Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Join us for this week's Defender Fridays as we explore ICS phishing and calendar invite abuse with John Gaulding, Full Stack Engineer at Sublime Security. John examines how attackers are weaponizing calendar invites to bypass email security defenses and create persistent attack vectors. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.

In this episode of Nucleus Conversations, industry analyst and researcher Jon Oltsik unpacks the current state of exposure management, why so many organizations still struggle to manage cyber risk at scale, and the impact the recent Nucleus 3.0 releases will have for customers.

Discover the future of Cybersecurity at IdentityShield Summit 2026 We’re inviting you to be a part of one of the biggest and boldest AI-driven cyber events, where you’ll deep dive into innovations, witness panels. It's a premier two-day event that brings together 5000+ global IT leaders, CISOs, CTOs, developers, and cybersecurity professionals. Get ready for an action-packed 2-day event! At this event, you can.

This or That. Favorite Books of SecurityScorecard Bracket, Cyber Edition is BACK – but this time it's Security Books! �� CEO and Co-Founder of SecurityScorecard Aleksandr Yampolskiy has another list of books you'll want to grab for some winter break reading and relaxation. Which ones are you hoping end up in your stocking this year? Drop a comment with your favorites and recommendations below.

Install ggshield the right way for your OS and get scanning in minutes. In this video, we walk through the most common installation paths for macOS, Linux, and Windows, plus container options if that’s your workflow: macOS: install with Homebrew, or grab the standalone.pkg from the ggshield releases page (no Python required, but you’ll update manually). Linux: install via Deb/RPM packages available on Cloudsmith. Windows: install via Chocolatey, or download the standalone.zip from the releases page (no Python required, but you’ll update manually).

***********************************************************************************

Brave Search MCP in Action!

Forescout's approach to universal Zero Trust network access is focused on resilience against lateral movement and unauthorized access.

Shadow APIs and Obscurity In this clip from the A10 Networks discussion, "APIs are the Language of AI Protecting them is Critical," security experts Carlo Alpuerto and Jamison Utter focus on how the rise of Agentic AI dramatically increases the risk posed by older, internal, and often-forgotten systems.