It’s 11:40 am. A security questionnaire just hit your inbox. You open the file and quickly realize you can’t finish this alone. Legal needs to review the data processing language. Product has to complete the architecture section. Security is the… Read More "Stop chasing your team for security questionnaire answers"
New warnings from within the artificial intelligence industry have revived a long-running debate over whether advanced AI could escape human control and ultimately threaten humanity’s survival, and whether the companies developing the technology are doing enough to prevent such a… Read More "New Warnings About the Risks of AI to Humanity Revive a Long-Running Debate"
A malicious Twitch browser extension has been reportedly forwarding the live OAuth session tokens of around 31,000 users to proxy servers run by a Russian commercial bot service, according to Socket. The cross-store browser extension Twitch Enhanced Viewer | JeetBot… Read More "Malicious Twitch Extension Exposes 31,000 Users’ OAuth Tokens"
Security leaders can no longer treat workforce cyber risk as a quarterly phishing campaign. Shadow AI, sprawling SaaS adoption, generative AI-assisted social engineering, and siloed alerts leave many teams unable to answer a basic board question: which users and apps… Read More "Human Risk Management Platforms: How to Choose the Right Software"
China’s Ministry of Foreign Affairs on Monday hit back at a call from the head of Anthropic for the U.S. to curb China’s artificial intelligence capabilities, which he issued as he argued for a global slowdown on AI development. U.S.… Read More "Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development"
A human attacker has moved from a vulnerable Marimo notebook to an SSH bastion host in eight seconds using a toolkit built by hand, hitting a speed usually associated with AI-driven attacks. In a technical write-up published on September 11,… Read More "Human Attacker Hits Machine-Speed Exploitation of Marimo RCE"
Third-party vendors are an important source of strategic advantage, cost savings and expertise. Yet outsourcing is not without cybersecurity risk. As organizations’ reliance on third parties grow, so too does their exposure to third-party risk and fourth-party risk. A HSB… Read More "How to Automate Vendor Risk Management in 2026"
On Chinese social media, people have also reported experiencing variations of the scam involving other corporate software apps, including Webex, a video conferencing platform owned by Cisco, and Cliq, a workplace communication app owned by the Indian software giant Zoho.… Read More "Microsoft Teams Has Become a Haven for Scammers in China"
British fintech giant Revolut is notifying a subset of users that their personal and financial information was compromised in a data breach. Based in London, the neobank and financial technology company provides banking and investment services to over 80 million… Read More "Personal, Financial Info Exposed in Revolut Data Breach"
There’s a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbub. Vulnerability discovery is getting faster and happening at a much greater scale, while defenders still have to… Read More "AI Changed the Exposure Problem. Validation Needs to Change With It."
