UK's New Cyber Bill Fortifies Defenses

The services we rely on daily—healthcare, transport, energy, and water—are the backbone of our society. An attack on these systems can cause massive disruption, affecting everything from hospital appointments to the power in our homes. In response to this growing threat, the UK government introduced the Cybersecurity and Resilience Bill on November 12, 2025, a landmark piece of legislation designed to significantly strengthen the nation’s defenses against cyber-attacks.

Release 783 Brings LLM Monitoring, ARM Support, Enhanced Rules, Mac Improvements and More

We are excited to announce Platform Release 783, a massive update with over 470 features and improvements, focusing on adapting to the modern digital workspace by delivering deep visibility, better protection, and higher privacy. Here is a summary of the new features and improvements available in this release. For an extensive list, please refer to the detailed Release Notes.

Best Application Security Testing Providers: Top 7 in 2025

Top application security testing providers include Mend, Invicti, and Black Duck, offering a range of services like Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA). Some providers also provide specialized services like securing AI applications and vulnerability management.

Can Claude Opus 4.5 Build a SECURE Note Taking App?

Can Claude Opus 4.5 actually build a secure, fully functional note-taking app? In this video, I challenge the latest Claude model to create an app with real features — create, edit, update, delete, plus basic security — and see if the code holds up in practice. This is a real test of how far AI can go in building usable software.

Why a Cloud SIEM Just Makes Sense

The irony of being an adult working in IT and security is that where having your head “in the clouds” was inappropriate as a child, today most of your activities require you to have your head in the cloud. Organizations moved their business operations to the cloud because they could achieve various operational benefits, like improved collaboration and reduced costs. Yet, many companies still maintain an on-premises SIEM.

Securing the Smart Factory

In the manufacturing industry, IT and OT systems are converging, automation is accelerating and supply chains are more interconnected than ever before. While these changes are about progress, they also introduce new risk. A single compromise now has the potential to completely halt production and ripple across global logistics. Earlier this year, Jaguar Land Rover experienced this firsthand.

Navigating AI risks: understanding and mitigating prompt injection

AI is becoming a routine part of technical operations. Teams use models to support ticket triage, incident routing, knowledge retrieval, code analysis, and customer interactions. As these agents move closer to production workflows, the conversation about security becomes much more important. One of the most persistent and widely misunderstood issues is prompt injection. It is not a vulnerability that can be fully patched or trained away.

Meet John Sileo: Keynote speaker at One Identity UNITE Chicago

We are thrilled to share that John Sileo – award-winning author, cybersecurity expert and President & CEO of The Sileo Group – will take the mainstage as the keynote speaker at One Identity UNITE 2026 in Chicago. John has an incredibly unique perspective to identity security, with a career shaped by personal loss from cybercrime, hard-earned wisdom and a mission to help others protect their digital identities and assets.

CrowdStrike Unveils Real-Time Cloud Detection and Response Innovations

CrowdStrike is announcing new cloud detection and response (CDR) capabilities to help SOC teams reduce mean time to respond (MTTR) and strengthen protection across hybrid and multi-cloud environments. These include new Real-Time Cloud Detections in CrowdStrike Falcon Cloud Security and Automated Cloud Response Actions.