Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

This week’s briefing covers: Dive deeper.

Secrets migrated from private repos to developer endpoints. Attackers no longer hack access. They log in with stolen credentials and move laterally. Dan Nguyen-Huu, Partner at Decibel Partners, explains what the shift means for defenders and where innovation is headed. "The endpoint is largely going to become one of the big new battlegrounds. I think there's also going to be new innovation on the endpoint as it pertains to new companies, maybe trying to think about DLP in a different way.".

Watch Joey Melo, Principal Security Researcher at CrowdStrike, take on AI Unlocked: Agents of Chaos and see how he approaches the challenges, manipulates autonomous AI agents and works his way through the game. Now it’s your turn. All three acts are open, with increasingly difficult challenges waiting. Put your skills to the test, climb the global leaderboard and compete for a share of up to $100,000 in cash prizes.*

HIPAA compliance becomes considerably more complicated when a stolen healthcare laptop may contain patient information. Keeping protected health information away from local storage changes the consequences of device theft and reduces the endpoint’s exposure.

AI changed who can build. Employees across the business can now create workflows – apps, agents, and automations, faster than ever before. The result is a growing wave of “wild code”: AI-generated software, automations, and agents that solve real business problems but exist outside traditional governance, operational ownership, and support models. For IT, this creates a new challenge. How do you empower teams to move quickly without creating more risk, complexity, and technical debt? How do you support innovation without opening the door to shadow AI, data leakage, and unmanaged systems?

Deepfakes are taking over social feeds, and nearly 70% are almost impossible to detect with the naked eye. Learn the quick behavioral habits that will stop you from falling for AI-generated scam media and misinformation online!

How fast do organizations need to respond to cyber threats today? In this short video, Daniel Trivellato, VP of OT, Healthcare and Cyber Risk Solutions at Forescout, explains why containment can no longer be treated as the final step in incident response. As AI accelerates the time between vulnerability discovery and exploitation, security teams have less time than ever to investigate and react.

Detections that generate a new MDR Case trigger the Sophos MDR Operations Team to investigate and respond to identified threats in your environment. This workflow is examined, along with the importance of adding your MDR authorized contacts, and choosing the appropriate Threat Response Mode. The detection triage process is covered in a linked video. Ask questions and get expert answers in the Sophos Community.

Evaluating risk management software in 2026? Here is the moment it has to survive. A board member or an auditor asks what your risk posture is today, not last quarter. You either have it ready to show, or you are rebuilding a register that went stale weeks ago. This video follows one risk through its entire life inside a platform, and uses that path to lay out five criteria for judging any tool, plus the question to put to each vendor.

Most DLP tools can mask a PII value on the way into a model. Almost none of them can make that value usable again when the AI needs to call a tool with it, so the masking breaks the workflow instead of protecting it. This is Protecto Privacy Gateway for AI Chat, live in a self-hosted LibreChat deployment. Watch what happens when a masked account number needs to resolve at a tool boundary — and comes back correct.