Orca's Gil Geron on securing the AI-powered enterprise
Geron explores why security must evolve alongside the next generation of AI-powered software creation.
general
20 articles
Island's Michael Leland on the hidden risks of the AI supply chain
Leland discusses how enterprises can govern AI capabilities without slowing adoption.
Black Hat 2026: Open-source tool makes red teaming AI agents up to 125x cheaper
NVIDIA researchers shared the “AgentBreaker” tool and how they tuned an open-source model to perform at frontier level.
Gut feeling does nothing against AI spear phishing texts
A banker at a credit union sat down at a table with a dozen printed text messages, all of them written for that banker personally, and put them in order from...
Top 10 Best External Attack Surface Management (EASM) Platforms 2026
In the sprawling digital ecosystem of 2026, organizations grapple with an increasingly complex and often poorly understood external attack surface. This atta...
Top 10 Vulnerability Assessment and Penetration Testing Companies 2026
In today’s interconnected digital world, no organization is truly safe from cyber threats. A single unpatched vulnerability can become an open door for a dev...
Frank Vukovits on how Delinea delivers runtime authorization for AI agents
Vukovits breaks down why verifying access at connection time is no longer enough.
Intruder's Chris Wallis on AI pentesting and the future of cybersecurity
Wallis dives into the nuances of AI-enabled security and how these offerings will impact midmarket security teams.
Ido Geffen on why Novee owns the full AI pentesting stack
Novee's Geffen breaks down what it means to own the full AI pentesting stack.
Ramin Farassat on how Menlo Security is securing AI agents from prompt injection
Farassat discusses how security teams can put controls on the agent attack surface without blocking agentic AI outright.
OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it
OpenAI is rolling out a more reliable version of ChatGPT GPT-5.6 Sol for Plus and Pro users, while Free users are getting unlimited text chats with GPT-5.
ClickFix attack pushes macOS infostealer for crypto theft attacks
A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and ...
North Korea linked to new NullReceiver C2 technique
The Hacker News reports that North Korean threat actors have developed a new command-and-control (C2) technique called NullReceiver, an evolution of the Ethe...
OVSwrap vulnerability allows local privilege escalation on Linux
As reported by Security Affairs, a 13-year-old Linux kernel flaw named OVSwrap was disclosed, enabling local users to gain root privileges on many default-co...
When AI Commits Felonies - PSW #938
Mimecast's Leslie Nielsen on why human risk doesn't stop at people
Mimecast's Nielsen argues that treating agentic AI as a new security category is the wrong instinct.
Capitol Hill wants to know if executive branch, foreign allies coordinated enough to combat scams
A Senate Foreign Relations Committee hearing explored how 13 federal agencies and myriad foreign governments are wrestling with the problem. The post Capitol...
Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group
A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group r...
Optiv's John Hurley on simplifying cybersecurity
John Hurley discusses Optiv's ability to advise, deploy and operate complete cybersecurity programs.
Paperclip authorization bug exploited, leads to control plane takeover
Critical Paperclip flaws let attackers seize AI agent platforms, escalate privileges, and execute code.