Experts on Experts: Why AI and Compliance Are Forcing A New Security Operating Model

Collection of Rapid7 posts covering how frontier AI is accelerating vulnerability discovery and forcing changes to security operating models and compliance (NIS2), the shift toward unified security operations/SIEM (Incident Command), and active threat and tooling updates. Key technical highlights: Metasploit added modules including an unauthenticated Paperclip AI full RCE (CVE-2026-41679) and a local NTLM relay → SYSTEM privilege escalation; a Dropping Elephant campaign using DLL side‑loading (Fondue.exe), Donut in-memory shellcode, and hardened RAT tradecraft that evades disk-based detection.