Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

If most of your applications no longer run on the endpoint, why are you still managing and securing it as though they do?

They call themselves The Gentlemen Behind the name is one of the most active ransomware operations of the past 12 months, linked to 683 victims and a playbook built around compromised credentials, legitimate tools, rapid privilege escalation, and aggressive defense evasion. In this video, Susie Evershed and Rafe Pilling break down the latest research from Sophos Counter Threat Unit (CTU), revealing how some affiliates can move from initial compromise to ransomware deployment in less than 24 hours.

Sophos AI Defense is available as an add-on and is fully integrated with Sophos EDR, Sophos XDR, and Sophos MDR. The result is practical AI security: better visibility, faster investigation, and stronger protection against the real ways AI agents are being used in the enterprise. To learn more, visit Sophos.com/AI Defense.

We asked eight security and product leaders who's accountable when an agent ships to production and breaks something. Nobody said the model. Harish Gaggar named the reason. An agent runs on permissions someone approved and configuration someone set. Ron Reiter drew the line in the same place, accountability sits with whoever decided what the agent could actually do. As agents act across more systems, the accountability trail gets harder to follow. Most teams cannot determine which human granted an agent access.

North Korea has stopped writing bad phishing emails. In Part 2 of our DPRK deep dive, Tova Dvorin and Adrian Culley break down how the Reconnaissance General Bureau and Bureau 121 weaponized AI in 2026: Blue Noroff cloning a CFO's voice to authorize emergency liquidity transfers, real-time face swaps passing DevOps job interviews, and Lazarus using LLMs to polymorph BeaverTail and InvisibleFerret for every single target.

A voice note from your CFO on WhatsApp. Her cadence, her urgency—and a reference to a confidential acquisition discussed in a real meeting last Tuesday. North Korea's Blue Noroff builds these backwards: compromise a junior employee's calendar or inbox first, then train a voice model on the stolen context. By the time anyone thinks to verify, the emergency transfer is already sitting in an offshore account.

The Howler Podcast is 3! Join Chelsea and Mary as they reflect on the past three years and chat with special guest, Brian NeSmith, Co-founder & Executive Chairman! Interested in running with the pack? Explore careers at Arctic Wolf—one of the fastest-growing and exciting cybersecurity companies in the world, to learn about how you can join our Pack, create impact, and influence what’s next in security operations.

Breaches will impact an organization greatly, regardless of industry or your role in it, and Larry Chinski, VP of enterprise strategy, caught up with CEO Praerit Garg to explore the challenges facing CISOs in trying to communicate this fact. Tune in for insights on learning to speak the ROI-focused language of the board when pitching a security budget. And keep watching for a discussion on the benefits behind a comprehensive identity fabric for your identity security.

This week, dive into OpenAI's and METR's analysis of the rogue OpenAI agents that hacked Hugging Face back in July. We go over the full attack timeline discussing the multiple message boards the agents created and the ultimate goal of their attack against Hugging Face and trust us, its as crazy as it gets. Before that, we discuss a recent dark web service that popped up selling 153 million stolen drivers licenses before discussing a research post into a malware implant discovered in inexpensive Chinese routers.

Why Built-In AI Guardrails Aren't Enough | A10 Networks Are built-in cloud guardrails enough to secure your enterprise AI applications? In this segment, Jamison Utter and Arjoyita Roy discuss why relying on basic, provider-default security settings creates a false sense of security.