AI governance needs to become part of the CISO’s GRC program
Here's why CISOs must include Ai in the company's GRC program.
SC Media
20 articles
Ping YOUniverse: How to classify and manage AI agents
There are four kinds of AI agents, and each must be handled differently, Ping executives said.
How coding agents are changing application risk
Coding agents expand application risk beyond AI models to the tools, context and systems around them.
It's More Secure When It's Disabled - PSW #943
When English becomes exploit code: The hidden risk inside MCP servers
A harmless-looking sentence can influence an agent's choices once it enters a model's context.
CISA: WatchGuard Firebox bug exploited in ransomware campaigns
Ransomware gangs are exploiting a WatchGuard Firebox flaw that CISA flagged nine months ago.
A security framework for coding agents and their harnesses
The five layers of securing AI agent harnesses.
What CIO-CISO alignment looks like when it's working
Cushman & Wakefield leaders share five practices for building an effective CIO-CISO partnership.
A credo for the AI era: Trust, but Decompile
Here’s why defenders today have to take apart and analyze code the way a hacker would.
PaperCut MF/NG flaws attacked with hundreds of AI agents
The AI-assisted campaign enabled attackers to gain domain admin in as little as 5 minutes.
Skullcandy Dime 3 earbuds vulnerable to Bluetooth hijacking
The vulnerability, tracked as CVE-2025-20701, affects firmware version 1.0.
Gigabud banking trojan uses app cloning to evade fraud detection
Researchers at Group-IB have identified that Gigabud is now being paired with Vwork, a modified version of the Shelter app, attributed to the GoldFactory thr...
Over 36,000 Plex media servers remain unpatched against security vulnerabilities
The unpatched Plex Media Server instances are running versions 1.43.
US lawmakers ask government to ban 3 hack-for-hire firms
Democratic senators Ron Wyden and Sheldon Whitehouse, along with Republican congressman Pat Harrigan, sent a letter to U.S.
Pentagon weighs CMMC reforms after industry feedback
The CMMC program, particularly its Phase 2 requirements, faced criticism for being overly burdensome and costly for small and medium-sized businesses.
Orchid Security adds AI agent controls to identity platform
The new capabilities address the challenge of AI agents inheriting access through existing vulnerabilities like hard-coded credentials and dormant accounts, ...
Web DDoS attacks more than double in 1st half of 2026, Radware report finds
The Radware H1 2026 Global Threat Analysis Report indicates a significant shift in attack methods, with direct-path volumetric floods, particularly stateless...
Shai-Hulud npm worm resurfaces, bypassing security scans
Researchers at Aikido Security discovered four packages containing the Shai-Hulud worm, which had the same malicious payload hash as the original attack from...
Geordie AI launches cost intelligence for enterprise AI spending
The system measures spending agent by agent across cloud, code, and endpoints, offering a more comprehensive view than gateway-centric tools.
Chinese state-linked hackers exploit Chrome vulnerability
The BlueMoon exploit kit targeted U.S.