Technology

Are Your AI Assistants the Next Attack Surface?

Sep 23, 2026 By KnowBe4 Threat Lab In KnowBe4

For over a decade, the security industry has focused on one thing: training people not to click. Phishing simulations, awareness campaigns, behavioral nudges. The human is the attack surface. Harden the human, harden the org. And that's still true. But it's no longer the whole picture.

Read Post

KnowBe4

Read more about Are Your AI Assistants the Next Attack Surface?

AI Governance for Public Bodies, and Who Shares the Obligation

Sep 23, 2026 By Kovrr In Kovrr

A public body running a high-risk AI system owes a fundamental rights impact assessment under Article 27 before first use, with the results notified to a market surveillance authority. The obligation is real and it is not yet in force. ‍ Regulation (EU) 2026/1744, in force since July 2026, deferred the section of the Act containing Article 27 to December 2027 for standalone high-risk systems and August 2028 for those embedded in regulated products.

Read Post

Kovrr

Read more about AI Governance for Public Bodies, and Who Shares the Obligation

Vulnerability Management: A Complete Guide to the Process and Lifecycle

Sep 23, 2026 By John Dominguez In Reach Security

If your vulnerability management program runs on a fixed scan-and-patch cadence, whether monthly, quarterly, or tied to a compliance deadline, you are measuring your response time against an attacker timeline that continues to accelerate. Vulnerability management remains a foundational security discipline. It identifies real, exploitable flaws and gives teams a structured way to prioritize and remediate them.

Read Post

Reach Security

Read more about Vulnerability Management: A Complete Guide to the Process and Lifecycle

Claude Mythos Explained: AI Finding Zero-Day Vulnerabilities and Chaining Exploits

Sep 23, 2026 By Forescout Technologies In Forescout

Claude Mythos is an AI model capable of finding and chaining zero-day vulnerabilities at scale. That changes how attacks happen, especially in environments where you can’t patch fast enough. The Forescout Vistaro platform with VistaroAI helps organizations respond with real-time visibility and dynamic control across all connected devices.

View Video

Forescout

Read more about Claude Mythos Explained: AI Finding Zero-Day Vulnerabilities and Chaining Exploits

Feroot Expands DXComply with Code-Free Consent Auditing for Native Mobile Apps

Sep 23, 2026 By Feroot In Feroot

New DXComply release enables privacy, GRC and security teams to verify whether native apps honor user consent choices without SDK integration or code changes. Toronto, Canada, September 23, 2026: Feroot Security Inc. today announced expanded native mobile application consent auditing capabilities in DXComply, enabling enterprises to verify whether iOS and Android apps honor users’ consent choices without requiring SDK integration or changes to application code.

Read Post

Feroot

Read more about Feroot Expands DXComply with Code-Free Consent Auditing for Native Mobile Apps

AI Has Entered the SOC. Governance Has to Catch Up.

Sep 23, 2026 By Beth Dannemiller In Securonix

ISO/IEC 42001 is the international standard for Artificial Intelligence Management Systems. For CISOs, the bigger question is whether governance reaches all the way into the security workflows where AI is beginning to act. Beth Dannemiller, Senior Director, Product Marketing For the last several years, CISOs have been asked a familiar question by boards: What are we doing with AI? That question is changing.

Read Post

Securonix

Read more about AI Has Entered the SOC. Governance Has to Catch Up.

Gartner Names Zenity a Market Shaper for AI Application Security

Sep 23, 2026 By Cinthia Portugal In Zenity

Zenity has been named a Market Shaper in Gartner's inaugural Emerging Market Quadrant for AI Application Security — Startup Vendors, a new report evaluating vendors on their ability to secure AI agents across the full agent lifecycle.

Read Post

Zenity

Read more about Gartner Names Zenity a Market Shaper for AI Application Security

The Agent Will See You Now: Why Healthcare's AI Agent Boom Needs Visibility and Control

Sep 23, 2026 By Bob Clinton In Zenity

Ask AI to Choose a prompt Write a TLDR of this post Explain the security risk Summarize what CISOs should know Healthcare, as an industry vertical, is moving faster on agentic AI than it has in past technology evolutions. Some reports say it is outpacing other regulated industries. Ambient scribes are documenting patient visits in real time. Prior-authorization and revenue-cycle agents are handling payer workflows that used to require staff to log into multiple systems manually.

Read Post

Zenity

Read more about The Agent Will See You Now: Why Healthcare's AI Agent Boom Needs Visibility and Control

How to Prepare for a CompTIA Exam Without Paying for a Course

Sep 23, 2026 By SecuritySenses In SecuritySenses

CompTIA certifications open real doors - Security+, A+, Network+, and CySA+ appear in job postings from entry-level IT support all the way up to federal security analyst roles. The assumption most people run into is that passing one of these exams requires spending $300 to $500 on an instructor-led course. It doesn't. Candidates who pass without dropping that money aren't cutting corners; they're just smarter about where they find the same information. Official exam objectives, free practice materials, active online communities, and a disciplined self-study schedule give you everything a paid course would - minus the price tag.

Read Post