Dark Reading, Thursday, October 22nd, 2026
As AI Risks Grow, Insurers Split on Covering the Damage
Specialty carriers now sell AI coverage while major insurers add AI exclusions, so firms should review policies before year-end renewals.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Services → Vendors → Blog → Popular →
All sections ›
Archive
Security — Archive
2,667 articles · page 2 of 54
Help Net Security, Thursday, October 22nd, 2026
Anthropic Finds 94 Cases Where Open-Source Projects Drop Security Controls Without Warning
Anthropic's red team found unnecessary exposure, weakening config combos and pre-auth code paths across 25 open-source projects.
more →
Cybersecurity Dive, Thursday, October 22nd, 2026
Agentic AI Helps Hackers Level Up, Even Without Detailed Instructions
CrowdStrike documents threat actors running agentic AI campaigns and finds token budgets, not engineering skill, limit AI-run intrusions.
more →
SC Media, Wednesday, October 21st, 2026
Here's What a Successful CTEM Deployment Looks Like
Explains how continuous threat exposure management differs from vulnerability management and five signs a program hasn't made the shift.
more →
Help Net Security, Tuesday, October 20th, 2026
Your Frontline Workers Have a Workaround for That MFA Prompt
95% of IT leaders see frontline workers bypassing slow logins by sharing credentials or staying signed in; 62% saw recovery abuse attempts.
more → SC Media, Tuesday, October 20th, 2026
We're Repeating a Familiar Mistake With AI Security
Action1's field CTO says new CISA, NSA and Commerce guidance on AI developer security is a warning the industry should not ignore.
more → Help Net Security, Tuesday, October 20th, 2026
Quarantined, but Still on Your Calendar: The Explosion of Invite-Based Attacks
Malicious calendar invites carrying phishing links have surged, and invites can remain on calendars even after the email is quarantined.
more → Help Net Security, Monday, October 19th, 2026
With Open-Weight AI, More of the Security Burden Falls on Enterprises
A Microsoft and NVIDIA paper warns that firms running open-weight models must supply the guardrails and monitoring a provider would otherwise handle.
more →
Dark Reading, Monday, October 19th, 2026
The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience
An Omdia analyst argues the industry is conflating vulnerability volume with risk and should talk to boards about resilience and business impact.
more → The Register, Monday, October 19th, 2026
Security Patches Need Patches Now That Attackers Have AI
Terra Security finds GitHub security fixes later reported broken within 90 days jumped from 0.2% to 2.3% in 2026.
more →
Help Net Security, Monday, October 19th, 2026
Ransomware Pressure Now Reaches Employees' Homes and Families
Semperis survey: attackers threatened staff families at 37% of ransomware victims, and swatting and doxxing are now part of the playbook.
more → Infosecurity Magazine, Monday, October 19th, 2026
Exploited Flaws Typically Take Three Months to Patch, Moody's Finds
Moody's says known exploited vulnerabilities take a median 87 days to patch, a gap that grows riskier as AI speeds exploitation.
more →
TechTarget, Monday, October 19th, 2026
AI in the SOC: 5 High-Value Use Cases for Enterprise SOCs
A practical look at where AI helps SOC teams, from alert triage to investigation summaries, with implementation caveats for each.
more →
SC Media, Saturday, October 17th, 2026
AI in Network Detection and Response: What Still Requires Deterministic Evidence
When AI-driven NDR triggers automated response, teams must retain enough raw evidence to justify the decision later.
more →
Dark Reading, Friday, October 16th, 2026
When Your Ransomware Negotiator Works for the Other Side
The arrest of a well-known ransomware negotiator in the ShinyHunters probe shows the need for incident vendor oversight.
more →
Dark Reading, Friday, October 16th, 2026
When AI Agents Commit Breaches, Humans May Not Be Held Liable
As AI agents breach outside organizations, responsibility stays with their owners but legal accountability is unsettled.
more → Help Net Security, Friday, October 16th, 2026
Stolen AI API Keys Are Paying for Hackers' Autonomous Scans
Bitsight found a criminal tool that runs autonomous hacking on stolen OpenAI, Anthropic and Google API keys.
more →
SANS Internet Storm Center, Friday, October 16th, 2026
Small Agents, Smaller Blast Radius: Controlling What AI Can Do
Instead of caging general-purpose AI agents, build small single-purpose agents with least privilege.
more →
Cybersecurity Dive, Friday, October 16th, 2026
Open-Source Security Rests on Understanding Risks, Scaling Fixes
IBM says open-source defenders should triage by real exposure and make sure fixes reach neglected components.
more →
CSO, Friday, October 16th, 2026
Malware Evasion Made Easier With AI, but Behavior Still Gives It Away
ReversingLabs flagged Midnight Blizzard's AI-rebuilt malware by behavior weeks before Anthropic's report.
more →
Security Boulevard, Friday, October 16th, 2026
Frontier AI Broke the Vulnerability Math
Exploitation overtook stolen credentials as the top breach vector, and AI discovery is flooding teams with more patches than they can apply.
more →
Infosecurity Magazine, Friday, October 16th, 2026
Five Questions Security Teams Must Be Able to Answer About Every AI Agent
Policies are not enough for AI agents; teams need evidence of what an agent was allowed to do, did and why.
more →
Schneier on Security, Friday, October 16th, 2026
Backdooring Open-Weight AI Models
Researchers show a cheaply backdoored open-weight model passes evals, then exfiltrates credentials when triggered.
more →
Help Net Security, Friday, October 16th, 2026
Why Active Directory Weaknesses Stay Open for Years in Teams With One or Two Admins
How 27 municipalities hardened Windows Server and Active Directory together in a 12-week cohort program.
more → Dark Reading, Thursday, October 15th, 2026
Vulnerability Management Isn't About the Score, It's About How It Applies to You
Experts urge moving from vendor severity scores to real exploit data and environmental context as CVE volumes explode.
more → Help Net Security, Thursday, October 15th, 2026
The Internet's Attack Surface Moves at Very Different Speeds
Censys found internet-exposed AI software grew 63% in nine months while exposed ICS and legacy systems barely moved.
more → Security Magazine, Thursday, October 15th, 2026
The Front Door Is Guarded but the Back Door Isn't Even Locked
Ransomware crews target hypervisor, storage and backup consoles that often lack MFA while perimeter spending soars.
more →
The Register, Thursday, October 15th, 2026
Indirect Prompt Injection Starts Turning Up in Webpage Headers
A scan of 217 million HTTP responses found sites using headers to address AI agents, including 30 injection attempts.
more →
Dark Reading, Thursday, October 15th, 2026
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Attackers hijacked outdated refrigeration controllers at French grocers, spoiling food while masking it as defrost cycles.
more → Dark Reading, Thursday, October 15th, 2026
AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too
Proofpoint says AI-generated attack chains are making some threat actors worse, and top actors largely avoid AI.
more → The Register, Wednesday, October 14th, 2026
Ransomware Gets Personal: 'We-Know-Where-You-Are Kind of Stuff'
Ransomware crews increasingly use physical and psychological threats against staff and families, a Semperis survey finds.
more → Help Net Security, Wednesday, October 14th, 2026
Most Companies Count AI Agents as Insiders, and CISOs Worry About Their Own Liability
Trellix survey of 600 CISOs links AI agents to insider incidents at 95% of firms; 78% include agents in insider risk.
more → CSO, Wednesday, October 14th, 2026
Cybersecurity Is a Leadership Problem: Why the Management Model Needs to Catch Up
A decade on, security still struggles with governance, authority and accountability rather than knowing which controls to use.
more → Computer Weekly, Wednesday, October 14th, 2026
AI Has Not Invented New Attacks, It Has Removed the Waiting
AI's real effect on attacks is tempo in reconnaissance and post-theft analysis, so defenders must speed up triage.
more →
CSO, Wednesday, October 14th, 2026
AI Agents Aren't 'Going Rogue.' Frontier Labs Are Skipping Security Basics
Security experts say recent AI agent breaches stem from labs ignoring decades-old containment and monitoring practices.
more → Infosecurity Magazine, Wednesday, October 14th, 2026
Passkey Authentications Double but Adoption Still Slow
Dashlane data shows passkey logins nearly doubled to 2.5 million a month, but they remain a minority on major sites.
more → ISACA, Wednesday, October 14th, 2026
Four Modern CIAM Strategies to Prevent AI-Driven Fraud
Customer identity has become a prime fraud battleground and should be managed as a distinct capability from workforce IAM.
more →
Computer Weekly, Tuesday, October 13th, 2026
The Security Interviews: A Post-Mythos Reality Check
AWS's Rudra Mitra says frontier models like Claude Mythos force security to respond at machine speed.
more → Help Net Security, Tuesday, October 13th, 2026
Most High-Severity Cloud Security Findings Are Downgraded Once an AI Agent Checks the Environment
An AI agent re-grading 9,967 HIGH cloud findings changed 75% of them, mostly downward, once it checked environment context.
more → Computer Weekly, Tuesday, October 13th, 2026
Microsoft CVE Volumes on Relentless Upward Trajectory
October Patch Tuesday topped 1,400 CVEs, and experts say monthly, count-based triage no longer works.
more → Help Net Security, Tuesday, October 13th, 2026
Frontier AI Cleared Every OT Attack Goal Booz Allen Set in Its Lab
Booz Allen's OT lab test saw frontier models map, exploit and pivot into an industrial testbed and move a robotic arm.
more → Security Magazine, Tuesday, October 13th, 2026
Does Your CISO Have the Authority the Job Now Requires?
Most organizations give CISOs a business-resilience and AI-governance mandate without the authority to carry it out.
more →
Infosecurity Magazine, Tuesday, October 13th, 2026
Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool
Flashpoint survey finds only a quarter of security teams actively use agentic AI in defense, citing trust concerns.
more → Security Boulevard, Tuesday, October 13th, 2026
Best AI Security Platforms With EDR, SIEM and XDR
A buyer's guide to AI security platforms that unify EDR, SIEM and XDR, with compliance evidence as a key criterion.
more → CyberScoop, Monday, October 12th, 2026
Your AI Agent Is Only as Safe as the Packages It Downloads
An op-ed argues this year's AI agent incidents nearly all ran through the software supply chain, not model capability.
more →
Help Net Security, Monday, October 12th, 2026
Geopolitics and the Cyber Resilience Gap Belong in Your Threat Model
WEF's Akshay Joshi on why CEOs now rank cyber-enabled fraud above ransomware and how the resilience gap is widening.
more → Help Net Security, Monday, October 12th, 2026
AI Vulnerability Patching Has a Grading Problem
Northwestern researchers find AI patches that stop a crash often fail the maintainers' own tests for the real fix.
more → Dark Reading, Monday, October 12th, 2026
No Identity, No Recovery: Cyber Resilience Starts With IAM
Identity infrastructure is a prerequisite for ransomware recovery, and identity and BCDR teams need to plan it together.
more → CNCF, Friday, October 9th, 2026
Who Owns NIS2 and DORA on a Kubernetes Platform Team
Treating NIS2/DORA as security tickets stalls compliance; platform teams must own evidence-producing artifacts.
more →
TechTarget, Friday, October 9th, 2026
Unclear AI Risk Ownership Could Leave CISOs in Familiar Scapegoat Role
PwC finds no consensus on who owns AI risk, leaving CISOs accountable for AI incidents without matching authority.
more →