Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Navigating the Agentic AI Era: Forward's Perspective from Cisco Live EMEA

Cisco Live EMEA 2026 Amsterdam has officially wrapped up, and the path forward is clear: we have entered the Agentic AI Era. The event was centered around an industry shift towards a unified platform where AI agents don't just respond; they act. At Forward Networks, we aren’t just watching this shift happen; we are providing the foundation required to make it a reality.

Introducing Abilities API in WordPress Plugins

WordPress released version 6.9 in December 2025, introducing a new framework that changes how the platform communicates with external tools. The update added support for WordPress Abilities API and the Model Context Protocol (MCP), allowing WordPress sites and plugins to describe their capabilities in a structured, machine- and human-readable format. The change reflects a broader shift in how websites are managed.

Remediate transitive vulnerabilities faster with Datadog Software Composition Analysis

Security teams are responsible for finding and remediating vulnerable dependencies within applications that are built from large ecosystems of frameworks, SDKs, and utilities. What makes this task especially challenging is that these dependencies can pull in dozens or even hundreds of transitive dependencies through complex dependency chains. Even when scanners identify what’s vulnerable, teams still often lack the information they need about the dependency chain to safely address the issue.

GrayZone Platform

BlueVoyant analyzed a sophisticated and extensive campaign that leverages corporate shell companies, professional infrastructure, and code-signing certificates to distribute potentially unwanted applications (PUAs). This operation has established a persistent, platform-like foothold on user systems through software that presents a façade of corporate legitimacy. It combines continuous system access with ongoing data collection.

Snyk and Cline: Securing the Future of Autonomous Coding

We are thrilled to announce a strategic partnership with Cline Bot Inc. to bridge the gap between autonomous speed and enterprise trust. By embedding Snyk’s security intelligence directly into Cline’s autonomous loops, we are delivering an end-to-end automated secure coding workflow that empowers developers to innovate with confidence. The evolution of AI coding tools is accelerating rapidly. We have moved from simple completion to sophisticated chat, and now to full autonomy.

Acronis Cyberthreats Report H2 2025: Cybercriminals are now scaling attacks with AI

Cybercriminals are spending less time using AI to develop new kinds of cyberattacks. Unfortunately, that’s not good news. According to the Acronis Cyberthreats Report H2 2025, cybercriminals are focusing on using AI to scale and refine the attacks they’ve already developed. As a result, they’re working more efficiently. The Acronis Cyberthreats Report H2 2025 delves into many more cybersecurity trends and goes into much deeper detail on the evolving impact of AI on cyberthreats.

What is Vanta?

Vanta is the Agentic Trust Platform—built to help companies earn trust and prove it, continuously. ‍ Every company’s trust journey starts with two connected goals: earning and proving that trust. You earn trust by demonstrating a strong security foundation to customers, partners, auditors, and your board. You prove trust by continuously strengthening that foundation—managing risk, monitoring threats, and acting on real-world feedback.

From DevOps to Runtime: Engineering the Right CWPP Strategy for Your Cloud Environment

Cloud-native architectures have fundamentally changed how organizations build, deploy, and scale applications. But they have also introduced new security challenges, especially when it comes to protecting workloads that span virtual machines, containers, Kubernetes, and serverless environments.

Phishing Kit Attacks Are Now Everywhere: How SOC Analysts Can Detect Them

Phishing kits have changed the speed of compromise. Attackers no longer need malware or complex tooling. With ready-made phishing platforms, they can launch large-scale credential theft campaigns that bypass MFA and deliver valid sessions almost instantly. By the time an alert reaches the SOC, the attacker may already be inside. Stopping these attacks now depends on seeing the full phishing chain early, before stolen access turns into business damage.