The Leadership Question How can an authorizing official approve a system whose model, prompts, memory, tools, permissions, ...

A continuous, massive credential-harvesting program called FortiBleed, which targets business network perimeters worldwide, has alarmed federal law enforcement officials. Initial access brokers and ...

Most governance systems are designed to answer a familiar question. Was the system approved? Regulations, certifications, audits, inspections, attestations, compliance frameworks, and assurance ...

On October 6, 2026, online fashion retailer ASOS faced a high-profile security scare after an unauthorized party hijacked its mobile app notification system to broadcast an extortion message directly ...

Cybersecurity is changing quickly. For years, most organizations focused on detecting and responding to cyberattacks after attackers got in. Now, with AI-powered threats making attacks faster and more ...

Following a severe data breach that exposed the personal information of thousands of bureau workers and applicants, the Federal Bureau of Investigation formally removed an Accenture Contractor. An ...

The author works on public-key infrastructure and certificate-lifecycle security, and has spent years on the operational side of trust-anchor changes. This piece focuses on the US trust ecosystem, but ...

Securing frontier AI systems such as GPT-6 Astra requires multiple layers of protection rather than relying on a single safeguard. OpenAI describes containment as one part of a broader technical ...

An employee asks an AI assistant to summarize a potential acquisition. The request takes seconds. Behind it, a system may retrieve financial statements, internal emails, legal advice, and strategic ...

Q1. The report suggests that misuse of AI by employees may currently be a larger concern for organizations than use of AI by threat actors. How often does that internal misuse vector show up in the ...

Imagine walking into your Security Operations Center on a Monday morning and discovering that your enterprise AI assistant has been quietly leaking internal project names, infrastructure details, and ...

E-commerce has a problem. Really, everyone has a problem, but e-commerce in particular has a serious problem. Mass AI scraping using residential and commercial IP ranges, free and cheap VPC hosts, and ...