Report: AI-Enabled Social Engineering Attacks Are on the Rise

Threat actors are increasingly using AI-enabled social engineering to get around technical security measures, according to a new report from Visa. Social engineering attacks were behind the largest number of losses in the second half of last year. “From July to December 2025, Visa identified nearly $1 billion in scam-related activity, making scams the single largest category of consumer payment fraud,” Visa says.

ionCube Loader - Running existing encoded files on future PHP versions

ionCube Loader is the runtime partner to ionCube Encoder which actually runs your encoded files on deployment machines. One useful feature of the Loader is that it includes runtime compatibility support which allows existing encoded files to run on future PHP versions where technically possible. This capability helps software vendors adopt newer PHP releases with greater flexibility as they won’t always need to re-encode and redistribute code in order to support new PHP versions.

AI Quality EXPLODES Unlock Productivity SECURELY & FAST! #podcast #cybersecurity

On this episode of Masters of Data, Adam White and David Girvin dig into Sumo Logic's freshly launched compliance apps for Claude, ChatGPT, and LiteLLM, and why your IT team will want to pay attention before the token bill arrives. We unpack how enterprises can move beyond the "AI black hole" era of shadow IT and actually get eyes on who is using what, how much it is costing, and whether any of it is moving the needle.

Conditional Access Checklist for Microsoft Entra ID

Conditional Access is one of the most important security controls in Microsoft Entra ID. It helps organizations decide when access should be allowed, blocked, or challenged based on signals such as user identity, device status, location, application, and risk. For many organizations, Conditional Access is the best path forward for enforcing multifactor authentication because it provides more control than Security Defaults or Per-User MFA.

Everyone Is Buying AI Guardrails. But Agents Have the Keys to the Car.

The first wave of AI security looked a lot like a WAF for LLMs: inspect the prompt, filter the output, block the obvious bad patterns. That was useful. It still is. But it was built for systems that mostly talked. Agents are different. They use tools, call APIs, access data, and change things. The confusion I keep seeing is simple: many teams think securing the model means securing the agent. It does not.

AI is a NEW Gold Rush But Token Burn is STUPID! #podcast #cybersecurity

On this episode of Masters of Data, Adam White and David Girvin dig into Sumo Logic's freshly launched compliance apps for Claude, ChatGPT, and LiteLLM, and why your IT team will want to pay attention before the token bill arrives. We unpack how enterprises can move beyond the "AI black hole" era of shadow IT and actually get eyes on who is using what, how much it is costing, and whether any of it is moving the needle.

The North Korean IT worker scam: Defending against the modern insider threat

The threat is coming from inside the organization. It is coming from a laptop farm three states over, routed through a proxy, and operated by a threat actor sitting on the other side of the globe. We are witnessing a massive shift in how adversaries breach organizations. They no longer need to spend weeks probing your external firewalls or crafting the perfect zero-day exploit. Instead, they simply update their resumes, pass your interview process, and your IT department ships them a corporate device.

How to Create a Disaster Recovery Checklist

Disasters are no longer defined simply by acts of nature. Nowadays, a localized electrical failure can crash global communications and bring online transactions to a sudden halt. Modern businesses rely on worldwide networks, web applications, and 24x7x365 customer call centers, making continuous operation an absolute necessity. When an unplanned outage strikes, your organization needs a reliable way to maintain alternative processes and keep IT systems running smoothly.

LLMs Data Spies or Security Nightmares #podcast #cybersecurity

On this episode of Masters of Data, Adam White and David Girvin dig into Sumo Logic's freshly launched compliance apps for Claude, ChatGPT, and LiteLLM, and why your IT team will want to pay attention before the token bill arrives. We unpack how enterprises can move beyond the "AI black hole" era of shadow IT and actually get eyes on who is using what, how much it is costing, and whether any of it is moving the needle.

AI Gateway vs. MCP Gateway: Model Control Tool Control

As enterprises adopt AI agents, two control points are becoming common: AI Gateways and MCP Gateways. They sound similar, but they solve different problems. An AI Gateway controls how applications interact with AI models. An MCP Gateway controls how AI agents interact with tools, systems, and data exposed through MCP. Both are useful. Neither is enough on its own.