Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break! Quite a brazen attempt I must say.

2025 was a turning point for identity security. Many professionals realized that traditional human and machine-focused identity solutions just don’t work for AI. AI is non-deterministic like a human, yet it’s still software. This creates an entirely new identity category. Traditional IAM tools would treat AI identities as yet another separate type, creating new silos.

Cybersecurity in 2026 will be driven by economics. Not hype. Not novelty. Economics. Attackers follow financial incentives and scale their operations faster than most enterprises can defend. CISOs must shift from reporting technical metrics to explaining business impact, guide safe AI adoption as Shadow AI grows, and design programs that emphasize resilience over perfection.

To protect your IP, your CAD files need file-level security, unencrypted labelling, digital supply chain security and CAD file data governance. How seriously do you take IP protection? Architecture, Engineering, Construction and Operations (AECO) companies that treat IP protection as an afterthought are sleepwalking into disaster.

APIs now sit at the center of almost every digital product, from mobile apps and SaaS platforms to embedded services. As organizations scale, the number of endpoints grows quickly, as does the attack surface. Unmonitored or misconfigured APIs have already led to major incidents across industries, including data exposure, broken authentication, and large-scale account takeover.

As organizations accelerate toward 2026, the cybersecurity landscape is becoming more complex, more unpredictable, and more heavily influenced by fast-evolving technologies like generative AI. Threat actors are moving with unprecedented speed, regulatory demands are increasing, and the tools and techniques needed to defend modern environments are shifting just as rapidly.

As cyber threats grow more advanced, organizations need more than firewalls and traditional password policies to protect sensitive data. Two essential parts of a modern identity security strategy are Identity and Access Management (IAM) and Identity Governance and Administration (IGA). While IAM focuses on verifying identities and enabling secure access to systems, IGA ensures that access rights are appropriate and continuously monitored.

I built a demo showing how to wire up multiple AI agents using Google's Agent Development Kit (ADK) and the A2A protocol, with GitGuardian scanning content for secrets.

700Credit is the major provider of credit reports, fraud detection, identity verification, soft pull credit data, and compliance solutions in powersports, marine dealerships, and automotive in the United States. Based in Michigan, it offers solutions for over 21,000 clients and has more than 250 integration partners, while also managing vital data security for millions of consumers.

LastPass prides itself on being a pioneer in cloud security technology, providing password and identity management solutions for personal and business digital safety. Its over 800 employees and over 20 million customers worldwide have made the company an attractive target for cybercriminals. The company has been in the headlines for several data incidents over the past few years.