A mis-scoped Agent ID Administrator role in Entra ID allowed users to take ownership of unrelated service principals, ...

Accelerated use of AI in software development is rapidly altering the scope, skills, and strategies involved in securing code ...

AI isn't taking over the SOC; it’s turning analysts into "managers of agents" who oversee automated investigations instead of ...

Attackers published a malicious command-line version of the popular open-source password manager to the npm registry and may ...

Sean Plankey backed out of his CISA director nomination, but why he faced resistance is not a straightforward story.

The SECURE Data Act and GUARD Financial Data Act are unlikely to pass, but they preview the privacy fights CIOs, CISOs, and ...

The AI exposed hundreds of bugs in Mozilla’s web browser, raising hopes around defensive advantage, alongside fears of ...

Microsoft plans to integrate Anthropic’s Mythos AI model into its Security Development Lifecycle, a move that suggests advanced generative AI is beginning to play a direct role in how major software ...

Patching is not enough: applications embedding the insecure library will need to be rebuilt, and affected tokens and cookies ...

At Cloud Next ‘26, Google introduced AI-driven security agents, Wiz-powered multicloud protection, and new controls to secure ...

As Anthropic’s Mythos signals a shift to unprecedented machine-speed vulnerability discovery, EPSS is gaining renewed ...