Please turn on your JavaScript for this page to function normally.
Focus spotlight
- Brotli bug reaches far beyond Node.js (CVE-2026-111497)
- Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support
- Private repos still leak secrets to Gheist, a stolen GitHub token campaign
- Microsoft Authenticator vulnerability let rogue Android apps steal work account access
- Product showcase: Stellar Cyber’s ISOC platform provides full-cycle architecture
- Drone program compliance: What a CTO says most agencies get wrong
Industry news
- ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls
- Digitate adds AI agents for patch planning, service desks, and SAP operations
- Swimlane connects custom detections to AI-led investigation and response
- VikingCloud gives businesses a scorecard for AI governance readiness
- Socure links AI agents to verified people and businesses
CISO focus
- Qualys CISO on what security teams can do as exploit campaigns grow
- I underestimated how fast security teams would trust AI to act in the SOC
- Bellini Capital CISO on AI security governance and the limits of patching faster
- Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question
- AI agent permissions are outrunning security
AI
- Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop
- Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws
- I underestimated how fast security teams would trust AI to act in the SOC
- Upwind secures $400 million to protect AI across endpoints, code, and cloud
- Bellini Capital CISO on AI security governance and the limits of patching faster