Phoenix Security

Executive summary: The Cyber Resilience Act’s 24-hour early warning is a detection, attribution and decision capability rather than a document, and Phoenix delivers it as one evidence chain across Purple, Orange, Blue, Blue Shield and Green. Key takeaways 1. The problem From 11 September 2026, the Cyber Resilience Act’s reporting obligations apply directly. Any manufacturer [...

Exploit Hunt runs an adversarial three-persona pipeline inside Phoenix Purple's knowledge graph: attacker, skeptic, exploit developer. Every reported finding ships as a runnable proof of concept, not a severity label. In one verified run, 3 target files produced 9 confirmed exploits — and the skeptic gate correctly killed every disputed finding before it reached proof.

Phoenix Security releases Exploit Hunt at Black Hat USA 2026 — an AI red team that takes targets from a live threat model and reports a finding only after writing and validating a runnable proof-of-concept exploit. Available in Phoenix Purple now.

The post

An attacker hijacked the keyv/cacheable npm maintainer account and shipped a self-propagating Mini Shai-Hulud worm across 2 billion+ monthly installs, reaching most teams transitively through ESLint. Valid OIDC provenance masked the compromise. No CVE was assigned.

The post