SC Media, Saturday, October 17th, 2026
AI in Network Detection and Response: What Still Requires Deterministic Evidence
When AI-driven NDR triggers automated response, teams must retain enough raw evidence to justify the decision later.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Services → Popular →
All sections ›
Archive ›
Vol 343 · Issue 2
Security — Archive · Vol 343 Issue 2
35 articles that week
Dark Reading, Friday, October 16th, 2026
When Your Ransomware Negotiator Works for the Other Side
The arrest of a well-known ransomware negotiator in the ShinyHunters probe shows the need for incident vendor oversight.
more →
Dark Reading, Friday, October 16th, 2026
When AI Agents Commit Breaches, Humans May Not Be Held Liable
As AI agents breach outside organizations, responsibility stays with their owners but legal accountability is unsettled.
more → Help Net Security, Friday, October 16th, 2026
Stolen AI API Keys Are Paying for Hackers' Autonomous Scans
Bitsight found a criminal tool that runs autonomous hacking on stolen OpenAI, Anthropic and Google API keys.
more →
SANS Internet Storm Center, Friday, October 16th, 2026
Small Agents, Smaller Blast Radius: Controlling What AI Can Do
Instead of caging general-purpose AI agents, build small single-purpose agents with least privilege.
more →
Cybersecurity Dive, Friday, October 16th, 2026
Open-Source Security Rests on Understanding Risks, Scaling Fixes
IBM says open-source defenders should triage by real exposure and make sure fixes reach neglected components.
more →
CSO, Friday, October 16th, 2026
Malware Evasion Made Easier With AI, but Behavior Still Gives It Away
ReversingLabs flagged Midnight Blizzard's AI-rebuilt malware by behavior weeks before Anthropic's report.
more →
Security Boulevard, Friday, October 16th, 2026
Frontier AI Broke the Vulnerability Math
Exploitation overtook stolen credentials as the top breach vector, and AI discovery is flooding teams with more patches than they can apply.
more →
Infosecurity Magazine, Friday, October 16th, 2026
Five Questions Security Teams Must Be Able to Answer About Every AI Agent
Policies are not enough for AI agents; teams need evidence of what an agent was allowed to do, did and why.
more →
Schneier on Security, Friday, October 16th, 2026
Backdooring Open-Weight AI Models
Researchers show a cheaply backdoored open-weight model passes evals, then exfiltrates credentials when triggered.
more →
Help Net Security, Friday, October 16th, 2026
Why Active Directory Weaknesses Stay Open for Years in Teams With One or Two Admins
How 27 municipalities hardened Windows Server and Active Directory together in a 12-week cohort program.
more → Dark Reading, Thursday, October 15th, 2026
Vulnerability Management Isn't About the Score, It's About How It Applies to You
Experts urge moving from vendor severity scores to real exploit data and environmental context as CVE volumes explode.
more → Help Net Security, Thursday, October 15th, 2026
The Internet's Attack Surface Moves at Very Different Speeds
Censys found internet-exposed AI software grew 63% in nine months while exposed ICS and legacy systems barely moved.
more → Security Magazine, Thursday, October 15th, 2026
The Front Door Is Guarded but the Back Door Isn't Even Locked
Ransomware crews target hypervisor, storage and backup consoles that often lack MFA while perimeter spending soars.
more →
The Register, Thursday, October 15th, 2026
Indirect Prompt Injection Starts Turning Up in Webpage Headers
A scan of 217 million HTTP responses found sites using headers to address AI agents, including 30 injection attempts.
more →
Dark Reading, Thursday, October 15th, 2026
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Attackers hijacked outdated refrigeration controllers at French grocers, spoiling food while masking it as defrost cycles.
more → Dark Reading, Thursday, October 15th, 2026
AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too
Proofpoint says AI-generated attack chains are making some threat actors worse, and top actors largely avoid AI.
more → The Register, Wednesday, October 14th, 2026
Ransomware Gets Personal: 'We-Know-Where-You-Are Kind of Stuff'
Ransomware crews increasingly use physical and psychological threats against staff and families, a Semperis survey finds.
more → Help Net Security, Wednesday, October 14th, 2026
Most Companies Count AI Agents as Insiders, and CISOs Worry About Their Own Liability
Trellix survey of 600 CISOs links AI agents to insider incidents at 95% of firms; 78% include agents in insider risk.
more → CSO, Wednesday, October 14th, 2026
Cybersecurity Is a Leadership Problem: Why the Management Model Needs to Catch Up
A decade on, security still struggles with governance, authority and accountability rather than knowing which controls to use.
more → Computer Weekly, Wednesday, October 14th, 2026
AI Has Not Invented New Attacks, It Has Removed the Waiting
AI's real effect on attacks is tempo in reconnaissance and post-theft analysis, so defenders must speed up triage.
more →
CSO, Wednesday, October 14th, 2026
AI Agents Aren't 'Going Rogue.' Frontier Labs Are Skipping Security Basics
Security experts say recent AI agent breaches stem from labs ignoring decades-old containment and monitoring practices.
more → Infosecurity Magazine, Wednesday, October 14th, 2026
Passkey Authentications Double but Adoption Still Slow
Dashlane data shows passkey logins nearly doubled to 2.5 million a month, but they remain a minority on major sites.
more → ISACA, Wednesday, October 14th, 2026
Four Modern CIAM Strategies to Prevent AI-Driven Fraud
Customer identity has become a prime fraud battleground and should be managed as a distinct capability from workforce IAM.
more →
Computer Weekly, Tuesday, October 13th, 2026
The Security Interviews: A Post-Mythos Reality Check
AWS's Rudra Mitra says frontier models like Claude Mythos force security to respond at machine speed.
more → Help Net Security, Tuesday, October 13th, 2026
Most High-Severity Cloud Security Findings Are Downgraded Once an AI Agent Checks the Environment
An AI agent re-grading 9,967 HIGH cloud findings changed 75% of them, mostly downward, once it checked environment context.
more → Computer Weekly, Tuesday, October 13th, 2026
Microsoft CVE Volumes on Relentless Upward Trajectory
October Patch Tuesday topped 1,400 CVEs, and experts say monthly, count-based triage no longer works.
more → Help Net Security, Tuesday, October 13th, 2026
Frontier AI Cleared Every OT Attack Goal Booz Allen Set in Its Lab
Booz Allen's OT lab test saw frontier models map, exploit and pivot into an industrial testbed and move a robotic arm.
more → Security Magazine, Tuesday, October 13th, 2026
Does Your CISO Have the Authority the Job Now Requires?
Most organizations give CISOs a business-resilience and AI-governance mandate without the authority to carry it out.
more →
Infosecurity Magazine, Tuesday, October 13th, 2026
Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool
Flashpoint survey finds only a quarter of security teams actively use agentic AI in defense, citing trust concerns.
more → Security Boulevard, Tuesday, October 13th, 2026
Best AI Security Platforms With EDR, SIEM and XDR
A buyer's guide to AI security platforms that unify EDR, SIEM and XDR, with compliance evidence as a key criterion.
more → CyberScoop, Monday, October 12th, 2026
Your AI Agent Is Only as Safe as the Packages It Downloads
An op-ed argues this year's AI agent incidents nearly all ran through the software supply chain, not model capability.
more →
Help Net Security, Monday, October 12th, 2026
Geopolitics and the Cyber Resilience Gap Belong in Your Threat Model
WEF's Akshay Joshi on why CEOs now rank cyber-enabled fraud above ransomware and how the resilience gap is widening.
more → Help Net Security, Monday, October 12th, 2026
AI Vulnerability Patching Has a Grading Problem
Northwestern researchers find AI patches that stop a crash often fail the maintainers' own tests for the real fix.
more → Dark Reading, Monday, October 12th, 2026
No Identity, No Recovery: Cyber Resilience Starts With IAM
Identity infrastructure is a prerequisite for ransomware recovery, and identity and BCDR teams need to plan it together.
more →