Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

When we shipped the CertKit Keystore in March, it required some admin work from you. Run it on a proper server. Encrypt your backups. Test them. The private keys were yours to protect, as plaintext keys on your disk. Keystore 2.0 makes most of that admin work easier. It’s live now, available on Enterprise plans.

When you’re setting up AWS infrastructure, you need to decide which accounts will host your applications, deployment pipelines, and shared services. AWS Organizations lets you organize workloads and shared services into member accounts based on their ownership, purpose, and isolation requirements. A separate management account handles consolidated billing and administration of the organization.

Security leaders across Asia/Pacific are being asked to do more than watch alerts. Boards and regulators want proof that the organization can withstand an attack, contain it fast and recover with minimal disruption. That shift, from managed security to cyber resilience, is reshaping what organizations need from a security partner.

Many organizations want to run agentic AI in production, but stay stuck worried that an autonomous agent will go rogue and open up serious infrastructure risk. Teams split into three camps: keep agents away from production entirely, let them run wild and hope for the best, or approve every single action by hand. None of these scale.

The Sophos AI team presents new research on anomaly detection Following on from research presented at Black Hat USA 2025, Sophos data scientists Ben Gelman, Tamas Nyiri, and Tibor Kristóf Lányi recently showcased new work on anomaly detection at BSides Las Vegas 2026. As promised, we’re sharing more details of that research (the recording of the talk is also available here). Supervised classifiers in cybersecurity are often trained on data that doesn't capture the most unusual examples.

Learn how AntiFox and ARTEX use agentic AI to find and exploit exposed credentials, what AWS intrusions reveal, and how security teams can reduce credential exposure.