Collaborate Disseminate
Autonomous AI agents have started doing real security work. Language-model agents probe software for flaws, run penetration tests, and chain together attack steps that once needed a human operator. Research about security has stayed slower and more man… Continue reading Researchers make the case for a cybersecurity AI scientist
Organizations collect more cyber risk data than ever, with many still struggling to build a unified view of their exposure. The latest State of Threat Management report from Filigran found that security teams continue to work across disconnected tools,… Continue reading Organizations struggle to prioritize known cyber risks
Ford rehired veteran engineers after AI quality systems fell short, showing why expert oversight still matters in high-stakes automation.
The post Ford Brings Back Veteran Engineers After AI Quality Setback appeared first on TechRepublic.
Continue reading Ford Brings Back Veteran Engineers After AI Quality Setback
CMMC requirements are appearing in defense contracts and moving down through supplier networks to thousands of companies new to this kind of compliance work. Many run on limited budgets with lean security teams. The picture comes from nearly 900 defens… Continue reading Half the defense base still builds security around compliance
ith federal PQC deadlines set for 2030 and 2031, CISOs face a multi-year transformation program that most organizations have not yet started. The window for orderly execution is narrowing fast.
The post What the post-quantum executive order really demands of CISOs appeared first on CyberScoop.
Continue reading What the post-quantum executive order really demands of CISOs
Penetration testing has long run on expert time, with specialists spending days probing a network or web application by hand. Manual engagements stretch across weeks, expert consultants run into thousands of dollars a day, and results vary with the tes… Continue reading DarkMoon: Open-source AI pentesting platform
AI models are solving more and more of the offensive-cyber tests built to measure them. Once a model solves most of a benchmark, that benchmark runs out of room and says little about the best systems anymore. Many of those tests also lean on bugs that … Continue reading Scoring AI hackers when there is no answer key
Enterprises are connecting AI agents to live data feeds and putting them to work on tasks that once required human review, from IT operations to software development. The number doing this in production reached 32 percent in 2026, up from 29 percent th… Continue reading Most agentic AI projects in production have stalled over data problems
In this interview with Help Net Security, Nichole Windholz, CISO at Onspring, talks about the limits of automated GRC systems and continuous control monitoring. She explains why color-coded dashboards can hide nuance, how teams can check the data feedi… Continue reading Onspring CISO on where automated GRC systems fall short
CI/CD Abuse Detector is an open-source project that uses a large language model to flag suspicious changes to continuous integration and continuous deployment pipelines, workflows, and automation configurations. The repository contains drop-in template… Continue reading Open-source CI/CD abuse detector guards against stolen credential attacks