(Adobe Stock) Why non-human identities (NHIs) require a change in mindsetSteve ZurierJune 15, 2026Security teams have to get that NHIs are not just a static secret in a vault, they active participants in the business.
AI agents are already exploring your network. How do you detect their intent?Harshad Sadashiv KadamJune 11, 2026
Anthropic launches $15 million cyber defense program for state and local governmentsSC StaffJune 12, 2026
Vulnerability ManagementCISA gives agencies 3 days to patch maximum severity Ivanti vulnerabilityLaura FrenchJune 12, 2026CISA’s newest binding operational directive imposes short deadlines for the most severe flaws.
Critical Infrastructure SecurityIran-linked group Handala claims to steal Cal Water customer infoSteve ZurierJune 12, 2026Experts say that Handala has a history of overstating its capabilities and in this case the water system was not disrupted.
Application securityDocker security scanner uses AI to help explain, fix vulnerabilitiesStephen WeigandJune 12, 2026AI-powered DockSec helps developers prioritize, understand and fix software vulnerabilities.
Threat IntelligenceFBI shuts down 13 ‘consulting’ websites used for suspected Chinese espionageLaura FrenchJune 11, 2026The sites were used to lure security clearance holders into divulging classified information.
AI/ML‘Mythos-level’ Fable model released to public: How Anthropic plans to prevent misuseLaura FrenchJune 11, 2026Safeguard layers aim to block and reroute cyber-related requests while retaining Mythos-level capabilities.
Cloud SecurityServiceNow says security researchers, not hackers, accessed dataSteve ZurierJune 10, 2026ServiceNow investigates access issue, says no attacker activity found.
Supply chainMini Shai-Hulud ‘Hades’ variant affects 23 PyPI package versionsLaura FrenchJune 10, 2026The JavaScript stealer payload includes an anti-analysis LLM prompt injection.
Vulnerability ManagementCISA adds Check Point VPN bug to list of exploited vulnerabilitiesSteve ZurierJune 9, 2026CISA warns of an exploited Check Point VPN flaw that lets attackers bypass authentication.