19 articles that week
The New Stack, Saturday, October 31st, 2026
AI-accelerated exploits shrink the patch window; the article argues eBPF runtime shielding such as Cilium Tetragon can act as a compensating control.
more →
kratikal, Friday, October 30th, 2026
Kratikal explains why a vendor's unpatched CVE is the customer's risk and how to track vendor findings and enforce remediation SLAs.
more →
CSO Online, Friday, October 30th, 2026
A red team practitioner argues AI changed offensive security economics, so small teams with frontier models can out-find much larger ones.
more →
SecurityWeek, Friday, October 30th, 2026
SecurityWeek argues passkeys beat passwords but are not enough, since enrollment integrity, device changes and session takeover still matter.
more →
The Register, Friday, October 30th, 2026
An n0n ransomware operator spent over $7,000 on AI services and targeted 23 organizations, but left its server exposed, and no bugs were exploited.
more →
CSO Online, Friday, October 30th, 2026
CSO Online argues SOCs must prepare for reasoning, adaptive AI agents that go beyond WannaCry-style deterministic worms.
more → ITPro, Friday, October 30th, 2026
Sectigo research finds 78% of IT and security leaders expect PKI to change as shorter certificate lifespans and quantum risks arrive.
more →
Help Net Security, Friday, October 30th, 2026
Cisco Talos found fake IT help desk callers breached firms using only employee names and email addresses, in one case leading to ransomware.
more →
Help Net Security, Thursday, October 29th, 2026
Qualys CISO Nathan Smolenski explains how security teams can handle rising AI-found vulnerabilities with real-time prioritization.
more → IT Security Guru, Thursday, October 29th, 2026
CybaVerse CEO Oliver Spence argues managed SOC services must remediate the root causes of incidents, not just contain them.
more →
Help Net Security, Wednesday, October 28th, 2026
Bellini Capital CISO Brian Blakley says AI speeds attackers' exploitation faster than defenders can patch, requiring more than patching.
more → Help Net Security, Tuesday, October 27th, 2026
KuppingerCole's Jonathan Care expects many AI security categories to be absorbed into larger platforms as the market consolidates.
more → Help Net Security, Tuesday, October 27th, 2026
Arctic Wolf documented over 400 incidents where attackers flooded inboxes with spam, then posed as IT help desk staff on Microsoft Teams.
more → Dark Reading, Tuesday, October 27th, 2026
Kudelski Security's Nathan Hamiel warns that over-reliance on AI tools could erode the core technical skills security pros need to use them well.
more →
The New Stack, Tuesday, October 27th, 2026
Containers are not isolation by default. Recent OpenAI and Anthropic incidents show how to really sandbox AI agents at every layer.
more → Help Net Security, Monday, October 26th, 2026
An O'Reilly survey finds security pros worry more about employees leaking data into AI tools than about AI-powered attacks.
more → TechRadar, Monday, October 26th, 2026
TechRadar explains why passkeys beat passwords against phishing and remote attacks, and where device access and platform lock-in still pose risks.
more →
Dark Reading, Monday, October 26th, 2026
Veracode's Chris Wysopal lists 10 lasting software security practices, from secure-by-design architecture to human accountability for AI code.
more → CSO Online, Monday, October 26th, 2026
Researchers show malicious AGENTS.md and CLAUDE.md files in a downloads folder can steer Codex and Claude Code into compromising themselves.
more →