Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Data Center Episode: Power, Water & Local Impact | Attempted Intelligence Ep. 2

How much power and water do AI data centers actually consume—and what does their growth mean for local communities? In Episode 2 of Attempted Intelligence, hosts Harlan Parrott (VP of AI Innovation at KnowBe4) and Matt Duren (SVP of Engineering for AI & Data) go head-to-head in a friendly debate over the environmental and economic realities of AI infrastructure. A coin flip assigns their positions as they tackle the viral claims surrounding AI energy consumption, local water usage, and the trade-offs facing local governments.

What you need to know about PHP2shell. Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

Two critical remote code execution vulnerabilities have been found in PHP itself. Treat all versions as affected. ‍The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both have a CVSS v4.0 score of 9.2. The PHP security team will release fixes on October 21, 2026, at 16:00 CEST / 10:00 EDT / 07:00 PT. If you run PHP anywhere in your stack, please stay tuned for workarounds and patches. Be prepared to take action.
Featured Post

How do you prepare leaders for a security crisis?

Toro Solutions and Insignia Crisis Management recently brought together people experienced in security, crisis management, communications and resilience to discuss how to prepare leaders for a serious security crisis. Most organisations work to prevent serious security incidents and plan how to respond. But a plan can only take you so far. People must make decisions quickly, with incomplete information, while the situation is still changing.

The Benefits of Segmenting Visitor Wireless Access from Corporate Networks

Convenient internet access is available to visitors through guest Wi-Fi without granting them entry into internal systems. Risks to digital safety are present when guests utilize the same infrastructure as corporate computers and servers. Partitioning these connections is a method to safeguard private data and ensure consistent connection speeds. Network isolation is a functional component of a security plan for organizations that host clients or contractors.

When the Breach Already Happened: Choosing a Security Team That Earns Its Keep

Managed cybersecurity services turn a scattered pile of security tools into one accountable team that watches your systems while your own staff sleeps, ships product, or simply steps away from the desk. The promise is quiet but powerful. Someone competent is always on duty, confirmed threats get contained in minutes rather than days, and the monthly bill lands well below the cost of staffing three analyst shifts yourself.

The Executive Roadmap to Application Security for DORA Compliance

If you lead security at an EU financial institution or ICT service provider, the Digital Operational Resilience Act (DORA) is already reshaping your calendar, your budget, and the questions your board is asking. What it should also be reshaping is how you think about your software. Application security for DORA compliance isn’t a discrete project you hand to your development team.

What Changed Before the Alert? | Reach Security x ECI

Garrett Hamilton, co-founder and CEO of Reach Security, joined Jonathan Brucato, Vice President of Cyber Defense at ECI. In this clip, Garrett walks through Reach Everywhere with a ransomware detection as the example: what the controls on that host look like, and what changed in the weeks before. In the full episode.

Data masking explained: techniques, use cases, and limits

Data masking limits unnecessary exposure when teams copy sensitive production values into testing, analytics, and sharing workflows. It replaces those values with realistic substitutes, but weak implementations still permit inference, linkage, or reversal. Effective programs select techniques based on downstream use and test each output against its intended workflow.