Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI Security Has a Context Problem

The problem is not a lack of controls. It is connecting them into one attack story. The more time I spend with enterprise AI deployments, the clearer one thing becomes: AI security is incredibly fragmented. There are LLM guardrails, AI gateways, MCP security tools, API security, endpoint controls, SASE, code scanning, and runtime detection. Each solves a real problem, but agentic systems do not experience them as separate layers, and neither do attackers.

New Partnership with Entrust to Reach More Victims of Cybercrime and Fraud

Entrust, a global leader in identity-centric security solutions, today announced its partnership with The Cyber Helpline. Entrust will support our mission to help people understand, contain, and recover from cyber incidents by funding more than 3,200 hours of specialist support, which will provide assistance for approximately 1,000 individuals across the US and UK.

What Does NIST IR 8587 Mean for API Security?

On September 15, 2026, NIST published Internal Report 8587, “Protecting Tokens and Assertions from Forgery, Theft, and Misuse.” It’s built to extend NIST Special Publication 800-53 Release 5.1.1, and on paper it reads like an SSO hardening document for government agencies and their cloud vendors.

How Active Roles by One Identity supports IAM in a university environment

Managing user accounts, permissions and security access across a university environment involves significant administrative work. For institutions that rely on Microsoft Active Directory, keeping that infrastructure organized, secure and current can quickly become resource-intensive as student and staff populations shift each semester. This type of challenge grows when IT teams must handle onboarding, access changes and offboarding manually for each individual.

Is Your OT Jump Server Giving Vendors More Access Than They Need?

A vendor can bypass MFA and sign in with an individual account while still being able to reach industrial systems unrelated to the job. Before replacing your current setup, follow one real service request from approval through completion. The exercise can reveal outdated permissions, unnecessary network connectivity, shared credentials, or records that are difficult to retrieve when you need them.

Aligning Application Security Software with Business Growth Objectives

AppSec teams know application risk is growing, but budget conversations are often won and lost outside the security team, in rooms full of executives who speak the language of revenue and delivery velocity, not CVSS scores. The core argument: application security software is easier to fund when it is tied to growth, resilience, compliance, and delivery outcomes… not just technical findings.

AI Governance in healthcare: Compliance and security

AI governance in healthcare has become a question boards and auditors ask directly. They want to know which AI tools reach protected health information, who's accountable for each one, and what evidence shows the controls are holding. Most health systems have a written policy and no way to produce those three answers on request, which is precisely what an auditor tests. Healthcare organizations adopted AI faster than they built the governance to account for it.

Global Bitcoin ASIC Miner Benchmark 2026: Comparing Efficiency and Rack Density Across Leading Models

In 2026, Bitcoin mining hardware is no longer judged by nameplate hashrate alone. As hashprice compresses and network difficulty rises, Bitcoin ASIC efficiency increasingly determines how long a machine can remain above its shutdown price. Yet J/TH is only the starting point. The power efficiency ratio shapes miner-side electricity demand, while mining rack density determines how much usable hashrate a facility can extract from limited power, cooling capacity and rack space.

DMARC Explained: How to Stop Attackers From Impersonating Your Domain

Email is still the most common way attacks begin. Phishing, business email compromise, and brand impersonation all rely on one simple weakness: by default, anyone can send an email that claims to come from your domain. The protocol that email runs on was never built to verify who a sender really is, so a criminal can forge the "From" address to look exactly like it came from your company, and the receiving mail server has no built-in way to know the difference. That is the gap attackers exploit, and it is the gap DMARC was designed to close.

Quantum Computing and the Future of Security: What Teams Should Understand Now

Quantum computing is one of the most hyped topics in technology, and for security professionals it carries a particular weight. Beyond the general excitement about a new kind of computing lies a specific and serious question: what will quantum computers mean for the security we rely on today? Much of the encryption that protects data, communications, and systems rests on mathematical problems that ordinary computers cannot solve in any practical amount of time. Quantum computers, at least in principle, could one day solve some of those problems, which would have real consequences for security.