Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Ransomware and phishing have always been linked, but the old model was blunt: a phishing email carried the payload, the recipient opened it, encryption followed within hours. What the threat looks like in 2026 is fundamentally different. The email that starts the chain carries nothing dangerous. Instead, the ransomware arrives weeks later, launched by a completely different attacker. So, what can organizations do to protect themselves from these new threats?

Researchers at ReliaQuest are tracking two new phishing toolkits that are designed to bypass multifactor authentication (MFA). The first tool, called “Jalisco,” is a device code phishing platform that pairs with AI-powered phishing-as-a-service platforms like EvilTokens to provide fresh OAuth codes in real time.

Every CISO knows they need to do more with less. Fewer analysts, tighter budgets, more obligations. Matthew Martin has led security through all of it in two very different worlds: 20 years in financial services, and now in higher education at Western Carolina University. After two decades with enterprise budgets and every tool available, Matt made a deliberate choice to take on higher ed with different constraints and a decentralized structure.

The credential with the widest blast radius sometimes has no secret to flag. See how GitGuardian and Anyshift rank risk by what actually breaks.

AI governance tools help organizations manage model risk, enforce compliance policies, and control what AI systems can do.

ServiceNow AI Platform (the enterprise PaaS formerly branded in the Now Platform) contains a critical, unauthenticated remote code execution vulnerability tracked as CVE-2026-6875. The vulnerability allows a remote attacker to escape ServiceNow’s JavaScript execution sandbox. No credentials or user interaction are required, and the attacker achieves full code execution on the underlying instance.

Confluence is used to store some of the most important knowledge across many organizations, such as technical docs, internal procedures, compliance materials, customer information, and even recovery instructions. This article explains the most important Confluence security best practices, how they differ from Jira security, and why backup and recovery should be part of a complete Confluence data protection strategy.

AI agents are moving from experiments into production workflows, and the Model Context Protocol (MCP) is becoming the connective layer that enables those agents to access enterprise data, applications, APIs, repositories, and automation tools. That makes MCP powerful, but also security-critical. As organizations adopt agentic AI, they need to understand not only how MCP improves connectivity but also how it creates new visibility, governance, and attack-surface challenges.