%20(1).png?w=1140&fit=1140,855&ssl=1 "The User Risk Puzzle: Why Your Security Tools Don’t Add Up")
As a security leader, you face an inevitable daily reality: a flood of alerts pouring in from dozens of different tools. Risky sign-ins are flagged in Microsoft 365, weak passwords are pinged from a vault audit, and a separate report… Read More "The User Risk Puzzle: Why Your Security Tools Don’t Add Up"
Meta is the latest major AI developer to admit that its models broke loose during cybersecurity testing and hacked external systems. The tech giant said in a statement to the media on Wednesday that the incident occurred during independent evaluations… Read More "Meta AI Hacked External Systems During Cybersecurity Testing"
Ravie LakshmananAug 06, 2026IoT Security / Malware Cybersecurity researchers have disclosed details of a “factory-shipped backdoor” implanted in at least 20 Chinese router models from Zbtlink. According to a new report from VulnCheck, the implant appears in all 21 firmware… Read More "Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells"
When I first started working on enterprise AI security initiatives, I expected the biggest challenges to be technical. I assumed we’d spend most of our time discussing prompt injection, model security, vector databases or the latest LLM vulnerabilities. I was… Read More "Practical lessons from deploying AI securely at scale"
A group of over 120 tech organizations have published plans for a new information-sharing initiative focused on agentic AI threats. Members of NVIDIA’s Open Secure AI Alliance announced details of the Shared AI Findings Exchange (SAFE) on August 4. The… Read More "NVIDIA Group Proposes SAFE Initiative for Agentic Threat Intel Sharing"
.png?w=1140&fit=1140,855&ssl=1 "Detecting AI in the Software Supply Chain")
Using third-party generative AI services requires transmitting user inputs to those providers for processing. That puts fourth-party Artificial Intelligence vendors squarely within the jurisdiction of your organization’s Vendor Risk Management program. In other words, when third parties share your data… Read More "Detecting AI in the Software Supply Chain"
Cisco on Wednesday rolled out patches for two dozen vulnerabilities across its products, including critical-severity bugs in Catalyst SD-WAN, IOS XE, and Secure Firewall Management Center (FMC). For Catalyst SD-WAN, the company released five fixes, noting that the CVEs were… Read More "Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities"
Swati KhandelwalAug 06, 2026Cybercrime / Law Enforcement Connor Riley Moucka pleaded guilty in Seattle federal court on Wednesday to computer fraud, wire fraud, aggravated identity theft and a related conspiracy over the 2024 breaches of Snowflake customer accounts. The intrusions… Read More "Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People"
Centralized management consoles serve as the nerve center for enterprise network security. When a management plane is compromised, threat actors gain full visibility into firewall configurations, routing tables, and access control policies across the entire corporate infrastructure. The Cybersecurity and… Read More "Hardening Tier-0 Management Planes: Lessons from the Cisco Secure FMC Zero-Day (CVE-2026-20316)"
Healthcare finance software provider Craneware has disclosed a cyber incident that resulted in the theft of a significant volume of file names from its data environment. The company confirmed in a July 20 notice that it had identified a cybersecurity… Read More "US Hospital Finance Software Provider Craneware Reports Data Theft"
