Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI agents have crossed an important line from making suggestions to taking actions. They can read a repository, call internal systems, change code, open a pull request, and keep working while the human moves on.

A recent grey-box Salesforce assessment began with a low-privileged standard user account. From that starting point, AigentX mapped native Salesforce APIs and custom objects, identified cloud credentials exposed through misconfigured Field-Level Security, and demonstrated a path beyond Salesforce into the organization’s connected cloud infrastructure.

It happened again. We blinked, and suddenly summer’s over and it’s time to register for classes. The horror!

SpiderLabs’ technical review of the July attacks examines the affected technologies, observed activity, and broader threat landscape. The next question is practical: what can small utilities realistically do about it? At many small water and wastewater facilities, there is often no dedicated security team to understaff. A licensed operator may be responsible for sampling, maintenance, compliance, and after-hours callouts, perhaps with limited support from municipal IT.

Most vault programs track a numerator without a denominator. See how vault coverage turns secrets management into a measurable, reportable control.

A Reddit thread on r/activedirectory asking whether Active Directory is going away pulled in loads of comments, and the most upvoted answer compared AD to COBOL: still running, still critical, still not going anywhere. That comparison holds up when you check whether COBOL is still used today, since it runs core banking and government systems decades after its supposed retirement. The real risk for most IT teams isn't AD disappearing.

Between April and August 2026, at least six distinct AI-security efforts launched across North America, Europe, and Asia, several in the same week as one another and some for contradictory reasons. This piece maps 18 of them: what each says it's trying to achieve, who founded and backs it, and what it has actually shipped versus only announced.

Has your organization been exposed? How can you act on the exposures that matter most? What’s the best way to demonstrate measurable risk reduction?

Sir Robert Peel defined good policing as "the absence of crime and disorder, and not the visible evidence of police action in dealing with them." Gregory Francis of the Netherlands National Police quoted this at the INTERCOP conference held at INTERPOL headquarters, and this principle framed the entire event. Young people are increasingly drawn into cybercrime through the platforms where they already spend their time — Discord, Telegram and gaming servers.

CVE-2026-34265 is a memory corruption vulnerability in the Application Server ABAP component of SAP NetWeaver and the ABAP Platform. The flaw stems from logical errors in how the SAP kernel parses DIAG protocol messages, the proprietary protocol that carries traffic between the SAP GUI presentation layer and the application server. Malformed input reaching the parser leads to an out-of-bounds write, classified as CWE-787. The vulnerability carries a CVSS v3.1 base score of 9.8 (Critical).