StrongBox IT, Friday, November 6th, 2026
What Is the Difference Between IoT and OT Security
IoT security protects connected devices and their data, while OT security protects industrial control systems and physical processes.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Services → Vendors → Blog → Popular →
All sections ›
Archive
Security — Archive
2,667 articles · page 1 of 54
IT Security Guru, Thursday, November 5th, 2026
The Exceptions That Break MFA Start in the Boardroom
Executive requests to skip MFA create a governance gap that NIS2 makes harder to ignore, so exceptions need a formal, documented process.
more →
Help Net Security, Thursday, November 5th, 2026
NIST Publishes Cybersecurity Guide for Businesses Too Small to Have IT Staff
NIST releases a plain-language cybersecurity guide, based on CSF 2.0, for solo owners, freelancers and contractors with no IT staff.
more →
Futurum Group, Wednesday, November 4th, 2026
Remediation Is Becoming a Software Delivery Capacity Problem
A Futurum brief with Google Cloud argues fixing code flaws is now a delivery capacity problem and maps the CodeMender remediation agent to six needs.
more →
ITPro, Wednesday, November 4th, 2026
Why a Quarter of Security Flaws Are Never Fully Fixed
SecureFlag research finds a quarter of developer vulnerability fixes fail, raising concerns about verifying fixes delegated to AI.
more →
Swimlane, Tuesday, November 3rd, 2026
AI Threat Detection: How It Works and Why Response Matters
Swimlane explains how AI threat detection works, where it beats signature tools, its limits, and how to connect it to automated response.
more →
CyberScoop, Tuesday, November 3rd, 2026
CISA’s New Strategy Runs Into America's Blind Trust Problem
An op-ed argues CISA's 2030 strategy requires operators to revisit long-standing trust in OT devices, software updates and credentials.
more →
EM360Tech, Tuesday, November 3rd, 2026
In-House vs Outsourced vs Hybrid SOC: Which Security Operations Model Fits Your Enterprise?
EM360Tech compares in-house, outsourced and hybrid SOC models and the trade-offs of each for enterprise security operations.
more →
ITPro, Tuesday, November 3rd, 2026
What Is Memory Poisoning and Who Is at Risk?
ITPro explains memory poisoning, where attackers plant false or malicious items in an AI assistant's persistent memory, and who is at risk.
more → StrongBox IT, Tuesday, November 3rd, 2026
What Is a Security Operations Center?
StrongBox IT primer on what a Security Operations Center does, how it works, and in-house, outsourced and hybrid SOC models.
more → IT Security Guru, Tuesday, November 3rd, 2026
Q&A With Pierre-Loic Kuhn at Filigran: Why Cybersecurity Needs to Evolve
Filigran's Pierre-Loic Kuhn argues security testing must follow attack chains continuously rather than score isolated vulnerabilities.
more → Dark Reading, Tuesday, November 3rd, 2026
9 Cyber Awareness Tips That Actually Match Today's Maze of Threats
Dark Reading staff offer nine security awareness tips aimed at current threats, from ClickFix and malicious ads to login and Wi-Fi risks.
more →
Kovrr, Tuesday, November 3rd, 2026
What the Latest Mega Breaches Teach Us About Cybersecurity Board Reporting
Kovrr says the M&S and Qantas breaches were governance failures and explains what effective, data-driven cyber board reporting looks like.
more →
CSO Online, Monday, November 2nd, 2026
What a Security Strategy That Survives 2027 Looks Like
CISOs including Equifax's Jeremy Koppen describe how they are reshaping security strategy for AI, agents, geopolitics and quantum in 2027.
more →
CSO Online, Monday, November 2nd, 2026
Who Approves the Files That Control Your AI Coding Assistant?
Repository files that configure AI coding assistants can trigger code execution, so they need named owners and enforced pull request review.
more → CSO Online, Monday, November 2nd, 2026
Why Do We Keep Testing Employees for Yesterday's Phishing Attacks
A CSO Online contributor argues phishing tests should measure how staff verify AI-crafted messages, not just whether they spot old warning signs.
more → SC Media, Monday, November 2nd, 2026
Why Identity Security Assessments Matter in the Age of AI
Sponsored SC Media content from iC Consult explains what an identity security assessment covers and why AI agents make one urgent.
more →
The New Stack, Saturday, October 31st, 2026
Shielding the Patch Gap: The Exploit Doesn't Wait for Patch Tuesday
AI-accelerated exploits shrink the patch window; the article argues eBPF runtime shielding such as Cilium Tetragon can act as a compensating control.
more →
kratikal, Friday, October 30th, 2026
Your Vendor's Unpatched CVE Is Your Problem Too: Tracking Third-Party Findings and SLAs
Kratikal explains why a vendor's unpatched CVE is the customer's risk and how to track vendor findings and enforce remediation SLAs.
more →
CSO Online, Friday, October 30th, 2026
We Are Not Ready for What AI Has Done to Red Teaming
A red team practitioner argues AI changed offensive security economics, so small teams with frontier models can out-find much larger ones.
more →
SecurityWeek, Friday, October 30th, 2026
Passkeys Are Better Than Passwords. But They Are Not Enough
SecurityWeek argues passkeys beat passwords but are not enough, since enrollment integrity, device changes and session takeover still matter.
more →
The Register, Friday, October 30th, 2026
Crim Spent $7K+ on AI Services in Extortion Attacks, Then Left Evidence for All to See
An n0n ransomware operator spent over $7,000 on AI services and targeted 23 organizations, but left its server exposed, and no bugs were exploited.
more →
CSO Online, Friday, October 30th, 2026
Beyond Deterministic Worms: Preparing the SOC for Reasoning Adversaries
CSO Online argues SOCs must prepare for reasoning, adaptive AI agents that go beyond WannaCry-style deterministic worms.
more → ITPro, Friday, October 30th, 2026
Security Leaders Brace For An Overhaul Of Public Key Infrastructure As Quantum Risks Rise
Sectigo research finds 78% of IT and security leaders expect PKI to change as shorter certificate lifespans and quantum risks arrive.
more →
Help Net Security, Friday, October 30th, 2026
Fake IT Help Desk Callers Got by on Little More Than Names and Email Addresses
Cisco Talos found fake IT help desk callers breached firms using only employee names and email addresses, in one case leading to ransomware.
more →
Help Net Security, Thursday, October 29th, 2026
Qualys CISO on What Security Teams Can Do as Exploit Campaigns Grow
Qualys CISO Nathan Smolenski explains how security teams can handle rising AI-found vulnerabilities with real-time prioritization.
more → IT Security Guru, Thursday, October 29th, 2026
Closing The Loop: Why An Effective SOC Focuses On Remediation, Not Just Containment
CybaVerse CEO Oliver Spence argues managed SOC services must remediate the root causes of incidents, not just contain them.
more →
Help Net Security, Wednesday, October 28th, 2026
Bellini Capital CISO on AI Security Governance and the Limits of Patching Faster
Bellini Capital CISO Brian Blakley says AI speeds attackers' exploitation faster than defenders can patch, requiring more than patching.
more → Help Net Security, Tuesday, October 27th, 2026
Several AI Security Market Categories Are Headed for Bigger Platforms
KuppingerCole's Jonathan Care expects many AI security categories to be absorbed into larger platforms as the market consolidates.
more → Help Net Security, Tuesday, October 27th, 2026
Hackers Bury Inboxes in Spam Then Show Up on Microsoft Teams Posing as IT Support
Arctic Wolf documented over 400 incidents where attackers flooded inboxes with spam, then posed as IT help desk staff on Microsoft Teams.
more → Dark Reading, Tuesday, October 27th, 2026
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
Kudelski Security's Nathan Hamiel warns that over-reliance on AI tools could erode the core technical skills security pros need to use them well.
more →
The New Stack, Tuesday, October 27th, 2026
When 'Isolated' Doesn't Mean Isolated: How to Sandbox AI Agents
Containers are not isolation by default. Recent OpenAI and Anthropic incidents show how to really sandbox AI agents at every layer.
more → Help Net Security, Monday, October 26th, 2026
Security Pros Reckon the Biggest AI Risk Comes With an Employee Badge
An O'Reilly survey finds security pros worry more about employees leaking data into AI tools than about AI-powered attacks.
more → TechRadar, Monday, October 26th, 2026
Are Passkeys More Secure Than Passwords?
TechRadar explains why passkeys beat passwords against phishing and remote attacks, and where device access and platform lock-in still pose risks.
more →
Dark Reading, Monday, October 26th, 2026
10 Software Security Practices Built for the Next 250 Years
Veracode's Chris Wysopal lists 10 lasting software security practices, from secure-by-design architecture to human accountability for AI code.
more → CSO Online, Monday, October 26th, 2026
Malicious Downloads Can Trick AI Coding Agents Into Compromising Themselves
Researchers show malicious AGENTS.md and CLAUDE.md files in a downloads folder can steer Codex and Claude Code into compromising themselves.
more → The Register, Saturday, October 24th, 2026
Autonomous Attack Agent in 'Skynet Mode' Hijacks Other Models to Carry Out Its Evil Deeds
Symantec captured an attack agent built to hijack exposed AI endpoints and run up to 100,000 attack steps without human approval.
more →
Dark Reading, Friday, October 23rd, 2026
Trust Is Not What It Seems, and Fraudsters Are Counting on It
Attackers now impersonate customers and brands, calling help desks for resets instead of using malware; experts explain how to close those doors.
more →
Help Net Security, Friday, October 23rd, 2026
Microsoft 365 Accounts Compromised at 79 Organizations, No Passwords Needed
Huntress tracked an attacker replaying stolen Microsoft 365 session tokens from AiTM and device-code phishing to bypass MFA at 79 organizations.
more →
TechTarget, Friday, October 23rd, 2026
Help Desk Deepfakes: Why CISOs Must Rethink Verification
41% of organizations faced a deepfake audio social engineering attempt; help desks need verification that works however good the fake is.
more →
Dark Reading, Friday, October 23rd, 2026
Cyber Insurance's New Reality: Underwriting Isn't Enough
Insurers are moving beyond questionnaires to continuous telemetry and in-house security services as AI and cloud risks outpace loss data.
more → TechTarget, Friday, October 23rd, 2026
Cyber Insurance Explained, From Selection to Post-Purchase
LMG Security's Sherri Davidoff explains coverage types, hidden exclusions and contingent business interruption pitfalls in cyber policies.
more → Infosecurity Magazine, Friday, October 23rd, 2026
Attacks on Tech Firms Behind Most Third-Party Data Breach Victims
Kroll finds 69% of breach victims were hit through a third party, and 79% of those through a compromised technology company.
more →
Infosecurity Magazine, Friday, October 23rd, 2026
AI Didn't Break Vulnerability Management: It Exposed Its Biggest Weakness
A Hogan Lovells partner argues AI-driven discovery reveals that severity scores were never the same thing as business risk.
more → Dark Reading, Friday, October 23rd, 2026
AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack
Microsoft's Guardian Agents treat AI agents as insiders with their own identities and risk scores; analysts doubt agents can police agents.
more → Computer Weekly, Friday, October 23rd, 2026
AI Accelerates Path From IT Compromise to OT Targeting
A Dragos analysis of the Monterrey water utility case shows AI shrinking the time from IT foothold to OT attempts, not inventing new OT attacks.
more →
CSO, Thursday, October 22nd, 2026
Security Teams Urged to Center Defense on the Flaw Profile Attackers Target Most
Rapid7 data shows attackers concentrate on a narrow set of critical flaws, so defenders should prioritize that profile over raw CVE counts.
more →
TechTarget, Thursday, October 22nd, 2026
Just-in-Time Access: A CISO's Guide to Reducing Standing Privilege
How to use just-in-time access to cut standing privilege, where it fits with PAM and zero trust, and when not to deploy it.
more → The Register, Thursday, October 22nd, 2026
IT Department and Auditors at Major Pharmacy Chain Got Into a Rip-Roaring Fight About Using 'Password' on Cisco Firewall
A pen tester found 'password' as an edge firewall's enable password; the hour-long fight that followed was really about IT bonuses.
more → Help Net Security, Thursday, October 22nd, 2026
Attackers Abuse Legitimate Platforms to Deliver Phishing Emails That Pass Authentication Checks
Cisco Talos shows attackers planting callback numbers in real Dell and Staples order emails that pass DKIM and DMARC, plus other platform abuse.
more →