In today’s interconnected business landscape, outsourcing to third-party vendors and service providers is an effective method for most organizations to improve operational efficiency and lower financial costs. However, as businesses form third-party partnerships, they inherit potential risks and increase the… Read More "Building a Robust Vendor Risk Management Dashboard"
Cybersecurity and intelligence agencies in the US, UK, and Netherlands have issued a joint advisory warning of a Windows malware family dubbed Chosen Brick, deployed by Iranian state cyber actors to target dissidents, activists, and journalists worldwide. Active since at… Read More "US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware"
Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension.… Read More "One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude"
AI agents’ actions are out of scope for new guidance from US authorities on securing identity and access tokens, but there is still plenty enterprises can do to protect their systems from rogue humans and AI agents alike. “Protecting Tokens… Read More "AI agent authorization risks remain a gap in new NIST-CISA token security guidance"
Microsoft on Monday issued out-of-band updates to address several issues caused by this month’s massive, record-setting Patch Tuesday. The emergency patches fix problems with Remote Desktop Services (RDS) that came to light last week, as well as unintended side effects… Read More "Microsoft Issues Emergency Fixes After Massive Patch Tuesday"
Security leaders who already use the NIST Cybersecurity Framework often assume it covers AI, but it doesn’t. The Cybersecurity Framework (CSF) protects the confidentiality, integrity, and availability of the systems around a model. Outcome risk from model decisions is a… Read More "NIST AI RMF 1.0: The AI Risk Management Framework"
Ursula von der Leyen, the current President of the European Commission, delivered the State of the European Union 2026 speech on September 16, 2026, at 9:00 am CEST. It was naturally heavy on European political theory (center left freedom protected… Read More "EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media"
Static analysis reads a file’s code and structure without running it, which catches obviously malicious code but misses anything that only reveals itself at runtime. Dynamic analysis runs the file inside an isolated environment and records what it actually does:… Read More "Integrated Malware Sandboxing for Faster EDR Investigations"
Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky. The cybersecurity vendor said it has identified attacks mounted by NightEagle (aka APT-Q-95),… Read More "Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers"
Enterprise concerns While the debate is often framed as a choice between slowing innovation and strengthening oversight, analysts said enterprises should focus less on which approach prevails and more on the operational consequences already taking shape. “Divergent safety approaches will… Read More "Big Tech’s AI safety rift signals disruption and disparity for enterprises"
