This WeekHome →Calendar →Back Issues/Search →Archive →RSS →Subscribe →

Volume 328, Issue 4 · 2025-07-21 – 2025-07-27 · Popular →

Monday’s Briefing · July 28

Techstrong.ai, Thursday, July 24th, 2025

AI And You: Don't Wait... Or Be Weight

My advice about AI is always the same: Don't wait. or you will become weight. We often discuss how AI will impact the workforce, particularly for white-collar knowledge workers. But does this apply to CEOs too? The answer is a clear and resounding yes. more →

AI And You: Don't Wait... Or Be Weight

CIO, Monday, July 21st, 2025

Rethinking And Realigning IT For The AI Era

CIOs from a range of industries discuss how AI's emergence as a transformative force is leading them to adapt and reimagine how IT operates to better harness the technology's potential to revolutionize their business. more →

Rethinking And Realigning IT For The AI Era

Upcoming Event · Thu, Oct 1 · 1:00pm

Agentic Runtime Security on AWS: Identity, Least Privilege, and Audit for AI Agents with IBM Verify Identity Access and HashiCorp Vault

This hands-on workshop deploys a working reference implementation of five control objectives for agentic systems - verifiable agent identity, no standing privileges, actions tied to user intent, enforcement at the point of use, and audit evidence correlated across all three trust planes (user, workload, data) - using IBM Verify Identity Access and HashiCorp Vault on Amazon EKS. more →

📅 Add to calendar (.ics) Google Calendar

Agentic Runtime Security on AWS: Identity, Least Privilege, and Audit for AI Agents with IBM Verify Identity Access and HashiCorp Vault (Oct. 1st)

InformationWeek, Tuesday, July 22nd, 2025

How CIOs Measure And Report IT Value

IT as a cost center is dead. Most of today's chief information officers have been tracking 'value' for some time, but what they measure has changed. more →

How CIOs Measure And Report IT Value

Tech Field Day, Thursday, July 24th, 2025

Security Field Day 13 - Part 1 (Finally!)

Futurum Research analyst Fernando Montenegro shares his perspective on the security industry following his first appearance as a delegate at Security Field Day 13. For additional information and coverage from Security Field Day 13, you can visit the Futurum Group website. more →

Security Field Day 13 - Part 1 (Finally!)

Upcoming Event · Wed, Oct 14 · 11:00am

Modernize for the AI Era

Join PwC and AWS for a discussion on how AI is redefining cloud modernization priorities. We'll share examples from leaders in their sectors, as well as practical recommendations for building modern cloud platforms that deliver measurable business value, while navigating evolving regulatory, risk, and operational considerations. more →

📅 Add to calendar (.ics) Google Calendar

Modernize for the AI Era (Oct. 14th)

Blocks & Files, Tuesday, July 22nd, 2025

Competitive Corner Breaks Down Key Shifts In 2025 Gartner Backup Magic Quadrant (MQ)

While machine translation has seen massive improvements through sophisticated AI architectures, the more nuanced domain of transcreation - where cultural adaptation, emotion, and brand voice are vital - requires a different level of AI capability. As organizations expand globally, understanding the distinction between AI architectures for transcreation vs. translation becomes essential for delivering truly localized and resonant content. more →

Competitive Corner Breaks Down Key Shifts In 2025 Gartner Backup Magic Quadrant (MQ)

Barracuda Networks, Monday, July 21st, 2025

Malware Brief: A Malware Foursome Working Together

In today's Malware Brief we'll take a quick look at four different examples of malware that have all emerged at about the same time. They demonstrate the complex chain of threats being used together, sometimes by different groups for disparate purposes. more →

Malware Brief: A Malware Foursome Working Together

Barracuda Networks, Thursday, July 24th, 2025

Email Threat Radar - July 2025

During July, Barracuda threat analysts identified several notable email-based threats targeting organizations around the world. Many of them leveraged popular phishing-as-a-service (PhaaS) kits. more →

Email Threat Radar - July 2025

Fortinet, Tuesday, July 22nd, 2025

Securing The Modern Workspace

Today's workspace goes far beyond traditional email and messaging apps. Users collaborate in tools like Confluence and Microsoft Teams, share files via Google Drive or Dropbox, and meet virtually on Zoom. These capabilities have made work more agile and distributed, but they've also significantly expanded the attack surface. more →

Securing The Modern Workspace

Fortinet, Friday, July 25th, 2025

In-Depth Analysis Of An Obfuscated Web Shell Script

This analysis is a follow-up to the investigation titled 'Intrusion into Middle East Critical National Infrastructure' (full report here), conducted by the FortiGuard Incident Response Team (FGIR), which investigated a long-term cyber intrusion targeting critical national infrastructure (CNI) in the Middle East. more →

In-Depth Analysis Of An Obfuscated Web Shell Script

Fortinet, Friday, July 25th, 2025

Inside The Toolshell Campaign

FortiGuard Labs is currently tracking multiple threat actors targeting on-premises Microsoft SharePoint servers. This attack leverages a newly identified exploit chain dubbed "ToolShell." more →

Inside The Toolshell Campaign

Proofpoint, Monday, July 21st, 2025

NET RFQ: Request for Quote Scammers Casting Wide Net to Steal Real Goods

In this report, Proofpoint threat researchers take a deep dive into a widespread Request for Quote (RFQ) scam that involves leveraging common Net financing options (Net 15, 30, 45) to steal a variety of high value electronics and goods. Net financing of 15-90 days is the most common payment terms used by businesses. more →

NET RFQ: Request for Quote Scammers Casting Wide Net to Steal Real Goods

Resecurity, Friday, July 25th, 2025

Methods to Bypass OTP in Mobile Apps: Successful VAPT Scenarios

Resecurity conducted hundreds of VAPT (Vulnerability Assessment and Penetration Testing) engagements for customers of different sizes and profiles-ranging from Fortune 100 corporations to emerging start-ups looking to test their cybersecurity controls before going live. Interestingly enough, regardless of the maturity of the company, issues related to API and authorization were identified in many cases, especially when the application had been developed by a third party. more →

Methods to Bypass OTP in Mobile Apps: Successful VAPT Scenarios

Trend Micro, Tuesday, July 22nd, 2025

Back To Business: Lumma Stealer Returns With Stealthier Methods

Lumma Stealer has re-emerged shortly after its takedown. This time, the cybergroup behind this malware appears to be intent on employing more covert tactics while steadily expanding its reach. This article shares the latest methods used to propagate this threat. more →

Back To Business: Lumma Stealer Returns With Stealthier Methods

Trend Micro, Thursday, July 24th, 2025

Proactive Email Security: The Power Of AI

Lead with AI-powered email security to stay ahead of attackers and personalize user interaction at every touchpoint, bridging technology and behavior with precision. more →

Proactive Email Security: The Power Of AI

Varonis, Thursday, July 24th, 2025

Why Least Privilege Is Critical For AI Security

From writing emails to analyzing financials and coding, AI has quickly become integral to the way we work. At the same time, AI tools and agents reveal the cracks in an organization's data security. In these AI-enabled organizations, enforcing the principle of least privilege (PoLP) is more important than ever. more →

Why Least Privilege Is Critical For AI Security

Upcoming Event · Tue, Oct 13 · 1:00pm

Modernization That Ships with AI

Most companies are adding AI agents to legacy systems rather than modernizing how the work actually gets done. That may create isolated productivity gains, but it rarely removes the outdated applications, fragmented data, manual handoffs, and hidden dependencies that continue to slow the business. more →

📅 Add to calendar (.ics) Google Calendar

Modernization That Ships with AI (Oct. 13th)