A threat intelligence platform (TIP) is the software layer that bridges the gap between raw threat data and your team’s security decisions. It aggregates signals from open, deep, and dark web sources, normalizes indicators of compromise (IOCs), enriches them with… Read More "Best Threat Intelligence Platforms and Vendors"
The EU Cyber Resilience Act: Securing Digital Products
The EU Cyber Resilience Act (CRA) is a major piece of cyber legislation passed in 2024 in the European Union (EU) that regulates cybersecurity for digital products and services. The EU Cyber Resilience Act directly complements the NIS2 Directive, which… Read More "The EU Cyber Resilience Act: Securing Digital Products"
What is the EU Cyber Solidarity Act?
The EU Cyber Solidarity Act is a new initiative that follows the European Union’s latest efforts to build stronger cyber defenses against evolving cybersecurity threats. This legislation introduces a new strategy for enhanced cooperation between EU member states and focuses… Read More "What is the EU Cyber Solidarity Act?"
Cyber Resilience Act Preparedness: Who’s Ready, and Who Can’t Be Reached
Computers are not safe. Even the best hardware and software products have the potential to conceal as-yet unknown vulnerabilities. And they aren’t all made that well. Many are shuffled into the world without a plan to detect, remediate, and notify… Read More "Cyber Resilience Act Preparedness: Who’s Ready, and Who Can’t Be Reached"
What is the Critical Entities Resilience (CER) Directive?
The Critical Entities Resilience (CER) Directive is a new initiative in the EU that aims to ensure that critical entities providing essential services are effectively managing their network and information security. The CER Directive is part of the EU’s latest… Read More "What is the Critical Entities Resilience (CER) Directive?"
An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later
OpenAI’s agent had been conducting internet based research into health statistics in a development project by an internal OpenAI research team. When it could not access certain information, the agent attempted alternative ways until it found a work around and… Read More "An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later"
AI Is Getting Really Good at Messing With Cybercriminals
Welcome to Kernel Panic!, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To receive this newsletter in your inbox each week, sign up here. Even as AI supercharges… Read More "AI Is Getting Really Good at Messing With Cybercriminals"
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn’t
In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-on. The other thousand are invisible to identity infrastructure by default, not because anyone hid… Read More "The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn’t"
Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
A Kansas City, Missouri man has been sentenced to 32 months in jail for crimes related to a ransom attack against his own company. The DOJ has announced the sentencing of Daniel Rhyne. He had already pleaded guilty to ‘extortion… Read More "Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison"
Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
Anthropic on Friday said it’s cutting off live internet access for all its internal evaluations following the discovery of new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior and targeted real websites. The AI company said it… Read More "Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws"