Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The victim had a SIEM. Had EDR. Had a mature program on paper. The controls existed—they just didn't do their job on the day. Offensive cybersecurity expert Adrian Culley on the only way to know whether your stack actually works: run the technique and watch. Dump credentials from LSASS memory—did the EDR block it? Did the SIEM rule fire? Did the SOC see it inside their target window?

Regulators stopped asking whether you have security controls. Now they want proof the controls actually work. Host Tova Dvorin sits down with Adrian Culley to argue that CTEM has a silent E—for evidence—and that evidence is now the currency of cyber regulation worldwide. Inside: DORA's Article 26 threat-led penetration testing, NIS2's "assess the effectiveness" clause and personal board liability, the SEC's 8-K materiality clock, NYDFS Part 500's personally signed CISO certification, and the EU AI Act's August logging deadline. Subscribe to The Cyber Resilience Brief for more.

Threat hunting often means following a lead without knowing where it will take you. Your search tools shouldn’t make you choose between exploring a hunch and losing your original results. Driftnet gives threat hunters multiple ways to refine artifact searches as they investigate. Use Add Filter to explore a narrower view without changing the underlying query, Add to Query to make that refinement persistent, or exclude artifacts to quickly zero in on what remains.

AI is merging into the modern workplace at roughly the pace computers did in the 1980s, and the risks are evolving just as fast. IBM and Ponemon found that 97% of organizations hit by an AI-related security incident lacked basic access controls, and 63% had no AI governance policy at all. In this video, Yakir breaks down the seven categories of AI risk every GRC leader needs to understand, and what separates knowing you have a control gap from knowing what it will cost you.

Visibility tells you an asset exists. Security requires knowing what it is, what it can reach, how it behaves, and what controls can be applied. In this clip, David Clapp explains why the gap between visibility and action remains one of cybersecurity's biggest challenges.

Cyber threats continue to evolve, and the first half of 2026 delivered no shortage of new challenges. Forescout Research – Vedere Labs' 2026 H1 Threat Review examines the latest trends in vulnerabilities, ransomware, threat actor activity, supply chain security, and AI-driven attacks. Discover the key findings, emerging attack patterns, and practical recommendations security teams can use to better understand and reduce risk.

How to get into cybersecurity starts with learning how to think about risk, communicate with different stakeholders and keep learning. The InfoSec community contains experienced practitioners willing to share knowledge, so starting your career does not mean figuring everything out by yourself.

CVE of the day - CVE-2026-59847.

How do you get users access to critical systems without exposing your network? Secure remote access. In this episode of Forefront, Todd Berthcume, senior manager of technical marketing engineering, shows how to use an SRA Manager.

Your access, licensing, and policies have been running on a setting Microsoft is quietly retiring. If dynamic groups touch anything in your environment, this affects you, whether you've heard about it yet or not. Tyler Reese, VP Product Management, Identity at Netwrix, walks through what changes and what to do before it does. Aug 20, 11am ET.