Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
OWASP Top 10 for Agentic Applications 2026: What It Means for Enterprise AI Security
OWASP, the Open Worldwide Application Security Project, has published Top 10 lists for over two decades to help security teams prioritize the risks that matter most. The original OWASP Top 10 for web applications became the industry’s default checklist for application security. When large language models moved into production, OWASP followed with the Top 10 for LLM Applications, addressing risks like prompt injection and sensitive information disclosure in single-turn model responses.
New pattern analysis techniques to defend against fraud
Sophisticated fraudsters scale systems to increase their ROI. But it’s also a weakness that you can exploit to shut down fraud rings and keep attacks from scaling. In this discussion, fraud experts Nisreen Hussain, Irfan Faizullabhoy, and Ashley Fang show off how pattern and link analysis stop AI-powered fraud, account takeovers, and large fraud rings.
Candidate verification: Stop fraud before it enters your workforce
Sophisticated fraudsters are now targeting the recruiting process. Whether it's a "fake" candidate built on synthetic data, an interviewee hiding behind a deepfake, or a candidate getting a friend to take their technical test, hiring teams are facing a fraud crisis.
Phishing Attack
Nobody catches malware happening in real time, and that's by design. In this video, we outline the actual sequence, from the moment it lands to the moment your data is gone. Watch part 1 of 5 where we break down how attacks actually happen.
What Is Network Security Assurance?
Every security leader has a version of the network in their head. They know which systems should be segmented, which applications should be reachable, which ports should never be open, and which access paths should not exist. They know how the architecture is supposed to work. The harder question is whether the live environment is actually enforcing that design right now. That question is getting more difficult to answer.
AWS WAF Data in Graylog
If you’re running applications behind an Application Load Balancer, Amazon CloudFront, API Gateway, or AWS AppSync, AWS WAF is your first line of defense against malicious web traffic. Graylog provides a purpose-built way to make those enforcement decisions immediately actionable.
The Hidden Cost of Manual Security Reviews
Microsoft 365 includes a wide range of security capabilities designed to help protect identities, devices, email, and data. Most MSPs already have access to these tools. The challenge is ensuring everything is configured correctly and reviewed consistently; not just having the “correct tools”. As MSPs grow, manual security reviews become increasingly difficult to maintain. Every tenant needs regular attention as configurations change over time and security recommendations continue to evolve.
Here's How to Secure Your Privacy (Before It's Too Late)
Privacy is getting harder to maintain. Governments are expanding surveillance. But there are practical steps you can take right now to secure your digital life and protect your family. James Rees walks through exactly how to do it. From choosing an operating system to securing your email and banking to protecting your devices. It's not expensive and it doesn't require being a tech expert. Operating system choice matters. VPNs are non negotiable. Backup everything with MFA enabled. Diversify your bank accounts. Use credit cards instead of debit cards. And yes, keep some cash on hand.
Third Party Risk Management Is Broken by AI
Third party risk management is breaking because AI writes the questionnaire and AI writes the answer. That leaves security teams with polished vendor responses, less proof, and far less confidence that supplier controls, governance and cyber risk are being measured honestly.