(Credit: photo for everything – stock.adobe.com)

(Credit: photo for everything – stock.adobe.com)

Student thwarted real-world supply chain attack by rogue Mythos 5 agent

Laura FrenchAugust 21, 2026

The agent used social engineering against real people during testing by the UK AI Security Institute.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
SOC
The agentic SOC: How to build machine-speed defense for the AI era
Vulnerability Management
AI-powered defense strategy: How to find and fix vulnerabilities at machine speed

PODCASTS

Vulnerability Management
Surveillance, Murder Hornets, Portmantau, TrueCONF, Siemens, N-Able and More – SWN #609
IoT
Rejoice In The Nostalgia – PSW #940
Leadership
Preventing a Breakout as AI Agent Threats Is One of Three Top CISO Concerns – Rob Allen – BSW #461
Vulnerability Management
Secrets, Red Agent, GitHub, evoooo1bot, DecryptAds, Copilot, Aaran Leyland, and More – SWN #608
Threat Intelligence
Augmenting Threat Intel Analysis with Agents – Sai Kiran Uppu, Chris Wallis, Ramin Farassat – ASW #396

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

Microsoft patches flaw in Entra ID identity software

Steve ZurierAugust 21, 2026

Microsoft fixed an exploited Entra ID flaw, but experts urge customers to check for compromise.

AUVSI CEO Michael Robbins

Critical Infrastructure Security

US autonomous systems policy struggles to keep pace with drones

SC StaffAugust 21, 2026

U.S. policymakers race to keep drone and autonomous systems rules aligned with rapidly advancing technology.

A sign on top of a building reads "Siemens" in blue letters.

Critical Infrastructure Security

Unspecified actors making AI-assisted attacks on critical infrastructure

Steve ZurierAugust 20, 2026

Feds warn that critical infrastructure organizations to treat attacks with the utmost urgency.

(Credit: Ralf – stock.adobe.com)

Black Hat/DEF CON attendees targeted in malware scheme with Google Doc lure

Laura FrenchAugust 20, 2026

A malicious Google Apps Script sidebar leads to payloads for both macOS and Windows.

(Adobe Stock)

Medusa ransomware group attacked more than 500 victims since 2021

Steve ZurierAugust 19, 2026

Medusa ransomware hit 500-plus victims, exploiting critical flaws at increasing speed.

(Credit: gguy – stock.adobe.com)

‘TWINLOOT’ Python implant abuses Microsoft services for stealthy C2

Laura FrenchAugust 19, 2026

The implant ensures defenders only see legit Microsoft services rather than unknown external domains, making it more challenging to block attacks.

CISA confirms 2025 Windows Task Host flaw exploited by ransomware groups

Steve ZurierAugust 18, 2026

Experts say teams should make this a priority, noting that the patch has been available since last November.

(Credit: Rafael Henrique – stock.adobe.com)

Wiz agent finds Snowflake repo flaw in code co-authored by GitHub Copilot Autofix

Laura FrenchAugust 18, 2026

The flaw allowed the agent to extract a Jira token by opening a crafted issue.

Events