Corelight Bright Ideas Blog

Featured

CVE-2026-70111: How Corelight uncovered a 0-Day affecting Microsoft Distributed File System

Corelight Labs found CVE-2026-70111 while fuzzing DFS APIs: A one-packet kernel crash that kills any affected Windows Server immediately.

Travis Green & Labs Team Oct 13, 2026

Stories by Johanna

Zeek

Detecting GnuTLS CVE-2020-13777 using Zeek

Find a technical description of the bug, how it can be detected in network traffic, and how a short Zeek script can detect vulnerable servers.

Johanna Amann Jun 11, 2020

Industry

The sun sets on TLS 1.0

The major web browsers announced their intent to disable support for TLS 1.0 and TLS 1.1 in 2020. What does this mean, and what are the consequences?

Johanna Amann Sep 16, 2019

Zeek

Runtime Options: the Bro Configuration Framework

Redefs allow the re-definition of already defined constants in Bro. This is often done in local.bro. To modify Site::local_net, use code similar to...

Johanna Amann Feb 13, 2018

AI that shows its work for a defensible SOC

The CISO’s guide to building a Mythos-ready security program

Open NDR Platform

Corelight announces cloud enrichment for AWS, GCP, and Azure

The Corelight Partner Program

Corelight DefeNDRs

Network Detection & Response

Corelight Bright Ideas Blog

CVE-2026-70111: How Corelight uncovered a 0-Day affecting Microsoft Distributed File System

Stories by Johanna

Detecting GnuTLS CVE-2020-13777 using Zeek

The sun sets on TLS 1.0

Runtime Options: the Bro Configuration Framework

Have questions?

Sign up for our newsletter

We’re hiring!

Get in touch