99% of repository access tokens never expire 2026-11-06 at 07:30 By Anamarija Pogorelec Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations can leave accounts able to copy or change company code after the work ends, according to BlueFlag Security’s The State […]
99% of repository access tokens never expire Read More »
Healthcare can’t govern the AI tools it hasn’t found yet 2026-11-05 at 08:11 By Anamarija Pogorelec Nearly nine in ten healthcare leaders say security or compliance staff always or usually review AI-written code that touches patient data before it goes live, and seven in ten have still found an AI-built tool handling that data without […]
Healthcare can’t govern the AI tools it hasn’t found yet Read More »
Companies are spending more on AI governance and getting less control 2026-11-05 at 07:30 By Anamarija Pogorelec Companies are increasing their cybersecurity budgets, with AI security and governance the top priority for additional spending, followed by cloud security, according to DNSFilter’s The Cost of Shadow AI report. Some 74.5% of respondents reported a larger cybersecurity […]
Companies are spending more on AI governance and getting less control Read More »
Most consumers aren’t ready to let AI agents shop unsupervised 2026-11-05 at 07:00 By Anamarija Pogorelec Customer control, account security and ease of use are influencing the adoption of AI agents that make purchases, book services and access personal information, according to Okta’s 2026 Customer Identity Trends Report. Consumers’ willingness to delegate depends on what […]
Most consumers aren’t ready to let AI agents shop unsupervised Read More »
Companies going all in on AI could see their strategy backfire 2026-11-04 at 07:30 By Anamarija Pogorelec Four of the five highest-ranked enterprise risks in Gartner’s Quarterly Emerging Risk Report were AI-related. AI strategy miscalculation and AI-driven competitive displacement debuted at No. 3 and No. 4, respectively. The AI workforce preparedness gap held fifth place. […]
Companies going all in on AI could see their strategy backfire Read More »
UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028 2026-11-03 at 11:49 By Associated Press The U.K. will likely face AI cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber activity. The post UK Cyber Chief Says […]
UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028 Read More »
Fake IT help desk callers got by on little more than names and email addresses 2026-10-30 at 08:30 By Mirko Zorz Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos […]
Fake IT help desk callers got by on little more than names and email addresses Read More »
Scammers rebuild fake shopping sites within hours of a takedown 2026-10-30 at 07:30 By Anamarija Pogorelec One retail scam used more than 1,200 look-alike .shop domains sharing a single IP address. The sites reused HTML, JavaScript and payment-page designs intended to harvest card numbers, expiry dates and security codes, according Akamai’s Fraud and Abuse Report […]
Scammers rebuild fake shopping sites within hours of a takedown Read More »
Smart TVs can harbor unpatched security flaws and track what you watch 2026-10-30 at 07:00 By Anamarija Pogorelec Smart TVs and connected plugs accounted for a large share of recorded security weaknesses in household devices, according to Bitdefender’s 2026 IoT Security Landscape Report. The analysis covered approximately 10.4 million protected home routers between January and […]
Smart TVs can harbor unpatched security flaws and track what you watch Read More »
IT bosses are confident they’ve found the certificates they don’t know about 2026-10-29 at 08:00 By Mirko Zorz Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate renewals because automated systems are already in place. Their more specific answers point elsewhere. […]
IT bosses are confident they’ve found the certificates they don’t know about Read More »
Shame and sleepless nights haunt scam victims long after the money is gone 2026-10-29 at 07:30 By Anamarija Pogorelec Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer Impact Report. Scam victims often struggle with shame and self-blame, while identity theft […]
Shame and sleepless nights haunt scam victims long after the money is gone Read More »
Stolen staff logins are spreading attacks between K-12 school districts 2026-10-29 at 07:00 By Mirko Zorz Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) told them their staff accounts or credentials were circulating on underground and dark web marketplaces. That’s 808 of the center’s […]
Stolen staff logins are spreading attacks between K-12 school districts Read More »
NIST starts the countdown to retire quantum-vulnerable encryption 2026-10-28 at 07:30 By Anamarija Pogorelec The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for certain sensitive federal systems. The report, Transition to Post-Quantum Cryptography Standards (NIST IR 8547), explains which cryptographic methods need […]
NIST starts the countdown to retire quantum-vulnerable encryption Read More »
Breach victims discover their data was held by companies they’ve never heard of 2026-10-28 at 07:00 By Anamarija Pogorelec Nearly seven in ten people affected by data breaches handled by Kroll were exposed through an outside supplier, according to its Data Breach Outlook 2026. Businesses rely on outside providers to store information, process transactions and […]
Breach victims discover their data was held by companies they’ve never heard of Read More »
AI slop is piling up highest on the biggest open-source projects 2026-10-26 at 08:30 By Mirko Zorz The maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people running projects with more than 50 contributors estimated that close […]
AI slop is piling up highest on the biggest open-source projects Read More »
Forgotten AI agents may still access sensitive company data 2026-10-26 at 07:30 By Anamarija Pogorelec AI agents that have not run recently retain credentials and connections to company systems, according to Arrakis Security’s 2026 Autonomous Agents Threat Report. About 76% of enabled agents examined had not run in 60 days, leaving access available through inactive […]
Forgotten AI agents may still access sensitive company data Read More »
Synthetic identities leave US lenders with $2.4 billion in fraud exposure 2026-10-26 at 07:00 By Anamarija Pogorelec Criminals are exploiting established customer accounts and familiar brands to steal money and personal information, according to TransUnion’s Fraud in the Age of Continuous Trust report. Eighty-one percent of suspected digital fraud in its network during the first […]
Synthetic identities leave US lenders with $2.4 billion in fraud exposure Read More »
AI is taking cybersecurity jobs at junior and experienced levels alike 2026-10-23 at 07:30 By Anamarija Pogorelec Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report. 56% have experienced professional workforce reductions linked to AI, evenly divided […]
AI is taking cybersecurity jobs at junior and experienced levels alike Read More »
Anthropic finds 94 cases where open-source projects drop security controls without warning 2026-10-22 at 12:10 By Anamarija Pogorelec Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to examine 25 open-source projects and reported 493 issues involving unnecessary exposure, conflicting settings, and […]
AI agent permissions are outrunning security 2026-10-22 at 09:02 By Mirko Zorz Most organizations have handed AI agents work that used to need a person’s sign-off. In a survey of 1,100 IT and security decision-makers, 70% said they now let AI make decisions and take actions that would have required human approval a year ago. […]
AI agent permissions are outrunning security Read More »