Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

We are sharing six things to check before you sign: who's actually testing, proof of exploit, cloud and API coverage, retesting, continuous testing, and report quality. Backed by 6.8M findings from the State of Pentesting 2026 report. Chapters Astra Security is a penetration testing company that combines autonomous and human-validated pentesting for web apps, APIs, cloud and AI applications.

Sophos AI Defense finds the AI tools employees and applications are using, including the ones security teams never approved, and enforces policy wherever they run. Every AI tool an organization can’t see is a potential gap in confidentiality, integrity, and availability. Delivered through Sophos Fusion, the AI-native cybersecurity defense system, Sophos AI Defense connects controls on the device, across the network, at sign-in, and in the browser into one line of defense, so teams can safely adopt AI faster without adding another disconnected tool to manage.

What if masking sensitive data actually broke your AI application? Most AI security strategies start with a simple rule: mask sensitive information before it reaches the LLM. But real AI workflows are more complex. An AI agent might need to search a CRM, retrieve a contract, check account details, call external tools, and generate a response. Each step may require a different level of access to sensitive data.

Tanium's new Service Graph for Tanium Atlas connector now sends only what changed to your ServiceNow CMDB; empowering your workflows and automations near real-time data. Today we’re looking at the new Service Graph Connector for Tanium Atlas. Instead of re-sending your whole inventory every cycle, it detects what changed since the last sync and sends only that - keeping your CMDB current without the load of a full sync every time.

This week’s briefing covers: Dive deeper.

Ten government agencies across seven countries put their names on one advisory. AA26-281A profiles Integrity Technology Group — a China-based, for-profit contractor that builds, sells and hosts the tooling behind large-scale intrusions, and whose domains the FBI seized on October 8. Tova Dvorin and Adrian Culley break down MicroScan’s 1,300 pentest scripts, the eBurst spray that tries ten interfaces into one Microsoft 365 mailbox, SoftEther VPN hiding behind trusted Windows process names, and a 12-year-old Bash CVE still exploited in the wild.

AI changed how we work. It also changed how we're attacked. And every one of these attacks started on mobile. In 2 minutes, see how AI-powered smishing, deepfake voice, exploited app vulnerabilities and shadow AI turn the phone in your pocket into the front door to your business, and how the Lookout Mobile AI Security Platform protects every stage of the modern mobile attack. CHAPTERS Built on 15+ years of mobile security expertise and the world's largest mobile dataset. iOS, Android and ChromeOS. Privacy-first for corporate and BYOD devices.

New hire onboarding doesn't have to be hard; it's just scattered. The prompt is in the Tines 3B example gallery. It's a starting point, not a template: swap BambooHR for Workday, Jira for ServiceNow, and set your own checklist rules and approvers.

AI is reshaping how we build and how we're attacked, often at the same time. If an agent can touch the data that runs your business, that data has to be recoverable. The Rubrik AI + Identity Resilience Summit brought together security leaders to answer one question: what does resilience look like when agents operate on both sides of the perimeter? From identity recovery to securing the agents inside your environment, every session is now available on demand.

When attackers compromise internet-facing devices, they may use them to access internal services and move laterally through the environment. Falcon Next-Gen Identity Security helps identify and stop this activity with dedicated detection and prevention for connections originating from classified internet-facing devices. With conditional access and automated response, organizations can block suspicious access, disable compromised users, and contain threats before they spread.