You are a security leader at a small or medium-sized business (SMB), and your organization has decided to adopt Claude. If you are like me, after the initial “surprise” wears off, you probably want to quickly get your arms around… Read More "Security considerations for adopting Claude Code and Cowork for SMBs"
Cybersecurity leaders are increasingly concerned about their ability to detect threats as attackers shift beyond email to collaboration platforms such as Slack and Microsoft Teams. According to new research from KnowBe4, many organizations lack confidence in their visibility across these… Read More "Confidence Lacks in Threat Detection Across Non-Email Channels"
Vendor security questionnaires are frustrating, both to the organizations sending them and the vendors receiving them. While these frustrations remain unaddressed, they will only continue to impede the efficiency of vendor risk management programs. Fortunately, suffering through security assessments isn’t… Read More "Making the Vendor Questionnaire Process More Efficient in 2026"
Cisco on Thursday announced an agreement to acquire identity lifecycle security company WideField Security to strengthen the capabilities of Splunk’s Agentic SOC. No financial details have been publicly disclosed. WideField raised more than $11 million in Series A funding last… Read More "Cisco to Acquire WideField Security to Boost Splunk’s Agentic SOC"
Ravie LakshmananJun 19, 2026Mobile Security / Vulnerability Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby hackers to eavesdrop on users. The vulnerability, tracked as CVE-2025-20701 (CVSS score: 8.8),… Read More "Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone"
In the case of Copilot Enterprise Search, Microsoft had a guardrail in place that enclosed the LLM’s search responses inside blocks, presenting it to the browser as text. Varonis researchers found, however, that this wrapping did not apply until after… Read More "M365 Copilot SearchLeak: Your prompt injection attack surface just got bigger"
As two of the leading frontier AI labs, OpenAI and Anthropic, expand access to their most advanced large language models (LLMs), Claude Mythos and GPT5.5, with evidence of their capabilities to autonomously find and fix vulnerabilities at scale, the way… Read More "Patch Responsibility Remains Up for Grabs as AI Unearth Flaws At Scale"
Humans are often regarded as the weakest link in a cybersecurity program. Whether resulting from manipulative cybersecurity tactics or limited cybersecurity awareness, human errors remain the most prevalent attack vectors in every information security program, no matter how sophisticated your… Read More "Human Factors in Cybersecurity in 2026"
Law enforcement agencies in four countries, working with Europol and private partners, have disrupted SocGholish infrastructure and cleaned up nearly 15,000 infected WordPress websites. Active since 2017 and also known as FakeUpdates, SocGholish is a malware framework injected into websites… Read More "15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown "
Access to Anthropic’s most capable AI model has been extended to an additional 150 organizations, widening a program that uses frontier AI to find vulnerabilities in the world’s most critical software. Anthropic announced the expansion of Project Glasswing on June… Read More "Anthropic Expands Mythos Access to 150 More Organizations"
