2026-07-16 00:00
GitLab's new Security Review Flow, currently in public beta, addresses a critical gap in identifying application logic flaws that traditional static scanners often miss. π This tool analyzes code changes like a security expert, focusing on intent rather than patterns. It detects flaws such as broken authorization and business logic errors early in the development process, reducing overall costs and risks. π» Security Review Flow complements existing scanners, providing context-rich findings...
Mark Settle
2026-07-15 15:00
π Exciting results from our recent independent testing of the Cisco Secure Firewall 6160 with NetSecOPEN! The firewall achieved a remarkable 5X increase in throughput compared to previous benchmarks, while maintaining a 100% threat block rate. The test tools actually reached their limits before the firewall did, showcasing its advanced capabilities. This performance is crucial for organizations facing increasing demands from AI workloads and encrypted traffic. #CyberSecurity #CiscoFirewall...
Zack Kielich
2026-07-14 18:53
Navigating secure access for human staff is complex. Traditional VPNs often allow excessive access, prompting the shift to zero-trust network access (ZTNA). The challenge intensifies with the addition of AI agents. Ensuring tailored access based on need, while maintaining a unified access architecture, is essential. Join us on July 28, 2026, for a webinar featuring experts from Tailscale, discussing the integration of human and AI access policies. ππ»π
#Cybersecurity #AI #AccessControl #ZTNA...
Alex Wilhelm
2026-07-14 00:00
Space is now recognized as critical infrastructure, yet defenses are lagging behind. Recent events, such as the AcidRain malware attack during the Ukraine invasion, highlight vulnerabilities in satellite systems. This incident affected thousands of satellite modems and disrupted vital services, showing that traditional cybersecurity measures are insufficient. With the rapid growth of satellite operations, now exceeding 14,000, it's essential to strengthen our security posture to protect this...
Marcial Villegas
2026-07-13 21:20
π In the latest article, the importance of consistent security model deployment is highlighted. A new release platform aims to integrate protections without disrupting customer workflows, addressing the evolving tactics of adversaries. The focus is on maintaining the false-positive rate (FPR) across model updates to avoid unexpected disruptions for users. Cisco is open-sourcing their FPR calibration solution to help minimize these issues. Check out the code on GitHub! π #CyberSecurity #AI...
Konstantin Berlin
2026-07-13 14:00
π In the latest article, we explore the urgent threat to key exchange known as "harvest now, decrypt later." This strategy allows attackers to record encrypted traffic now and decrypt it once quantum technology advances. The focus is on two key algorithms: Diffie-Hellman, a widely used method for secure key exchange, and the emerging post-quantum algorithm, ML-KEM. Understanding these risks is vital for future security. Stay informed! π‘οΈπ» #CyberSecurity #QuantumComputing #DataProtection...
Julio Gomez
2026-07-13 13:50
Security teams are facing a challenge of data overload in modern SOCs. With the influx of alerts from various sources, distinguishing genuine threats from background noise is increasingly difficult. π Rethinking alert strategies is crucial. Instead of focusing on individual events, teams are now building detections around users and workloads to create a clearer picture of security events. π AI is playing a supportive role, helping analysts process logs, tune detection rules, and prioritize...
Carly Page
2026-07-10 11:00
Software supply chain security threats remain a significant concern for developers. π‘οΈ Recent collaborations, like that of RapidFort and ReversingLabs, aim to enhance security through curated Open Source Dependency Libraries. This initiative focuses on providing tools for validation and hardening. π Mike Wood from RapidFort emphasizes the importance of understanding that packages with zero vulnerabilities can still pose risks. Developers are urged to consider dependencies critically. β οΈ...
Adrian Bridgwater
2026-07-09 16:00
π The Cybersecurity and Infrastructure Security Agency (CISA) emphasizes the importance of Software Bill of Materials (SBOMs) in their updated 2025 guidance. An effective SBOM must include all software components, including transitive dependencies, configuration files, and fork lineage. π‘οΈ A "sniff test" for hardened images is crucial for ensuring transparency and security. This simple method can help teams verify the integrity of their software components. Continuous monitoring and...
Christian Dupuis
2026-07-08 00:00
The article discusses the importance of governance in autonomous security agents. It highlights that while these agents are advancing in capabilities, governance structures are lagging behind. Effective governance needs to be integrated into their architecture, focusing on reasoning, evaluation, and telemetry. Current models allow for varying levels of autonomy, but they do not ensure that agents operate effectively. With regulations like ISO 42001 and the EU AI Act approaching, organizations...
Marcus Jeffes
2026-07-07 17:59
At Cisco Live AMER 2026, we utilized the Agentic SOC to investigate suspicious LDAP activity with AI support. This integration provided a quick and accurate assessment of a potential SharpHound Recon attack, revealing it as a benign near miss. The use of Endaceβs full packet capture allowed us to enhance threat-hunting processes by providing critical insights and data for our incident response teams. Our goal was to empower analysts, even those new to the SOC, to make informed decisions...
Manoj Sudhakara
2026-07-02 21:25
AI is reshaping organizations, boosting productivity and innovation. Yet, concerns about data privacy and security can hinder adoption. π€π NVIDIA Confidential Computing (CC) offers a solution, protecting enterprise data and model integrity during active use. Benchmark results show CC's performance is nearly identical to traditional methods, achieving up to 98% efficiency. ππ‘ #AISecurity #DataPrivacy #NVIDIA #Innovation #TechTrends
Elizabeth Goodman
2026-07-02 21:05
A recent cargo theft in Chicago has highlighted a new vulnerability in AI infrastructure: the physical supply chain. ποΈπ Two trailers containing $1.3 million worth of data center equipment and copper wire were stolen from different locations. This incident underscores that as AI demand grows, the risk of theft of essential hardware is increasing. Supply chain delays can impact the entire deployment of AI systems, making this an emerging concern for the industry. ππ #AI #CyberSecurity...
Amanda Caswell
2026-07-02 14:00
π Social login options like "Sign in with Google" and "Continue with Apple" have simplified user onboarding for over a decade. However, they depend on third-party cookies, which privacy regulations are challenging. πͺ Browsers like Safari and Firefox have already blocked these cookies by default, leaving many users in a cookieless environment. π FedCM (Federated Credential Management) is emerging as a solution, enabling federated logins without cross-site tracking. This new API allows browsers...
Jeff Hickman
2026-07-01 20:29
π On June 24, Novee Security revealed a CI/CD vulnerability named "Cordyceps," affecting organizations like Microsoft and Google. This flaw allows unauthorized GitHub users to hijack workflows, compromising open-source supply chains. Out of 30,000 scanned repositories, 654 were flagged, with 300 confirmed exploitable. Developers often neglect CI/CD pipelines as security risks, leading to potential threats. Security scanners also struggle to identify such nuanced vulnerabilities....
Meredith Shubel
2026-07-01 15:00
π As businesses embrace AI, the need for effective network security is critical. Embedded network security offers a solution by integrating protection directly into the network, addressing the complexities of AI workloads and dynamic data flows. In this evolving landscape, AI-driven threats are growing more sophisticated, requiring a proactive approach to safeguard data without overwhelming IT teams. Learn more about how this innovative security method can enhance your operations. ππ»...
Kiran Ghodgaonkar
2026-07-01 14:00
In January 2021, a single line of code was added to a widely used bash script, leading to a major security breach. This script sent sensitive environment variables to an unknown IP address for 61 days before being detected. The incident highlights a systemic issue in modern software security. As new tools and integrations emerge, the pipeline becomes the new perimeter that must be secured. Organizations must rethink security measures to protect against such vulnerabilities. ππ» #CyberSecurity...
Zeen Rachidi
2026-06-30 15:00
π Data centers are essential for modern business operations, powering everything from AI applications to secure data storage. However, they are increasingly targeted by cyberattacks. As the threat landscape evolves with AI and quantum computing, organizations must enhance their data center security. Outdated infrastructure poses significant risks, leading to vulnerabilities that attackers can exploit. Cisco offers resilient, quantum-safe solutions that provide real-time protection and help...
Shankar Varanasy
2026-06-30 14:04
π Cisco introduces a Partner Maturity Model for Vulnerability Operations, designed to help partners manage AI-driven threats effectively. This framework includes five levels, starting from basic manual responses to advanced proactive defense strategies. It aims to align partners' security capabilities with customer needs as demand for managed services rises. Explore how this model can enhance your security operations! #Cybersecurity #AI #VulnerabilityManagement #Cisco #PartnerEcosystem
Alex Pujols, Ph.D.
2026-06-29 19:24
Fine-tuning large language models can enhance cybersecurity tasks like phishing detection. However, our research shows it may also introduce new vulnerabilities. While fine-tuned models perform better, they can be more easily fooled by subtle code variations. This highlights the need for careful monitoring in security practices. For insights on managing these changes, check out the full article. ππ‘οΈ #Cybersecurity #AI #MachineLearning #FineTuning #ResearchInsights
Ryan Fetterman
2026-06-29 16:08
π Agencies must move beyond CISA BOD 26-02 compliance by upgrading End-of-Support devices. Modernizing networks transforms them into security sensors, enhancing operational visibility and enabling zero-trust enforcement. Ciscoβs solutions offer telemetry and analytics that help agencies understand their security landscape. This evolution is key to continuous modernization and risk mitigation. ππ₯οΈ #CyberSecurity #NetworkTransformation #GovTech #CISA #ZeroTrust
Corey Schultz
2026-06-29 16:02
AI agents are rapidly transitioning from demos to real-world applications, creating new security challenges. π Cisco introduces Agent Runtime Protection in its AI Defense Python SDK, enabling easy integration for securing LLM calls and external tool interactions. This one-line code addition helps protect against potential attacks. As AI agents become more prevalent, understanding their security needs is crucial. 83% of companies plan to deploy AI agents, but many security systems are not...
Venkat Subramanian
2026-06-29 15:50
π AI agents are evolving, moving beyond simple chat functions to perform tasks like inspecting code and querying internal systems. With this advancement, ensuring a secure and governed environment is crucial, as these agents can access sensitive enterprise data. The NVIDIA Secure Agent Workspace Reference Design emphasizes a new structure, where execution happens in a managed workspace, enhancing security and oversight. #AI #EnterpriseSecurity #NVIDIA #Automation #TechTrends
Michelle Horton
2026-06-29 14:44
In fintech, security incidents are costly. In 2024, the average data breach cost $6.08 million, affecting not just finances but also reputation. Static code analysis is vital for compliance, catching issues early in the engineering workflow. It supports standards like PCI DSS and ISO/IEC 27001, integrating seamlessly into CI/CD processes. Ensuring security means having reliable systems to catch problems before they reach production. #Fintech #CyberSecurity #Compliance #StaticCodeAnalysis...
Efim Samoylov
2026-06-26 18:36
π The tech industry is uniting to enhance open-source security with the launch of Akrites, led by the Linux Foundation and backed by 19 organizations, including AWS, Google, and Microsoft. π‘οΈ This initiative aims to streamline the discovery, remediation, and disclosure of vulnerabilities in critical open-source software. AI models are now making it possible to identify multiple vulnerabilities quickly, but attackers have access to these tools as well. π As AI tools reveal thousands of...
Paul Sawers
2026-06-26 18:26
π¨ The US government has mandated restrictions on OpenAI's upcoming GPT 5.6 model due to cybersecurity concerns. π€ Only a select group of government-approved partners will have access during the initial release. This follows a similar directive given to Anthropic for their AI models. π OpenAI CEO Sam Altman confirmed that access will be granted customer by customer, which is an unusual approach for such technology. #OpenAI #GPT56 #AI #Cybersecurity #Innovation
Adrian Bridgwater
2026-06-26 13:00
Many AI agent projects encounter challenges during security reviews due to unclear identity models and broad permissions. This issue can halt progress when questions arise about the identity under which agents operate. Research indicates a significant increase in AI agents, highlighting the growing need for well-defined identities to ensure accountability and security. To address this, developers must focus on key identity decisions, such as using workload identities instead of shared service...
Jackson Connell
2026-06-25 10:02
π¨ Privacy Alert! π¨ Recent research highlights the risks of membership inference attacks on chatbots and large language models (LLMs). These attacks can reveal whether specific individuals' data was used in training without directly accessing databases. The study emphasizes that current detection methods may not be enough to protect user privacy, especially for fine-tuned models. Researchers are exploring these vulnerabilities to help developers strengthen their models against such threats. π‘οΈ...
Katie Fraser
2026-06-24 20:53
π Azul Systems is offering a free vulnerability risk assessment for Java Virtual Machines (JVMs). This tool helps DevOps and SecOps teams identify unpatched JVMs and enhance security before AI-driven threats emerge. The assessment scans networks to find JVM instances and provides a prioritized remediation roadmap, referencing established vulnerability databases. Azul's approach targets its security-only Critical Patch Updates, aiming to minimize risks during Java updates. They claim this...
Darryl K. Taft
2026-06-23 12:00
Enhancing threat hunting at Black Hat involves balancing data sources. π Recently, the Splunk Attack Analyzer (SAA) replaced Secure Malware Analytics (SMA) for malware threat analysis. SAA offers detailed data, allowing us to refine our threat landscape reporting. Collaboration was key, as David and Lily developed a query that extracts and reshapes critical submission metadata. This innovation provided deeper insights, improving our workflow efficiency. π #ThreatHunting #CyberSecurity...
Aditya Raghavan
2026-06-22 16:06
π SoftBank Corp. has enhanced its Security Operations Center (SOC) by automating its triaging workflow using Cisco Foundation AI's open-source model. This integration allows for the detection of suspicious software and dynamic policy verification, streamlining operations significantly. The model categorizes software into 17 types for efficient enforcement of company policies. Previously manual processes are now automated, freeing up analysts to focus on more critical investigations. #SoftBank...
Huaibo Zhao
2026-06-21 17:00
π¨ A recent report from Tenet Security highlights a vulnerability known as "agentjacking." This attack exploits a public Sentry key to turn AI coding agents like Claude Code, Cursor, and Codex into code-execution engines on developers' machines. The process involves sending a fake error report that the AI agent interprets as an instruction, making it act without any malware or stolen passwords. This security flaw stems from the design of Sentry's Data Source Name (DSN), which is safe for human...
Janakiram MSV
2026-06-17 15:00
π Wireless security is evolving with the rise of AI and IoT. Midsize businesses face increasing threats as new devices connect daily, putting pressure on small IT teams. Modern standards like WPA3, now part of Wi-Fi 7, offer stronger protection without complicating operations. Adopting these standards is feasible for growing businesses. Recent reports show 85% of U.S. organizations faced wireless security incidents last year, highlighting the urgent need for effective solutions....
Ameya Ahir
2026-06-16 15:00
π¨ Independent testing shows that Cisco Secure Email Threat Defense (ETD) is a leader in email security. In the May 2026 SE Labs evaluation, ETD earned the AAA award, achieving a 94% Total Accuracy Rating. It successfully detected 478 out of 486 threats, resulting in a 98% detection rate. ETD effectively blocked all phishing attempts, ensuring zero inbox compromise. This highlights the importance of proactive email security in todayβs threat landscape. #EmailSecurity #Cybersecurity #CiscoETD...
Deepali Shukla
2026-06-16 00:00
Travis McPeak, Head of Security at Cursor, discussed the complexities of securing AI agents on the Zero-Shot Learning podcast. He emphasized the challenges of managing non-deterministic agents that have access to sensitive systems. To address these risks, he advocates for secure-by-default workflows and embedding security policies as code. This approach ensures that security keeps pace with business needs while minimizing potential damage. Travis also highlighted the growing reliance on AI in...
info@1password.com (Chris Fowler)
2026-06-16 00:00
At 1Password, we value security and collaboration. Thatβs why we funded an independent assessment of the open-source library Snow, a Rust implementation of the Noise Protocol Framework. The assessment by Trail of Bits identified 10 findings, including a medium-severity nonce-handling issue. We worked closely with the maintainer, Jake McGinty, to resolve 8 of these findings. We believe that strengthening open-source security benefits the wider community. Check out the report for more details!...
info@1password.com (Daryl Martin and Christian Rask)
2026-06-16 00:00
The 2026 Verizon Data Breach Incident Report highlights a rise in cyberattacks targeting the Financial and Insurance sector, with small-to-medium businesses (SMBs) particularly vulnerable. 96% of ransomware victims are SMBs, facing high security standards but limited resources. Credential management is crucial for building a strong security foundation. AI adoption is increasing SaaS sprawl and complicating compliance efforts, making it harder to manage credentials securely. For more insights,...
info@1password.com (Rachel Sudbeck)
2026-06-15 16:24
π Docker has joined the Athena coalition to enhance supply chain security amidst growing AI-driven attacks. CISO Mark Lechner highlights that AI can now discover vulnerabilities at unprecedented speeds. This shift emphasizes the need for secure and transparent products. Docker's initiatives include sandboxed execution, trusted open-source images, and governed access to tools. Collaborating with partners is crucial for a comprehensive defense against threats. #SupplyChainSecurity #Docker #AI...
Aditya Tripathi
2026-06-15 16:11
Cisco and AWS are redefining security in the AI era. As organizations seek to secure innovation, Cisco Security on AWS Marketplace offers a trusted foundation for hybrid and multicloud environments. This partnership simplifies procurement and enhances protection through a cloud-native, AI-powered platform, ensuring unified security across networking and cloud. Explore how this strategic alliance can support your security needs. ππβ¨ #Cisco #AWS #CloudSecurity #Innovation #AI
Dave West
2026-06-15 14:58
In June 2026, attackers gained control of over 20,000 Instagram accounts, including a notable Obama-era account, by simply asking Meta's AI support assistant for help. They requested to link an email address they controlled and reset the password without needing any exploits or passwords. Meta confirmed that the AI acted on a valid sequence of operations, highlighting a flaw in their security checks. This incident demonstrates how reliance on AI agents can expose vulnerabilities that...
Fabio Salvadori