Data, people and systems monitored, protected and documented from a single operations center.
ARXDOME: cybersecurity, reimagined

ARXDOME, your command center for cybersecurity
ARXDOME collects what happens on computers, servers and firewalls, turns it into security operations and shows it to you in your portal.
It is Blue Eagle Technology’s Cyber Risk Operations Center, delivered as a service: a multi-tenant platform on European infrastructure that your company connects to by installing small probes and pointing its firewalls to it. Suited to small businesses, larger organizations and public bodies.
ARXDOME key features
- Centralized monitoring of computers, servers and firewalls, with log collection and an inventory of every machine
- Every event enriched with geography, provider, threat lists and organization, and attributed to your company
- Containment: a suspicious machine is isolated from the network with ARXSens and released safely
- External risk: attack surface, lookalike domains, breached accounts and a score from A to F
- Log retention for the years required by your contract, on European storage with object lock
- 20 PDF report templates that can be scheduled, serving as evidence for GDPR, NIS2 and ISO 27001



ARX AURA: artificial intelligence working for the defenders
ARX AURA is the artificial intelligence built into the ARXDOME portal. It reviews detection rules and pipelines, explaining what they do, checks probe configuration templates and helps analysts interpret logs.
Every request to ARX AURA is logged, together with its cost: you always know when and how it was used.
On every statistics page ARX AURA writes a few sentences on what is happening, so the numbers make sense even if you are not an analyst.
In management reports it prepares the executive summary: what has changed, what needs attention, what to do.
Planned: anomaly detection and behavioral analysis, and a local language model, running on the platform’s own hardware, for response automation.
You will find them in the roadmap, with their progress.
A new standard for IT security and risk governance
Today security tools must do more than detect and respond: they must document. ARXDOME fits into the infrastructure you already have, on-premise, cloud or hybrid, without turning it upside down: all it takes is the probes on your computers and your firewall logs.
Every sensitive operation is protected: multi-factor authentication, allowed countries for each portal, a log of every sensitive action and four-eyes approval for anything that deletes or exposes data.
With ARXDOME you can:
- See your whole perimeter: computers, servers, firewalls and even network devices without a probe, discovered by ARX Watch
- Document compliance with reports and archives that serve as evidence for GDPR, NIS2 and ISO 27001
- Reduce operational risk with honest numbers, notifications you choose and an always up-to-date portal
The heart of cyber defense: modular, documented, transparent
A platform designed for visibility, protection and response, with a modular approach that adapts to every organization.
ARXDOME coordinates every component: it collects data from every probe, normalizes and enriches it in the pipeline, brings it to the operations centers (SOC, NOC, external risk, retention) and shows it in the customer portal. Our operators and your users look at the same numbers.
- ARX Sentry – Real-time monitoringSees everything that happens, from every probe.Logs, security events and inventory from computers running ARXAgt, firewall logs from the dedicated collector, SOC pages and the live NOC map.
- ARX Watch – Network discoveryFinds the devices nobody has declared.Listens to the network through the probes already installed and spots devices without a probe (a guest’s laptop, a printer, a NAS), with an alert for every new or unauthorized device.
- ARX Shield – Protection and containmentProtects, hardens and contains.Antivirus status on every machine, hardening checks, vulnerability management, network isolation.
- ARX Trace – Investigation and threat huntingReconstructs the facts from the evidence collected.Collections and hunts across multiple machines with ARXSens, event exploration, file changes and MITRE ATT&CK mapping.
- ARX Horizon – Threat intelligenceA single gateway for all your intelligence.Internal and external sources in one place, showing what stays in-house and what goes out; every event enriched in the pipeline.
- ARX Expose – Exposure and vulnerabilitiesWhat an attacker sees of your company from the outside.Attack surface, public services with known vulnerabilities, lookalike domains registered by others, breached accounts and a score from A to F.
- ARX Radar – Attacks in progress on the perimeterWho is attacking your public addresses right now.Reads the traffic reaching the firewall every minute and recognizes scans, brute-force attempts, floods and sources hitting several companies at once.
- ARX Scout – Authorized perimeter verificationOpen ports verified by us, with your authorization.Checks your public addresses at regular intervals from a dedicated, declared server and alerts you when a previously closed service opens. With ARX Scout Assessment it adds a non-invasive vulnerability assessment.
- ARX Retain – Log retentionKeeps logs for the years required, and returns them when needed.Long-term archive on European storage with object lock, restore on request, controlled expiry and a data timeline.
- ARX Probe – Penetration testingFind out what can be breached, before someone else does.A service delivered by the Blue Eagle Technology team: tailored penetration tests, with a report and remediation guidance.
- ARX Strike – Attack simulationPut your defenses to the test.Breach & attack simulation carried out by the Blue Eagle Technology team, to verify that your defenses react as expected.
- ARX Sanctum – Sandboxing and malware analysisBeing defined.The module for analyzing suspicious files in an isolated environment is being defined: you will find it in the roadmap.
- ARX AURA – Artificial intelligenceThe artificial intelligence that explains and summarizes.Reviews detection rules and configurations, explains the statistics and writes report summaries. Every request is logged with its cost.
Get ARX News by email All news
ARX News
Security insights and news
GitLab 19.5.1: new unauthenticated RCE, CVE-2026-110264
Cisco: critical RCE in Expressway, Unified CM and Snort 3 flaws
Node.js: ten vulnerabilities fixed, four rated high severity
Nvidia OpenShell: an architecture to contain AI agents
OpenAI: two AI agents weakened their own monitoring
Oracle CPU October 2026: 1,295 patches and five priority CVEs
APT28: Hookedge backdoor hits defense firms in two NATO states
Criminals use Cairn AI agents to breach over 100 companies
Chrome: ClickFix warnings and Gemini analysis of scam sites
Data Cymru: ransomware through a ‘Password1’ test account
eMudhra: trivial CA keys, revocations and trust stores to update
Microsoft: AI agents as insider threats, dynamic permissions
OVHcloud CLI: five releases hijacked with a secret stealer
PAN-OS GlobalProtect: CVE-2026-0257 exploited by Qilin and INC
PHP: two critical vulnerabilities, fixes expected October 21
Plex Media Server: four exploited CVEs in the CISA KEV catalog
UpdraftCentral key theft: backdoor plugins on WordPress sites
Ahold Delhaize: cyberattack, systems offline in Europe and US
DHS bans DeepSeek across US federal civilian agencies
Nikkei: stolen credentials expose 1.83 million records
OpenCode Console breach exposes AI provider API keys
Zero-click Pegasus found on Belgrade rector’s iPhone
Plex2Shell: Plex exploit chain exploited within a day
Rank Math PRO 3.0.123 compromised: backdoor on WordPress sites
Siemens Software Center flaw exploited in ClickFix DLL attacks
California: millions of students’ data stolen via ETS SFTP site
ConnectWise: compromised credential opens 162 Microsoft 365 tenants
AOMEI Backupper: backdoor served by servers tampered for minutes
BeyondTrust Remote Support zero-day exploited by Armory Castle
F5 NGINX: three critical flaws, possible unauthenticated RCE
Fortinet FortiOS and FortiProxy: CVE-2025-61624 exploited (KEV)
PwnEscape: critical Linux kernel flaw enables VM-to-host escape
AdFection: Candiru zero-click spyware delivered via targeted ads
Atlassian CVE-2026-21589 added to CISA KEV: it is exploited
AI decision models: prompt injection works against Jev too
Next.js: out-of-band patch for two critical RCEs (CVSS 9.5)
Silent Lynx targets CIS governments with WinRAR exploit
Legal Aid Agency: stolen records go back to 1978, probation too
Cisco Secure Email Gateway: path traversal exploited, CVSS 9.8
Cisco Secure Email Gateway zero-day: fixed releases and IoCs
SneakPeek: Claude Code’s preview pane exposed developer secrets
Hirudo: the Android trojan that replaces banking apps
Ivanti Connect Secure: UTA0576 steals AD credentials
Nextcloud: web shells via critical flaw in Collabora CODE
Palo Alto PAN-OS: code injection as root, exploited
PAN-OS zero-day CVE-2026-0322: fixed versions and IoCs
Ransomware: threats to employees and families to force payment
AI agents escaping tests: weak containment and AI Act limits
SiteGuard Server Edition: command injection exploited for root
Chrome: a $250,000 exploit chain built with AI in six days
Anthropic: small AI models edging towards self-replication on IoT
Cisco NX-API flaw CVE-2026-76471 also hits UCS 6300
Chrome VRP: Google raises rewards, but only partly
Ivanti Connect Secure: zero-day CVE-2026-104935 exploited
BlockStrap in Magento and Adobe Commerce: RCE via email templates
October 2026 Patch Tuesday: over 1,400 flaws and priorities
npm Trusted Publishing: SlugFest flaw exposed 1,500 packages
SAP October 2026 patches: CVSS 10 OAuth2 SSRF in Cloud SDK
TFG London: cyberattack hits Hobbs, Whistles and Phase Eight
Windows Shell CVE-2026-96951: command injection exploited
Danfoss AK-SM and AK-SC: compromises via exposed interfaces
GitLab CVE-2026-97229: Rapid7 reproduces RCE, 19.3 fix is 19.3.5
GitLab 19.4.2: critical RCE CVE-2026-97229 in CI/CD regex
Ledger: spy chip in CryptoBilis wallets, $93 million stolen
AI in SaaS and cloud: who bears the risk under vendor contracts
French supermarkets: Danfoss refrigeration sabotaged remotely
Claude and real websites: Anthropic cuts internet from its tests
ShinyHunters: ransom negotiator arrested in the US
AhsayCBS: unpatched flaws exploited for web shells and XMRig
Cisco ASA and FTD: exploited SSL VPN DoS, hot fix only
MongoDB: fixes for the Go Driver and libmongocrypt (AV26-1024)
NetScaler CVE-2026-107406: SAML IdP at risk even after patching
North Korean IT workers: advisory from NZ’s NCSC and Police
SharePoint CVE-2026-50522 exploited: patching is not enough
Apache Struts CVE-2016-3081: DMI code execution added to KEV
ARTEX: agentic AI pentest tool used against South Korean banks
Cisco NX-OS: critical flaws in Nexus 3000 and 9000, and more
Flax Typhoon: Integrity Tech’s MicroScan and FishHub seized
ISC BIND CVE-2015-5477: TKEY query DoS added to CISA KEV
AA26-281A advisory: Integrity Tech, Exchange, SoftEther, DCSync
Let’s Encrypt moves to 64-day certificates on February 10, 2027
Midnight Mimosa: proxy and ad fraud in budget Android firmware
Nvidia DCGM Exporter: unauthenticated DoS (CVE-2026-47483)
ONLYOFFICE Docs CVE-2021-3199: exploited path traversal and RCE
Post-quantum cryptography: Europol and the GAO sound the alarm
ProFTPD CVE-2015-3306: mod_copy file access added to KEV
Strapi CVE-2023-22894: sensitive data leaked via query filter
UAC-0099 refines its MATCHBOIL downloader and uses ASHVEIN RAT
Anthropic sets three tiers of Claude cyber access for defenders
AWS Strands Box: open source policy sandbox for AI agents
Hijacked .gh, .sl and .as ccTLDs used to get Google certificates
Cyber Resilience Act: Italy’s decree gives ACN market oversight
LunexStealer spread via fake Cloudflare checks on 100+ sites
PoeLLM: cryptomining botnet hides its C2 in a GitHub poem
Pwn2Own Ireland 2026: 98 zero-days; Galaxy S26, Pixel 10 hacked
Rogue AI agents: zero-days, RubyGems and AI Act duties
Luna Moth Files: Silent Ransom Group chats and the $207 million
SonicWall SMA1000: pre-auth SSRF flaw CVE-2026-102255
ASOS: rogue push notification after employee credential theft
Atlassian Data Center: CVE-2026-21589, unauthenticated file read
ClickFix hides its VBScript payload in the browser cache
Danish CPR: 8.8 million records via a company’s access
FortiBleed: FBI and Secret Service say FortiGate attacks continue
Red Hat Lightwell: over 400 Java vulnerabilities fixed
ClingSTUN: IoT devices turned into proxies with STUN
Denmark: unauthorised access to the CPR and identity checks
Exchange Server: out-of-band patch for CVE-2026-96940
Google pauses its open source bug bounty over AI reports
NetScaler zero-day CVE-2026-88779: DoS on SAML deployments
BPFDoor, Rekoobe and AVERAT: Linux backdoors hiding in email
OpenAI agents escape their sandboxes: 100+ organizations alerted
Cisco SD-WAN Manager: no workaround, check for compromise
Fortinet FortiMail: critical RCE CVE-2026-104286 exploited
MI5: over 100 academics in projects funded by China’s MSS
TA419: AitM phishing against AI policy experts
Zammad zero-day chain hits DIVD in AI agent-driven attack
CVE-2026-76504: Cisco SD-WAN Manager auth bypass exploited
Zammad: CVE-2026-102489 exploited, from session hijack to RCE
Zimbra CVE-2026-73570: SNMP flaw exploited before disclosure
Amazon Bedrock AgentCore: flaws that expose AWS credentials
Apple zero-day CVE-2026-86950: CoreGraphics flaw exploited
NetScaler zero-days: WHIPSHOT and SLAPSHOT malware, IoCs to hunt
ShinyHunters, the FBI and PeopleSoft: arrests and a missed patch
Citrix NetScaler zero-days exploited: intrusions in Finland
GitLab CE/EE: critical path traversal CVE-2026-85706 exploited
Threat Intelligence: Anticipating Cyber Threats
Threat Intelligence: Boost Cybersecurity with Red Timing
Internal and External Threat Intelligence: Stronger Together
External Threat Intelligence Makes Your Cybersecurity Stronger
How Internal Threat Intelligence Improves Your Cybersecurity
Let’s talk today
Contact: security starts with a conversation
Wondering how to protect your company?
Write to us, with no obligation.
Let’s talk































































































































