endpoint management systems after a recent cyberattack on Stryker exposed critical sec…

Novelty

75%

Depth

65%

Practical

80%

Surprise

70%

Relevance

90%

https://petri.com/cisa-microsoft-intune-abuse-stryker-cyberattack/

3

🔐 security Microsoft Security Blog

75%

Case study: How predictive shielding in Defender stopped GPO-based ransomware before it started

Microsoft Defender stopped a human-operated ransomware attack that abused Group Policy Objects (GPOs) to disable defenses and push encryption at scale. This case study breaks down the attacker’s play…

Novelty

70%

Depth

75%

Practical

80%

Surprise

60%

Relevance

88%

https://www.microsoft.com/en-us/security/blog/2026/03/23/case-study-predictive-shielding-defender-stopped-gpo-based-ransomware-before-started/

4

📦 m365 Petri IT Knowledgebase

72%

Microsoft Extends Unified RBAC to Sentinel With Row‑Level Access Controls

Microsoft Sentinel is raising the bar for secure collaboration by adding support for Unified RBAC and row-level access controls. The update enables multiple teams to operate within a shared environme…

Novelty

65%

Depth

70%

Practical

85%

Surprise

40%

Relevance

92%

https://petri.com/microsoft-sentinel-unified-rbac-row-level-access/

5

🤖 ai The Decoder

64%

Terence Tao says AI drives idea generation cost to near zero but shifts the bottleneck to verification

Terence Tao compares AI's impact on mathematics to the automobile's effect on cities: new technology needs new infrastructure, or it just clogs the old roads. His analysis applies far beyond math. Th…

https://the-decoder.com/terence-tao-says-ai-drives-idea-generation-cost-to-near-zero-but-shifts-the-bottleneck-to-verification/

6

🤖 ai The Decoder

63%

Andrej Karpathy says humans are now the bottleneck in AI research with easy-to-measure results

AI developer Andrej Karpathy let an autonomous agent optimize his training setup overnight, and it found improvements he'd missed despite two decades of experience. The article Andrej Karpathy says h…

https://the-decoder.com/andrej-karpathy-says-humans-are-now-the-bottleneck-in-ai-research-with-easy-to-measure-results/

7

🔐 security SecurityWeek

63%

Aqua’s Trivy Vulnerability Scanner Hit by Supply Chain Attack

Hackers published a malicious scanner release and replaced tags to point to information-stealer malware. The post Aqua’s Trivy Vulnerability Scanner Hit by Supply Chain Attack appeared first on Secur…

https://www.securityweek.com/aquas-trivy-vulnerability-scanner-hit-by-supply-chain-attack/

8

🔐 security Krebs on Security

62%

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infecte…

https://krebsonsecurity.com/2026/03/canisterworm-springs-wiper-attack-targeting-iran/

9

🔐 security SecurityWeek

61%

Oracle Releases Emergency Patch for Critical Identity Manager Vulnerability

CVE-2026-21992 can be used without authentication for remote code execution and it may have been exploited in the wild. The post Oracle Releases Emergency Patch for Critical Identity Manager Vulnerab…

https://www.securityweek.com/oracle-releases-emergency-patch-for-critical-identity-manager-vulnerability/

10

🤖 ai The Decoder

61%

OpenAI publishes a prompting playbook that helps designers get better frontend results from GPT-5.4

In a new guide, OpenAI explains how front-end designers can get better results from GPT-5.4 when building websites and apps and how to stop the model from falling back on generic designs. The article…

https://the-decoder.com/openai-publishes-a-prompting-playbook-that-helps-designers-get-better-frontend-results-from-gpt-5-4/

11

🤖 ai The Decoder

61%

Math needs thinking time, everyday knowledge needs memory, and a new Transformer architecture aims to deliver both

A German research team lets Transformer models decide for themselves how many times they think about a problem. Combined with additional memory, the approach outperforms larger models on math problem…

https://the-decoder.com/math-needs-thinking-time-everyday-knowledge-needs-memory-and-a-new-transformer-architecture-aims-to-deliver-both/

12

🤖 ai The Decoder

59%

OpenSeeker's open-source approach aims to break up the data monopoly for AI search agents

With just 11,700 training data points and a single training run, the AI search agent OpenSeeker achieves results that rival solutions from Alibaba and others. Data, code, and model are all openly acc…

https://the-decoder.com/openseekers-open-source-approach-aims-to-break-up-the-data-monopoly-for-ai-search-agents/

13

⚡ tech The Verge

56%

The US government just banned consumer routers made outside the US

In December, the Federal Communications Commission banned all future drones made in foreign countries from being imported into the United States, unless or until their maker gets an exemption. Now, t…

https://www.theverge.com/news/899172/fcc-foreign-router-ban

14

🔐 security SecurityWeek

55%

Tycoon 2FA Fully Operational Despite Law Enforcement Takedown

Attack volumes are back to pre-disruption levels, and the adversary tactics have remained unchanged. The post Tycoon 2FA Fully Operational Despite Law Enforcement Takedown appeared first on SecurityW…

https://www.securityweek.com/tycoon-2fa-fully-operational-despite-law-enforcement-takedown/

15

🤖 ai Import AI

54%

Import AI 450: China’s electronic warfare model; traumatized LLMs; and a scaling law for cyberattacks

Welcome to Import AI, a newsletter about AI research. Import AI runs on arXiv and feedback from readers. If you’d like to support this, please subscribe. A somewhat shorter issue than usual as I had …

https://jack-clark.net/2026/03/23/import-ai-450-chinas-electronic-warfare-model-traumatized-llms-and-a-scaling-law-for-cyberattacks/