Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

As U.S. and EU regulators increase scrutiny of third-party cyber risk, organizations face growing pressure to demonstrate effective vendor oversight, continuous monitoring, and risk management. In this Bitsight webinar, Jake Olcott, VP of Government Affairs and former legal counsel to the House Homeland Security Committee and Senate Commerce Committee, explores the regulatory developments shaping third-party risk management (TPRM) heading into 2027.

Could PHP2Shell pose a cybersecurity risk on the scale of Log4j? Newly disclosed critical PHP vulnerabilities are raising concerns about widespread exposure across enterprise environments and third-party supply chains. With millions of potentially affected systems and limited patching options for legacy PHP versions, security teams face a complex remediation challenge.

The days of vendors selling naked tools that drive up professional services revenue are coming to a close. AI is making it possible to not just automate human tasks, but to deliver an entirely new agent operator-based platform. Humans become managers of agentic operators, and the operators do the day-to-day work of securing web applications and APIs.

Network Map helps admins quickly visualize network topology, understand device relationships, and troubleshoot connectivity issues from a single interface. Learn how to access and use Network Maps in Sophos Fusion to locate devices, utilize Live Discover queries to retrieve device history, and block or release hosts with Active Threat Response (ATR) powered by Sophos Fusion APIs. Ask questions and get expert answers in the Sophos Community.

Is an AI apocalypse actually possible? Harlan Parrott and Matt Duren investigate the doomsday theories and explain why unmanaged agents and zero-days are today’s true risks. Full new episode now live on our channel!

CloudCasa is now available in the Nutanix Kubernetes Platform (NKP) application catalog! In this video, I'll show you how to install the CloudCasa agent directly from the NKP console, register your cluster using the CloudCasa REST API, and remove the agent and clean up when you're done.

Recruiters everywhere are seeing hundreds, if not thousands, of fake candidates, and it goes well beyond AI-polished resumes. Natalie, Persona's head of talent, talks with Michael, an account executive on Persona's Workforce Identity team, about what candidate fraud looks like from the recruiter's chair, why Zoom interviews and flying people on site aren't enough, and what changed after Persona added automated identity verification to its own hiring process.

Fireblocks CFO Michael Levine explains why banks and payments companies are moving onto blockchain infrastructure, and what comes next.

A voicemail from a trusted client. Her voice, her cadence, an urgent $480,000 wire before the cutoff. Except it isn't her. In under 2 minutes, see how AI voice cloning turns a single voicemail into wire fraud, and how a wealth advisor uses Lookout Social Engineering Protection to verify it before the money moves. One voicemail, two outcomes: without Lookout, the wire goes out. With Lookout, the advisor uploads the voicemail to Voice Verifier, sees it flagged as an AI-generated voice and a scam in progress, and calls the client back at her number on file.

PHP2Shell is two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, that can let a stranger run commands on your web server without logging in. On Apache mod_php, it can happen before your application code even loads. We unpack which PHP setups are exposed, why PHP says updating is the only safe fix, what to do about end-of-life PHP, and three questions every CISO should ask about a web-tier foothold. Update: on 26 Oct, researchers reported the first successful in-the-wild exploitation.