Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

When AI can map your attack surface faster than you can, the question shifts from "can we patch everything" to "what do we fix first." Here is how to make that call defensibly, across your own environment and your supply chain.

CVE of the day - CVE-2026-59850.

Ransomware has shut down hospitals and data breaches have exposed millions of patient records. But healthcare organizations still struggle to manage cyber risk, because decisions get made on compliance checklists and generic threat scores that reveal nothing about real business impact. In this video, Kovrr breaks down how cyber risk quantification turns healthcare threats into financial terms, and why that changes the conversation between CISOs, compliance leads, and the board.

Cybersecurity risk management starts with understanding the risk you are trying to address rather than blindly following a checklist. A risk mindset helps security professionals step beyond policies and procedures and focus on what matters when decisions need to be made.

This week on the podcast, we discuss a new White House memorandum that creates a program to authorize American private companies to begin conducting offensive cyber operations. Before that, we discuss a vulnerability write up for a Citrix Netscaler flaw before covering yet another prompt injection vulnerability in a popular AI tool.

Corelight’s James Pope joins Dark Reading’s Joan Goodchild at Black Hat USA to share lessons from more than a decade defending one of cybersecurity’s most unique network environments: the Black Hat Network Operations Center (NOC). As SOC lead for the Black Hat NOC since 2014, James helps oversee more than 100 analysts, threat hunters, and partners tasked with distinguishing legitimate security research from real attacks across a network built from scratch for the conference.

Corelight Senior Security Engineer Jordan Hair joins Richard Bejtlich to break down how defense teams can leverage agentic AI harnesses to transform traditional security operations. By wrapping deterministic code around large language models, Hare created automated agents for alert triage, threat hunting, and detection engineering that shrink routine investigations from 45 minutes down to seconds.

This week’s briefing covers: Dive deeper.

A European banking IT provider slashed app deployment time from 3-4 weeks to just 3 days using automation. Their goal: 24-hour deployment for faster revenue generation and massive cost savings.

Application owners can now self-serve security reviews using AlgoSec, translating business needs into technical rules. This breaks down silos and speeds up collaboration between dev and security.