Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Since joining BlueVoyant in May, I’ve spent my first 100 days listening. I've had conversations with nearly 50 customers and partners across industries and geographies, as well as the broader security industry, engaging with leaders at Black Hat last month. What I heard reinforced something I believe strongly: the security challenges organizations face today are changing faster than the traditional enterprise security model was designed to handle.

A browser sensor reports that somebody pasted 18,000 characters into an AI tool. A network sensor reports a 24 kilobyte upload to the same destination. Joining those two records on size looks reasonable and is the wrong instinct. ‍ The two numbers describe different objects with several transformations between them, and the transformations do not all run in the same direction. The error cannot even be signed, which rules out a tolerance as well as an equality. ‍

Recovery time objectives in manufacturing are usually set by information technology. Restore the servers, rebuild the domain, bring the applications back, declare recovery. Those milestones are measurable and a plan built around them looks complete. ‍ None of them produces a part.

On June 22, 2026, President Trump signed Executive Order 14412, accelerating the federal government’s transition to post-quantum cryptography. The order brings key migration deadlines forward from 2035 to 2030-2031 for high-value and high-impact systems. The Department of War followed with its own Post-Quantum Cryptography (PQC) Strategy, which sets additional deadlines and warns that a cryptographically relevant quantum computer is an existential threat to military missions.

AI agents are only as autonomous as the credentials behind them. This article talks about the Cloud Security Alliance's autonomy framework, why an agent's intended boundaries rarely match its actual access, and how GitGuardian helps close that gap through detection, remediation, and prevention.

Ask an AI system a question about your business and, before it can answer, it has another problem to solve: What information actually matters? It has to find the right files. Determine which version is current. Understand how those files relate to a project, client, deal, or other piece of work. Figure out which information applies to the person asking. Then assemble enough of that information to make a useful decision. For someone who works in the business every day, much of that is obvious.

If someone wanted to cause serious damage to your organisation, where would they start? Not with your filing cabinets. Not with your server room. They’d probably start with your Microsoft 365 tenant, because that’s where your emails, files and customer data live, and where your entire operation runs. Thankfully, Microsoft 365 comes with powerful security capabilities built in. However, having those capabilities and being protected by them are two different things.

SUMMARY Building an effective AI DevOps stack in 2026 comes down to balancing platform-native assistants for workflow speed with specialized engines for security, infrastructure, and delivery governance. This guide evaluates the 8 leading tools across both categories to help you select the right mix for your architecture and security requirements. This approach reflects a fundamental shift in engineering capabilities.

CVE-2026-76461 is a SQL injection vulnerability in the email parsing logic of Cisco AsyncOS Software for Cisco Secure Email Gateway, caused by insufficient validation of message content before it reaches a database query. An attacker who sends a crafted email message containing SQL statements can have those statements executed by the appliance as it processes the message. The vulnerability carries a CVSS v3.1 base score of 9.8 (Critical).

Researchers at Microsoft are tracking a social engineering campaign that uses passkey-themed lures to trick users into granting persistent access to their accounts and online work environments.

Threat actors are using phishing emails with blank SMTP sender fields to bypass Microsoft 365 security filters, according to researchers at ReliaQuest. Microsoft 365 Exchange Online uses a feature called “RejectDirectSend” to block unauthenticated Direct Send emails from an organization’s trusted domain. If an attacker omits the domain field from these emails, however, RejectDirectSend will no longer block the messages.