An Intellyx Brief from Black Hat 2026
Threat intelligence vendor ZeroFox was at Black Hat demonstrating their new workflow-centric HNTR platform which helps security teams take action to discover, validate, and disrupt emerging external threats within the context of the enterprise’s own application environment.
Their platform continuously curates expert evidence of novel zero-days and reported CVEs, corrupted services and packages, and bad actors within app stores, shared repositories, vendor product updates, cybersecurity community resources, and the dark web, comparing the signatures of those threats with their customer’s’ domains, people, and assets that might be exploitable and at risk.
When legitimate alerts are discovered and validated as threats that could impact a system, their platform recommends disruption workflows for security and network operators. Countermeasure actions could include malicious domain or marketplace malware takedowns, blocking IP or API connections, rotating credentials, etc. Detailed cases and action reports can then become cybercommunity alerts, or communicated with the company’s downstream SIEM and SOAR platforms of record.

I particularly liked how the value proposition of ZeroFox made perfect sense without needing to call it an “Agentic AI First” solution – though there are several research, automation, and analytics features that do utilize agents under the hood.
Hot take from Black Hat: “Lately we’re seeing marketplaces as a strong focus area for finding fraud in apps, GPTs, and agents. New research that we’re presenting here at Black Hat turned up fraudulent agents hiding in plain sight, a new threat vector that has no signature of maliciousness until you interact with them, and on the 27th prompt it tells you to do something you shouldn’t do. So we’re working with agentic based sandboxing, to get our agent to interact with that agent to see if it prescribes some bad, malicious activity. It’s like putting a battle robot out there to go out and diffuse the bomb,” said Josh Mayfield, Sr. Director of Product Marketing, ZeroFox.
Copyright ©2026 Intellyx B.V. Intellyx is the change agent analyst firm focused on customer-driven, technology-empowered enterprise transformation. Our thought leadership distills insights across the rapidly evolving enterprise IT landscape, and our advisory helps you and your customers see through the hype and get beyond the fear of technology disruption to take action and realize value through change. At the time of writing, ZeroFox is not an Intellyx customer. No AI was used to write this article. To be considered for a Brain Candy article or have us visit you at an event, email us at pr@intellyx.com.


