Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

MITRE ATT&CK's detection analytic for adversaries mining SharePoint describes bulk access to files and metadata in a short window by privileged or rarely used accounts. That is also a description of Microsoft 365 Copilot answering a question. The technique hasn't changed, but the baseline has, and the exposure now happens with no vulnerability, no compromised credential, and no malicious intent anywhere in the chain.

Recent cyberattacks against U.S. water and wastewater systems have put some familiar operational technology (OT) security problems back in the headlines. Federal agencies have warned about malicious actors targeting internet-facing programmable logic controllers (PLCs), changing device configurations, and disrupting operations at utilities across multiple states.

A Ukrainian-branded ClickFix lure, a Russian-branded traffic panel, and victims from 32 countries across Europe, the Americas and Asia-Pacific.

Scammers are using AI to generate phishing pages that impersonate antivirus products, according to Malwarebytes.

China-based cybercriminals are using a sophisticated phishing-as-a-service platform called the “Outsider Phishing Kit” to launch massive phishing campaigns around the world, according to researchers at Group-IB. “The scale of this operation is staggering,” the researchers write. “From December 2025 to May 2026, Group-IB has identified over 100,000 phishing pages targeting 54+ countries, leveraging 267 (and growing) phishing templates.

Every security vendor’s homepage now says “AI-powered” somewhere above the fold, and most are describing the same scanners they sold in 2022 with a model bolted onto the reporting layer. Buyers have noticed, and the skepticism is earned. When everything claims to be intelligent, the label stops conveying information. A security lead evaluating tools is left with one question that matters: whether the tool can actually think through an attack the way a pentester does.

Running Kubernetes in production takes real work. Patching control planes, managing upgrades, and keeping clusters highly available pulls engineers away from shipping applications. Red Hat OpenShift on IBM Cloud removes that operational load. IBM runs the platform as a fully managed service, and your team keeps its attention on workloads.

An AI agent is software that can act on your behalf. It may read documents, emails, and web pages, then use the systems you connected to complete a task. Amazon Bedrock AgentCore makes these agents faster to build and deploy. But securing them requires more than limiting which systems an agent can access. You also need to consider what the agent can read once it gets there. A document, email, or web page may contain hidden or malicious instructions designed to influence an agent’s next action.

A tool gateway reads every call that crosses it and enforces policy on each one. It is blind to whatever never traverses it, which is established and not the interesting part. ‍ The useful number is what fraction of an agent's total action surface the gateway covers. Blindness of unknown size and blindness of known size are different problems, and only the second lets you state what a gateway-based claim is worth. ‍

CrowdStrike has been named a Leader in The Forrester Wave: Proactive Security Platforms, Q3 2026. We received the highest Strategy category score in the evaluation and maximum scores in both the Innovation and Roadmap criteria. This evaluation reflects how the market is evolving. Proactive security is moving beyond traditional vulnerability management.