Control Plane Gaps Create Invisible Cloud Risk
Unmanaged Cloud Infrastructure Creates Detection Blind Spots
SC Media
20 articles
How to Build an IAM Program: Strategy, Phasing, and What Goes Wrong
Treat IAM as an Operating Model, Not a Tool Rollout
CISA confirms 2025 Windows Task Host flaw exploited by ransomware groups
Experts say teams should make this a priority, noting that the patch has been available since last November.
What the Iran cyberattacks can teach boards about cyber warfare
Here’s a 5-step plan for developing a defense plan that understands kinetic and cyber warfare are one-in-the-same today.
Wiz agent finds Snowflake repo flaw in code co-authored by GitHub Copilot Autofix
The flaw allowed the agent to extract a Jira token by opening a crafted issue.
Augmenting Threat Intel Analysis with Agents - Sai Kiran Uppu, Chris Wallis, Ramin Farassat - ASW #396
Chinese AI model GLM-5.3 shows advanced bug-finding capabilities
GLM-5.3 reportedly outperforms models like Fable 5 and GPT-5.
SafePal warns of data breach affecting nearly 40,000 customers
New PATCHCORD backdoor targets Afghan telecom and South Asian infrastructure
The PATCHCORD backdoor employs a stealthy persistence mechanism by hijacking browser shortcuts for Edge, Chrome, and Firefox, ensuring the malware runs befor...
Anthropic details new AI model, raises risk assessment for internal system tampering
Anthropic has raised the risk level for its Threat Model 2 from "very low" to "low," citing recent cybersecurity incidents involving its models.
Encrypted messaging provider Threema hit by large-scale DDoS attacks
The attacks, which began Tuesday evening and continued into Wednesday, targeted both Threema and its Swiss colocation partner, Nine.
Ping YOUniverse 2026: Four livestreams to watch
Here's your opportunity to watch the keynotes and top presentations from Ping YOUniverse at no cost.
Identity at AI speed: What to look forward to at Ping YOUniverse 2026
Here's a look forward to the Ping YOUniverse conference to be held in Austin, Texas, Sept. 1-2.
Critical SAP Commerce Cloud flaw exploited days after patch
Attackers moved quickly to exploit a critical SAP Commerce Cloud bug following its patch.
Why regulated industries can't afford to skip data privacy for their AI projects
Security teams in heavily regulated industries can’t afford to make data privacy a “nice-to-have” option.
Inside Mythos: A CSO's technical decoder for Anthropic's autonomous offensive AI
The most important aspect of Mythos isn't what it finds, but how it thinks. Here's how to use that thinking to protect your organization.
Sandbox Escapes with Rubrik's Zero Labs, AI recorders eroding privacy, and the news - Joe Hladik - ESW #472
MacOS AmnesiaStealer malware spread through ClickFix, grants live browser control
A fake GitHub download page hosts the malicious ClickFix command.
Ready for the flood: How exposure management prepares you for the Mythos vulnerability onslaught
How proactive prioritization will save time and effort when your team faces a wave of AI-discovered vulnerabilities.
Trezor confirms shipping partner data breach affecting over 13,000 customers
While the breach was initially believed to affect only recent orders, new information suggests older orders may also be compromised.