Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Recruiters everywhere are seeing hundreds, if not thousands, of fake candidates, and it goes well beyond AI-polished resumes. Natalie, Persona's head of talent, talks with Michael, an account executive on Persona's Workforce Identity team, about what candidate fraud looks like from the recruiter's chair, why Zoom interviews and flying people on site aren't enough, and what changed after Persona added automated identity verification to its own hiring process.

Fireblocks CFO Michael Levine explains why banks and payments companies are moving onto blockchain infrastructure, and what comes next.

A voicemail from a trusted client. Her voice, her cadence, an urgent $480,000 wire before the cutoff. Except it isn't her. In under 2 minutes, see how AI voice cloning turns a single voicemail into wire fraud, and how a wealth advisor uses Lookout Social Engineering Protection to verify it before the money moves. One voicemail, two outcomes: without Lookout, the wire goes out. With Lookout, the advisor uploads the voicemail to Voice Verifier, sees it flagged as an AI-generated voice and a scam in progress, and calls the client back at her number on file.

PHP2Shell is two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, that can let a stranger run commands on your web server without logging in. On Apache mod_php, it can happen before your application code even loads. We unpack which PHP setups are exposed, why PHP says updating is the only safe fix, what to do about end-of-life PHP, and three questions every CISO should ask about a web-tier foothold. Update: on 26 Oct, researchers reported the first successful in-the-wild exploitation.