Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

GPT-5.6 Sol Shows Why a Better Model Isn't a Uniformly Safer Model

Veracode Research’s latest secure-coding test finds GPT-5.6 Sol with a 15-point Python gain beneath modest aggregate movement, evidence that cyber capability and secure-code generation do not move in lockstep. OpenAI calls GPT-5.6 Sol its “strongest cybersecurity model yet.” Veracode’s extension test finds it scoring only two percentage points higher overall on secure-code generation than GPT-5.5, but it scores 15 points higher in Python.

The AI challenge most companies don't have

A few months ago, I attended a GC AI Summit hosted by Harvard Law School. As expected, there was plenty of discussion about AI tools, governance frameworks, emerging regulations, and the future of the legal profession. One topic of discussion stood out above the others: Most organizations only need to think about how they deploy AI, whereas we have to think about how we deploy AI and how we develop AI.

Hunting at scale: the AI enabler Obrela is bringing to iSOCaaS

Threat hunting is the capability every security programme claims and few can prove. As Service Delivery Lead in the EU-funded iSOCaaS project, Obrela is contributing an AI-enabled hunting capability built to make hunting measurable, not just faster - including a Threat Hunting Copilot, now in production, that turns a hypothesis written in plain language into a governed, executable hunt. Detection scales. Hunting does not.

The New CISO Ep. 150 - Sherri Douville | Engineering Trust in AI Agents with Open-Source Tools

In this episode of The New CISO, host Steve Moore welcomes Sherri Douville for a conversation that sits outside the show's usual lane — less war story, more blueprint. Sherri works alongside CISOs rather than inside the role, and arrives with a pointed argument about what the job is becoming.
Featured Post

Why AI is becoming harder to budget for

For most business technology, the cost is relatively easy to understand. You buy a licence, agree a contract or pay for a certain level of usage, and you have a reasonable idea of what you will spend over the year. AI is making that much harder. As businesses move beyond individual AI subscriptions and start using AI across more of their operations, costs can vary considerably depending on which models are being used, how often they're being used and what they're being asked to do.

Top 7 Technology Strategies Growing Businesses Need to Stay Competitive

Growing businesses face mounting pressure to modernize their operations while competitors race ahead with emerging technologies. The gap between those who adapt and those who fall behind widens each quarter, making strategic technology adoption no longer optional but essential for survival. Seven core strategies have emerged as critical differentiators in today's market, each addressing specific operational challenges that determine whether a company scales successfully or stagnates. Understanding these approaches reveals why some organizations thrive while others struggle to keep pace.
Featured Post

Identity Everywhere: Bringing Infrastructure Identity to Agentic IT

Every era of computing eventually exposes the assumptions that made the last era work. For decades, networking succeeded because it was mostly identity agnostic. Packets moved because they had addresses. Routers and switches forwarded traffic because the network knew where something was going, not necessarily who or what was behind it. That model helped build the internet and modern enterprises. But it is not enough for the era we are entering now.

Aikido Security achieves ISO 42001:2023 certification for AI governance

Aikido Security has achieved ISO 42001:2023 certification, the international standard for AI management systems, a step few security vendors have taken so far. The certification confirms that Aikido runs a structured, continuously improving governance system for managing the risks introduced by its AI-enabled features, across our entire platform.

Zombie APIs Are Costing You More Than You Think: A Risk Quantification Guide

Zombie APIs are API versions or endpoints that were once known and documented, but were never properly retired. A team ships v2 of an API, tells everyone to migrate, and assumes v1 is dead. In reality, v1 is still running on a server somewhere, still accepting requests, and still connected to production data. This is different from unmanaged APIs, which were never documented in the first place. Zombie APIs were documented once.