Binary Defense

Welcome to the Era of NightBeacon live-demo.nightbeacon.binary…

Heading to BSides Columbus next week? So are we. The Binary Defense team will be on the floor November 6th, and we want to hear what’s keeping you up at night. Alert fatigue, stretched-thin teams, threats that show up at 2 a.m. on a holiday weekend. Bring the tough questions and we’ll bring straight answers. Stop by to see how NightBeacon keeps a human-first defense working for you around the clock, so your team can focus on what matters most. Columbus, let’s talk shop. See you there.

Good hats. Better conversation. Thanks to everyone who joined Binary Defense and @PaloAltoNtwks at Haywire in Plano yesterday. We dug into how AI-speed attackers are reshaping the SOC, swapped real-world stories, and sent every guest home with a custom felt hat from @McKinneyHatCo. Thank you to their team for fitting every head in the room. Defense is a team sport. Dallas showed up.

Quest Diagnostics just disclosed a breach of the portal healthcare providers use to order lab tests and pull results. Patient records were likely accessed, and operations kept running. That combination tells you something. Our CTO Jason Vest weighed in for HealthcareInfoSecurity: “That looks a lot more like data theft and extortion than traditional ransomware.” Test results, insurance details and portal credentials keep their value long after the breach is contained. Jason explains why labs are in the crosshairs and what that means for defenders: hubs.li/Q04CjW7c0

Automating security decisions with AI won’t always give you the best containment scenario. AI should inform, but humans still need to make the critical decisions.  That’s exactly how NightBeacon CMD operates. It provides the evidence analysts need to make an informed decision. But the analyst still owns the decision.  See how NightBeacon CMD works: binarydefense.com/nightbeaco…

A detection that never fires looks exactly like a well-tuned one. You wouldn't know the difference until it was too late. We gave an AI detection engineer one rule: prove the detection works against real data, or explain why it can’t. In one run it found a rule that could never fire, tuned a noisy one with evidence, and called an empty environment “not covered” instead of faking it. ARC Labs walks through the full run, including what it handed back to a human: hubs.li/Q04Cbs3S0

Attackers are using AI to move faster. Defenders can too. @HackingDave opened IANS New York on AI as a force multiplier. Not a replacement for analysts, but a way to do more with the team you have. See it in action with our team on the IANS NYC floor today.

Attackers used to need 15 minutes to get a foothold, and hours or days to get everything they were after.  They can now do it all in a few minutes.  AI is changing the game for attackers. Defenders need to adapt.  Hear the full breakdown from our CEO David Kennedy, Chief Strategy Officer Rafal Los, and TrustedSec's Ryan Macfarlane and Carlos Perez on how defenders are adapting in the era of AI enabled attacks: hubs.li/Q04Bz4Ly0

Most AI grades its own homework: reviewers see the model's answer, agree, and the agreement becomes training data.  In NightBeacon CMD, adjudicators commit their verdict before they ever see the model's.  Blind by design.  See it for yourself: hubs.li/Q04BhhGb0

Last weeks Citrix 0-Day laid an egg and your SIEM likely never saw it. Attackers hid a payload in a NetScaler crash log and dropped a forked RAT. ARC Labs has the IOCs, KQL hunts and YARA rules in our breakdown below. Read the full blog here: hubs.li/Q04B7yL_0

How a response action works in NightBeacon CMD: The analyst requests. The admin approves. The connector executes. Approval-gated by default. Never auto-executed. Every autonomy flag ships off. Autonomy without accountability is a liability. See what's possible: hubs.li/Q04B7tgV0

Day one at InfoSec World 2026 is underway, and our team is set up and ready. If you're at the show this week, come find us at Booth #331. We'd love to hear what's on your radar this year and talk through how NightBeacon MDR's human-first approach helps security teams stay ahead of what's coming. Stop by and say hello. Think fast. Fight smart. Stay human.

Fewer Russian bots doesn't mean less risk. Our CTO Jason Vest spoke with @Newsweek about the Ukrainian strikes on Yandex data centers. His take: operators will rebuild and adapt, so watch whether the drop holds or the activity just moves. Read the full article here: hubs.li/Q04B13__0

We're on the floor at InfoSec World 2026. Our team is here all week. Stop by Booth #331 to talk about what's actually hitting your environment and how NightBeacon MDR's human-first approach helps you outlast it. Come say hello and bring your toughest questions. Think fast. Fight smart. Stay human.

"Five to seven hours of work, down to about two minutes." That's the incident response stat that stopped the room at our AI panel. AI lets defenders move faster, but human analysts still get to own the decision.  Watch the full panel here: hubs.li/Q04zVmnR0

Most security AI always gives you a number, whether it knows or not. NightBeacon CMD abstains — in plain language. And a missing score never means benign. Something rarer than confidence: honesty about uncertainty. Take a closer look: hubs.li/Q04zChQh0

We're here. Wild West Hackin' Fest is officially underway, and the Binary Defense team is set up in the Sponsor Corral. Come hunt with us. Swing by to meet the team and see how NightBeacon MDR keeps real people on your threats 24/7. Whether you're rethinking your detection strategy or just want to talk shop, we'd love to hear what's keeping your security team up at night. Today at 12:00 PM MT, our CEO and founder @HackingDave takes the stage. Grab a seat, then come find us in the Sponsor Corral to keep the conversation going. Think fast. Fight smart. Stay human. #WWHF

The worst sentence in security: "the AI said so." NightBeacon CMD shows its work — token attribution, MITRE mapping, a second-opinion judge on every finding. Your analysts make every call, and can show exactly why. Get a firsthand look: hubs.li/Q04zk0hp0

Mark your calendar: @HackingDave takes the stage at Wild West Hackin' Fest on Thursday, October 8 at 12:00 PM MT. AI Battle Royale: Dave Kennedy vs. John Strand. Who benefits more from AI, attackers or defenders? Dave and John go head-to-head on one of the biggest questions in cybersecurity today, moderated by Ed Skoudis, live on the Main Stage at Deadwood Mountain Grand. Then swing by the Sponsor Corral to keep the conversation going.