Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

GenAI fraud detection in academia vs industry

Academic fraud datasets often lack real-world grounding and miss insights that you can only glean from defending against ongoing adversarial attacks. Just ask Zhaofeng Si, a PhD student in computer science at the University at Buffalo who studies the detection of AI-generated synthetic images. Three weeks ago, he joined Persona for a 12-week internship. Now, he’s working alongside Persona’s research scientists to build a benchmark for selfie fraud.

Put agentic AI to work: Real-world defense against threats

Attackers are using AI to compress timelines from hours to minutes. Most SOCs, and most security platforms, weren’t built for that speed. Join Elastic Security product and research experts for a look at how modern security teams can detect, investigate, and respond faster using agentic AI. You’ll learn how to: You’ll leave better equipped to reduce investigation time, keep analysts focused on decision-making, and modernize security operations for machine-speed threats without removing humans from the loop.

Data on The Frontline: How Geopolitical Tensions Change Cybersecurity

Chris Jacob, Field CISO, Securonix There is a particular kind of unease that comes with geopolitical tension. It rarely arrives for security teams as one clean, obvious event. More often, it shows up as a change in tempo across the environment. Scanning increases and phishing attempts feel sharper. Then you start having leadership asking harder questions about exposure, suppliers, regions, and sensitive data.

What Singapore's CCoP 2.0 Requires of Critical Infrastructure Owners

Picture Singapore’s largest telecommunications network. It carries the financial transactions, emergency communications, and government data of a city-state of nearly six million people. Now picture that infrastructure silently infiltrated for months by a state-linked espionage group, undetected until the telcos’ own security teams found it.

The Breaches You Don't See: Why Monitoring External Exposure Prevents Breaches

Most cybersecurity conversations focus on stopping attackers from breaking in. New malware variants, ransomware campaigns, AI-powered attacks, and zero-day vulnerabilities dominate the headlines. Yet many breaches occur for a much simpler reason: organizations unintentionally expose systems, applications, or data to the internet.

The Enterprise Just Got Its First Population of Autonomous Actors

For the past two decades, enterprise security has evolved around a relatively stable assumption: software executes instructions, people take actions, and security teams are responsible for understanding and governing the interaction between the two. The technologies have changed. Infrastructure moved to the cloud. Applications became distributed. Identities expanded beyond employees to include partners, contractors, and machines. Yet the underlying model remained remarkably consistent.

Microsoft Build 2026: What UK Businesses Need to Know

Microsoft Build 2026 delivered a clear message: AI is no longer being positioned as a standalone productivity tool. It is becoming a core platform capability embedded across the Microsoft ecosystem. From AI agents to developer tooling and enterprise governance, this year’s event focused on helping organisations move from AI experimentation to operational adoption. For UK businesses, the most important takeaway is not a single announcement.

How the Fireblocks Security Center gives security teams full visibility

Security teams need to see the platform they're securing. The new Fireblocks Security Center brings every security-relevant signal in your workspace into one purpose-built dashboard inside the Fireblocks Console. In this walkthrough, we show how the Security Center consolidates platform usage data into a single view built for analysis by your internal security people. What the Security Center covers.

npm v12's Biggest Security Change: From Implicit to Explicit Trust

For years, installing an npm package has meant trusting that every package in the dependency tree will behave as expected. Whether code originated from the npm registry, a Git repository, a remote URL, or an installation script buried deep within a transitive dependency, npm would typically execute or retrieve it automatically during the installation process.