Please turn on your JavaScript for this page to function normally.
Focus spotlight
- Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network
- Compromised camera management software gives attackers a way into corporate networks
- I underestimated how fast security teams would trust AI to act in the SOC
- Several AI security market categories are headed for bigger platforms
- Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support
- Product showcase: Stellar Cyber’s ISOC platform provides full-cycle architecture
Industry news
- Shufti ties AI agent actions to verified owners and permissions
- Bedrock Data routes data exposure fixes to owners and verifies results
- ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls
- Digitate adds AI agents for patch planning, service desks, and SAP operations
- Swimlane connects custom detections to AI-led investigation and response
CISO focus
- Qualys CISO on what security teams can do as exploit campaigns grow
- I underestimated how fast security teams would trust AI to act in the SOC
- Bellini Capital CISO on AI security governance and the limits of patching faster
- Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question
- AI agent permissions are outrunning security
AI
- Byoky: Open-source wallet for AI API keys
- Product showcase: Trust Onion uses rotating codewords to verify callers
- Ransomware gang talked AI agents into doing much of its dirty work
- Claude Code extension poisoned with persistent SSH backdoor
- Open-weight AI model GLM-5.3 cheated its way to correct answers