SAP's Patch Window Has Collapsed
Attackers are exploiting newly disclosed SAP flaws in days, forcing companies to compress maintenance cycles that were built for quarters
George V. Hulme
Certificate Authorities, PHP Runtimes, and the Limits of Defense-in-Depth in the “Vulnpocolypse” Era
The eMudhra vulnerability exposed a years-long window of significant certificate risk. The PHP2Shell vulnerability is ubiquitous. Last week’s five vulnerabilities targeted many of the security controls assumed to be trustworthy.
AI Security Roles Are Proliferating. CISO Authority Is Not
Large enterprises are naming AI security leaders inside security organizations while leaving AI governance accountability with CIOs, chief AI officers, and CTOs, a 1,400-respondent report finds.
The Federal AI Agent Incident Playbook is Out: AI Safety Teams Wrote the Framework. Security Teams Have to Make It Real
Incident readiness for agentic systems means red teams, logging architecture and recovery. Not policy documents.
AI May Beat Quantum to the First Cryptographic Surprise
AI-assisted cryptanalysis may threaten encryption before quantum computers arrive. Experts urge crypto agility, inventories and post-quantum planning.
The Agentic AI Trust Gap: Why SOCs Are Drowning in Threat Intelligence Alerts
Threat intelligence budgets are rising, but alert fatigue, false positives, and integration gaps leave SOC teams struggling to keep pace with AI-powered cyber threats, new Flashpoint research finds.
Playbook for the Incoming Healthcare Regulatory Regime
With S. 3315 and the pending HIPAA Security Rule NPRM in the wings, healthcare providers need to start making changes now to keep pace with the rapidly changing regulatory regime.
Senate Votes to End HIPAA’s Risk-Based Cybersecurity Era
The Health Care Cybersecurity and Resiliency Act would mandate MFA, encryption, and penetration testing — with a 36-month clock and no guaranteed funding for rural providers.
Agentic AI Is Outrunning Enterprise Identity Governance
AI agents can co-opt human credentials and operate at machine speed, but most enterprises lack the identity frameworks to detect, contain, or audit what they're actually doing.
Water Utilities Are Running on Email Alerts and Phone Calls to Defend Critical Infrastructure
WaterISAC's partnership with Cyware is designed to change that: but automated intelligence alone won't protect utilities that lack the staff to act on it.
AI Agents Have Changed the Rules of the Game. Detection and Response Haven't Caught Up Yet
As autonomous agents write code and manage infrastructure with scant oversight, the security frameworks built for predictable systems can’t keep pace.
Manufacturing Cybersecurity Spending Is Up. So Is Ransomware
Manufacturers are investing in cybersecurity, yet ransomware attacks keep rising. New research exposes persistent vulnerabilities and stolen credentials.
9 AI Security Lessons From CYBR.SEC.CON 2026
Nine AI security lessons for CISOs on agents, identity, governance, compliance, cognitive risk, open source and human resilience.
CISO Ann Delenela: Don't Fear the Change. Lead It.
Entergy CISO Ann Delenela used her CYBR.SEC.CON. 2026 keynote to argue that AI and accelerating change demand something technology cannot provide: deliberate, accountable human leadership.
Two Security Operations Realities Are Emerging. Which One Are You Building?
A small but growing cohort of organizations has moved agentic AI from pilot to production and is already operating at a fundamentally different level. The gap between them and everyone else is growing.
Reputation, Not Ransom, Leading Driver of Incident Response Spending
A new Forrester/TransUnion survey finds 77% of security leaders rank reputation damage above revenue loss after a cyberattack — and the reasoning behind that shift matters more than the stat itself.