Your CISO is becoming a safety architect (whether they know it or not)
The biggest risk to your enterprise is no longer the attacker on the outside. It's the agent on the inside.
General
20 articles
FCC passes new cybersecurity rules for emergency systems, undersea cables
The new rules would overhaul national emergency systems to protect against hijacking and update federal security review rules for undersea cables providers T...
Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release Yet
Curl fixed 18 vulnerabilities, including a 25-year-old bug, with issues spanning auth bypass, memory safety, and host validation in libcurl. Curl maintainers...
DHS chief says president has met with potential CISA nominee; agency plans to hire 600
Once a new CISA director is in place, the agency will ramp up hiring efforts, Homeland Security Markwayne Mullin told lawmakers. The White House has not yet ...
Microsoft quietly extends free Windows 10 ESU support to October 2027
Microsoft has quietly extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, allowing enrolled devices to ...
AI and Liability
Earlier this month, a German court ruled that Google is liable for its AI search summaries. Rejecting defenses like “users can check for themselves,” and tha...
Federal court rules Trump election-focused executive order illegal
Provisions setting up federal voter lists for each state and restricting mail ballots through USPS were declared unconstitutional. The post Federal court rul...
Microsoft a Leader in The Forrester Wave™ for Endpoint Management Platforms
Microsoft named a Leader in the Forrester Wave™: Endpoint Management Platforms, Q2 2026, with the highest scores in the current offering and strategy categor...
PirloTV sports piracy network disrupted as 44 domains seized
A major sports piracy ring linked to the illegal PirloTV streaming platform has been disrupted in an action that targeted 44 domains. [.
Agentic AI Pentesting Platforms Comparison
Agentic AI transforms Penetration Testing from a periodic consulting practice to a continuous validation discipline. While traditional pentests remain releva...
Upwind Security Brings AI Visibility to the Endpoint, Unifying Cloud and Device Security
Upwind’s AI Sensor links endpoint activity with cloud context, helping teams track MCP connections, AI actions, identities and developer risk in one view today.
Russia uses Cellebrite to break into human rights activist’s phone, even after cancellation of contract
The phone-cracking firm broke off from its deal with Russia, but Citizen Lab said that didn’t stop authorities from surveilling Andrey Pivovarov. The post Ru...
Another Russian dairy producer reportedly disrupted by cyberattack
A dairy products manufacturer in Russia's republic of Bashkortostan is the latest such company to have its operations snarled by a cyberattack.
Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript code. According to Island, th...
The Four Elevations of Effective Fraud Prevention
Fraudsters don't attack just one transaction. They target accounts, platforms, and entire ecosystems.
Checksum API Agent generates and maintains stateful API tests
Checksum has launched the API Agent, a continuous testing agent that generates and maintains journey-based tests for backend APIs. The agent builds multi-ste...
Reco Agent Security helps organizations govern AI agents and reduce exposure
Reco announced Reco Agent Security, which expands the Reco Platform with advanced capabilities that prevent data exposure, unintended use and process disrupt...
Website shames companies for not offering passkeys
The website whynopasskeys.com highlights that one in four major apps and services, including Instagram, Netflix, and Spotify, have yet to implement passkey a...
Mitiga unveils Agentic Runtime Security for cloud, SaaS, identity, and AI protection
Mitiga has announced Agentic Runtime Security, a new approach to runtime detection and response across cloud, SaaS, identity, AI, and third-party services th...
ControlMonkey connects backup visibility with cloud recovery readiness
ControlMonkey announced its Data Backup Correlation, a new capability that extends its Cyber Resilience Platform by connecting data backup posture with cloud...