Passion for the job is the secret of a successful career. Russ Kirby has been CISO at Ping Identity since the summer of 2023. Before then he was CISO at Creditsafe, and then CISO at ForgeRock. Prior to that he… Read More "CISO Conversations: Russ Kirby – Passion Is the Antidote to Burnout"
Swati KhandelwalAug 04, 2026AI Security / DevSecOps Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent.… Read More "Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent"
Manual operation is a designed capability, not a folk memory. It requires procedures that exist on paper — literally on paper, because the HMI may be what you just lost — people trained on them, and decision rights assigned in… Read More "The Minnesota attackers may hold a better backup of your plant than you do"
ESET researchers examined CVE‑2025‑50165, a serious Windows vulnerability described to grant remote code execution by merely opening a specially crafted JPG file – one of the most widely used image formats. The flaw, found and documented by Zscaler ThreatLabz, piqued… Read More "Revisiting CVE‑2025‑50165: A critical flaw in Windows Imaging Component"
A study conducted during Infosecurity Europe 2026 has found that AI-powered attacks at scale are the biggest security concern facing many cybersecurity professionals. The survey of 168 cybersecurity leaders across various sectors conducted by Filigran during the three-day event found… Read More "AI Threats and Alert Fatigue Challenge Cybersecurity Teams"
Employees across organizations are using AI to harness its potential to automate, coordinate, and optimize complex workflows. Some of that happens through tools IT has reviewed and approved. A lot of it happens through personal accounts and browser extensions nobody… Read More "Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer"
An XDR strategy is a plan for collecting and correlating security data from multiple sources, endpoint, network, identity, cloud, and email, into one platform that detects threats faster and automates response across all of them, rather than relying on any… Read More "Why Endpoint Data Alone Isn’t Enough for an XDR Strategy"
The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication (MFA)… Read More "Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens"
Airlock Digital, a leader in preventative endpoint security, today announced Agentic AI Control & Governance at Black Hat USA 2026. The new capabilities build on application control by providing command- and session-level visibility into trusted AI agent behavior, centralized policy… Read More "Airlock Digital Unveils Agentic AI Control & Governance to Extend Preventative Endpoint Security"
Have you ever received a package you never ordered? It could be a warning sign that your data has been compromised, with more fraud to follow. 23 Dec 2025 • , 5 min. read Global e-commerce sales are predicted to… Read More "A brush with online fraud: What are brushing scams and how do I stay safe?"
