SC Media, Saturday, October 17th, 2026
AI in Network Detection and Response: What Still Requires Deterministic Evidence
When AI-driven NDR triggers automated response, teams must retain enough raw evidence to justify the decision later.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Services → Popular →
All sections ›
Archive
Security — Archive
2,604 articles · page 1 of 53
Dark Reading, Friday, October 16th, 2026
When Your Ransomware Negotiator Works for the Other Side
The arrest of a well-known ransomware negotiator in the ShinyHunters probe shows the need for incident vendor oversight.
more →
Dark Reading, Friday, October 16th, 2026
When AI Agents Commit Breaches, Humans May Not Be Held Liable
As AI agents breach outside organizations, responsibility stays with their owners but legal accountability is unsettled.
more → Help Net Security, Friday, October 16th, 2026
Stolen AI API Keys Are Paying for Hackers' Autonomous Scans
Bitsight found a criminal tool that runs autonomous hacking on stolen OpenAI, Anthropic and Google API keys.
more →
SANS Internet Storm Center, Friday, October 16th, 2026
Small Agents, Smaller Blast Radius: Controlling What AI Can Do
Instead of caging general-purpose AI agents, build small single-purpose agents with least privilege.
more →
Cybersecurity Dive, Friday, October 16th, 2026
Open-Source Security Rests on Understanding Risks, Scaling Fixes
IBM says open-source defenders should triage by real exposure and make sure fixes reach neglected components.
more →
CSO, Friday, October 16th, 2026
Malware Evasion Made Easier With AI, but Behavior Still Gives It Away
ReversingLabs flagged Midnight Blizzard's AI-rebuilt malware by behavior weeks before Anthropic's report.
more →
Security Boulevard, Friday, October 16th, 2026
Frontier AI Broke the Vulnerability Math
Exploitation overtook stolen credentials as the top breach vector, and AI discovery is flooding teams with more patches than they can apply.
more →
Infosecurity Magazine, Friday, October 16th, 2026
Five Questions Security Teams Must Be Able to Answer About Every AI Agent
Policies are not enough for AI agents; teams need evidence of what an agent was allowed to do, did and why.
more →
Schneier on Security, Friday, October 16th, 2026
Backdooring Open-Weight AI Models
Researchers show a cheaply backdoored open-weight model passes evals, then exfiltrates credentials when triggered.
more →
Help Net Security, Friday, October 16th, 2026
Why Active Directory Weaknesses Stay Open for Years in Teams With One or Two Admins
How 27 municipalities hardened Windows Server and Active Directory together in a 12-week cohort program.
more → Dark Reading, Thursday, October 15th, 2026
Vulnerability Management Isn't About the Score, It's About How It Applies to You
Experts urge moving from vendor severity scores to real exploit data and environmental context as CVE volumes explode.
more → Help Net Security, Thursday, October 15th, 2026
The Internet's Attack Surface Moves at Very Different Speeds
Censys found internet-exposed AI software grew 63% in nine months while exposed ICS and legacy systems barely moved.
more → Security Magazine, Thursday, October 15th, 2026
The Front Door Is Guarded but the Back Door Isn't Even Locked
Ransomware crews target hypervisor, storage and backup consoles that often lack MFA while perimeter spending soars.
more →
The Register, Thursday, October 15th, 2026
Indirect Prompt Injection Starts Turning Up in Webpage Headers
A scan of 217 million HTTP responses found sites using headers to address AI agents, including 30 injection attempts.
more →
Dark Reading, Thursday, October 15th, 2026
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Attackers hijacked outdated refrigeration controllers at French grocers, spoiling food while masking it as defrost cycles.
more → Dark Reading, Thursday, October 15th, 2026
AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too
Proofpoint says AI-generated attack chains are making some threat actors worse, and top actors largely avoid AI.
more → The Register, Wednesday, October 14th, 2026
Ransomware Gets Personal: 'We-Know-Where-You-Are Kind of Stuff'
Ransomware crews increasingly use physical and psychological threats against staff and families, a Semperis survey finds.
more → Help Net Security, Wednesday, October 14th, 2026
Most Companies Count AI Agents as Insiders, and CISOs Worry About Their Own Liability
Trellix survey of 600 CISOs links AI agents to insider incidents at 95% of firms; 78% include agents in insider risk.
more → CSO, Wednesday, October 14th, 2026
Cybersecurity Is a Leadership Problem: Why the Management Model Needs to Catch Up
A decade on, security still struggles with governance, authority and accountability rather than knowing which controls to use.
more → Computer Weekly, Wednesday, October 14th, 2026
AI Has Not Invented New Attacks, It Has Removed the Waiting
AI's real effect on attacks is tempo in reconnaissance and post-theft analysis, so defenders must speed up triage.
more →
CSO, Wednesday, October 14th, 2026
AI Agents Aren't 'Going Rogue.' Frontier Labs Are Skipping Security Basics
Security experts say recent AI agent breaches stem from labs ignoring decades-old containment and monitoring practices.
more → Infosecurity Magazine, Wednesday, October 14th, 2026
Passkey Authentications Double but Adoption Still Slow
Dashlane data shows passkey logins nearly doubled to 2.5 million a month, but they remain a minority on major sites.
more → ISACA, Wednesday, October 14th, 2026
Four Modern CIAM Strategies to Prevent AI-Driven Fraud
Customer identity has become a prime fraud battleground and should be managed as a distinct capability from workforce IAM.
more →
Computer Weekly, Tuesday, October 13th, 2026
The Security Interviews: A Post-Mythos Reality Check
AWS's Rudra Mitra says frontier models like Claude Mythos force security to respond at machine speed.
more → Help Net Security, Tuesday, October 13th, 2026
Most High-Severity Cloud Security Findings Are Downgraded Once an AI Agent Checks the Environment
An AI agent re-grading 9,967 HIGH cloud findings changed 75% of them, mostly downward, once it checked environment context.
more → Computer Weekly, Tuesday, October 13th, 2026
Microsoft CVE Volumes on Relentless Upward Trajectory
October Patch Tuesday topped 1,400 CVEs, and experts say monthly, count-based triage no longer works.
more → Help Net Security, Tuesday, October 13th, 2026
Frontier AI Cleared Every OT Attack Goal Booz Allen Set in Its Lab
Booz Allen's OT lab test saw frontier models map, exploit and pivot into an industrial testbed and move a robotic arm.
more → Security Magazine, Tuesday, October 13th, 2026
Does Your CISO Have the Authority the Job Now Requires?
Most organizations give CISOs a business-resilience and AI-governance mandate without the authority to carry it out.
more →
Infosecurity Magazine, Tuesday, October 13th, 2026
Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool
Flashpoint survey finds only a quarter of security teams actively use agentic AI in defense, citing trust concerns.
more → Security Boulevard, Tuesday, October 13th, 2026
Best AI Security Platforms With EDR, SIEM and XDR
A buyer's guide to AI security platforms that unify EDR, SIEM and XDR, with compliance evidence as a key criterion.
more → CyberScoop, Monday, October 12th, 2026
Your AI Agent Is Only as Safe as the Packages It Downloads
An op-ed argues this year's AI agent incidents nearly all ran through the software supply chain, not model capability.
more →
Help Net Security, Monday, October 12th, 2026
Geopolitics and the Cyber Resilience Gap Belong in Your Threat Model
WEF's Akshay Joshi on why CEOs now rank cyber-enabled fraud above ransomware and how the resilience gap is widening.
more → Help Net Security, Monday, October 12th, 2026
AI Vulnerability Patching Has a Grading Problem
Northwestern researchers find AI patches that stop a crash often fail the maintainers' own tests for the real fix.
more → Dark Reading, Monday, October 12th, 2026
No Identity, No Recovery: Cyber Resilience Starts With IAM
Identity infrastructure is a prerequisite for ransomware recovery, and identity and BCDR teams need to plan it together.
more → CNCF, Friday, October 9th, 2026
Who Owns NIS2 and DORA on a Kubernetes Platform Team
Treating NIS2/DORA as security tickets stalls compliance; platform teams must own evidence-producing artifacts.
more →
TechTarget, Friday, October 9th, 2026
Unclear AI Risk Ownership Could Leave CISOs in Familiar Scapegoat Role
PwC finds no consensus on who owns AI risk, leaving CISOs accountable for AI incidents without matching authority.
more →
Dark Reading, Friday, October 9th, 2026
Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too
Attackers increasingly reach executives through spouses, children and home networks, so families need security training too.
more →
SC Media, Friday, October 9th, 2026
Cybersecurity Predictions That Came True in the First Half of 2026
AI gave attackers a speed advantage, identity eclipsed malware and AI infrastructure itself became an attack surface in early 2026.
more →
SC Media, Friday, October 9th, 2026
Airline Zoom Calls, Pix, Windows, TP-Link, AgentCorruption, OSS Scanner, Josh Marpet - SWN #623
Security Weekly News #623 covers Windows support cutoffs, TP-Link fraud suits, the AgentCorruption AWS flaw and shadow AI.
more → Infosecurity Magazine, Friday, October 9th, 2026
AI Training Critical as Governance Challenges Grow
ISACA says organizations are adopting AI faster than they build the skills and governance to manage it.
more →
IT Security Guru, Thursday, October 8th, 2026
When Everything Looks Normal: Why Context, Not More Alerts, Is the Next Frontier for Security Operations
Modern intrusions look legitimate, so SOCs need behavioral context over time rather than more alerts, say Exabeam and Swimlane experts.
more →
CSO Online, Thursday, October 8th, 2026
We Are Fighting Phishing at the Wrong Layer
Blocking cheap phishing domains is futile; defenders should hunt the attacker's costly, shared proxy servers instead.
more →
CNCF, Thursday, October 8th, 2026
Don't Give AI Agents Root. Make Them Propose the Next System State.
A CNCF ambassador argues agents should change systems through immutable, reviewable state proposals, not root access.
more → BankInfoSecurity, Wednesday, October 7th, 2026
Your Phishing Drill Numbers Are Lying to You
A bank GRC leader explains why phishing-simulation click rates mislead and what behavior-focused programs measure instead.
more →
IT Security Guru, Wednesday, October 7th, 2026
Verify It, Don't Assume It: Why Untested Security Controls Are Making Life Easy for Attackers
Experts say Cybersecurity Awareness Month's 'Don't Make It Easy for Them' applies to boardrooms: verify controls as AI speeds attacks.
more → TechTarget, Wednesday, October 7th, 2026
How to Build an Effective Cybersecurity Awareness Program
CISOs should replace annual check-box training with a continuous, risk-based human risk management program that measures behavior.
more → Infosecurity Magazine, Wednesday, October 7th, 2026
Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns
A Yubico/Okta survey finds 48% of security pros use passwords for personal accounts and few use passkeys at work.
more → CSO Online, Wednesday, October 7th, 2026
AI Is Turning Offensive Security Into a Continuous Necessity
With AI flooding teams with vulnerabilities, CISOs are using continuous pentesting to prove what is actually exploitable.
more → Help Net Security, Tuesday, October 6th, 2026
U.S. Bank CISO Says the Security Role Keeps Growing and No One Can Own All of It
U.S. Bank CISO Ann Barron-DiCamillo says the role now spans fraud, resilience, third-party risk and AI, so partnerships matter most.
more →