Please turn on your JavaScript for this page to function normally.
Focus spotlight
- Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
- Fireperf: Open-source network testing tool for firewalls and routers
- CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)
- Chainalysis breached using “offensive agentic techniques”
- Byoky: Open-source wallet for AI API keys
- What exactly is ISOC? And what does it mean for you?
Industry news
- Assured helps recovery teams find clean backups after ransomware attacks
- Shufti ties AI agent actions to verified owners and permissions
- Bedrock Data routes data exposure fixes to owners and verifies results
- ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls
- Digitate adds AI agents for patch planning, service desks, and SAP operations
CISO focus
- Qualys CISO on what security teams can do as exploit campaigns grow
- I underestimated how fast security teams would trust AI to act in the SOC
- Bellini Capital CISO on AI security governance and the limits of patching faster
- Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question
- AI agent permissions are outrunning security
AI
- What AI-generated malware looks like under the microscope
- Companies going all in on AI could see their strategy backfire
- Novee puts forgotten internet-facing assets through penetration testing
- Stolen AI access leaves companies with cloud bills of up to $1 million
- OpenAI raises top bug bounty payout to $172,000 with bonuses