Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

China-based cybercriminals are using a sophisticated phishing-as-a-service platform called the “Outsider Phishing Kit” to launch massive phishing campaigns around the world, according to researchers at Group-IB. “The scale of this operation is staggering,” the researchers write. “From December 2025 to May 2026, Group-IB has identified over 100,000 phishing pages targeting 54+ countries, leveraging 267 (and growing) phishing templates.

Every security vendor’s homepage now says “AI-powered” somewhere above the fold, and most are describing the same scanners they sold in 2022 with a model bolted onto the reporting layer. Buyers have noticed, and the skepticism is earned. When everything claims to be intelligent, the label stops conveying information. A security lead evaluating tools is left with one question that matters: whether the tool can actually think through an attack the way a pentester does.

Running Kubernetes in production takes real work. Patching control planes, managing upgrades, and keeping clusters highly available pulls engineers away from shipping applications. Red Hat OpenShift on IBM Cloud removes that operational load. IBM runs the platform as a fully managed service, and your team keeps its attention on workloads.

An AI agent is software that can act on your behalf. It may read documents, emails, and web pages, then use the systems you connected to complete a task. Amazon Bedrock AgentCore makes these agents faster to build and deploy. But securing them requires more than limiting which systems an agent can access. You also need to consider what the agent can read once it gets there. A document, email, or web page may contain hidden or malicious instructions designed to influence an agent’s next action.

A tool gateway reads every call that crosses it and enforces policy on each one. It is blind to whatever never traverses it, which is established and not the interesting part. ‍ The useful number is what fraction of an agent's total action surface the gateway covers. Blindness of unknown size and blindness of known size are different problems, and only the second lets you state what a gateway-based claim is worth. ‍

CrowdStrike has been named a Leader in The Forrester Wave: Proactive Security Platforms, Q3 2026. We received the highest Strategy category score in the evaluation and maximum scores in both the Innovation and Roadmap criteria. This evaluation reflects how the market is evolving. Proactive security is moving beyond traditional vulnerability management.

Security controls change constantly. Firewall rules are modified, endpoint exclusions are added, identity policies are adjusted, and temporary exceptions appear as teams respond to new business and operational requirements. Some of those changes are expected. Some turn out to be harmless. Others quietly weaken the defenses organizations depend on. Detecting that a configuration changed is really important for security teams, but it’s just the beginning of the investigation.

If you're comparing vendors, our guide to the top Exposure Assessment Platforms in 2026 looks at how leading platforms approach discovery, prioritization, and remediation.

HTTPS protects communications between users and the services they access by encrypting data in transit. That makes it much harder for someone to intercept and read that information. But there is a trade-off: encryption can also prevent security controls from seeing what is inside the traffic they are supposed to protect. Your Firebox may know that a user is connecting to a website or service. Without HTTPS inspection, however, it may have limited visibility into what is actually being exchanged.

Quick definitionManaged detection and response (MDR) is a managed security service that provides human-led monitoring, investigation and agreed response actions through a remotely operated security operations center.Extended detection and response (XDR) is a technology platform that correlates security telemetry across multiple domains and provides investigation tools and automated response capabilities for security teams.