Going Beyond Prevention: Five Essentials for a True EDR Solution

The cybersecurity landscape has evolved, but many endpoint tools have not. Most still focus on known threats and signatures, blocking familiar malware and flagging suspicious files. They rely on static models that can only go so far. That approach worked for yesterday’s threats, but not for today’s attackers.

CISA Emergency Directive 2503: What It Means for Cisco ASA and Firepower Devices

CISA Emergency Directive 25‑03 mandates that federal civilian executive branch (FCEB) agencies immediately identify and mitigate vulnerabilities in Cisco ASA and Firepower devices. The vulnerabilities, which affect SSL VPN components, can be exploited by attackers to gain unauthorized access and pivot across networks. CISA’s actions are based on observed exploit activity in the wild and the critical role these devices play in public sector infrastructure.

96 machines per human: The financial sector's agentic AI identity crisis

What if you hired about 100 new employees for every one you already had, and then, on a whim, gave them all admin rights? Sure, these fresh hires would likely be brilliant and hungry to make an impression. But they wouldn’t always know the rules. Some would make mistakes. Others might take liberties. Before long, it’d be bedlam. That’s what’s happening right now inside financial services institutions.

Securing Agentic AI on Mobile

AI adoption is accelerating at an unprecedented rate. A recent McKinsey survey found nearly 80% of enterprises now regularly use generative AI, outpacing the early adoption of both the personal computer and the public internet. Agentic AI—autonomous agents capable of planning, reasoning, and acting on a user’s behalf—has likewise moved from pilots to production, with 79% of senior executives reporting adoption.

API Attack Awareness: When Authentication Fails - Exposing APIs to Risk

Authentication issues seem like low-level attacks. But authentication today – especially API authentication – can be more difficult than people expect. Companies rely on APIs to carry sensitive information every day. If access to those APIs is not properly secured, all the sophisticated security solutions companies use to protect their data elsewhere are completely undermined.

CSAM Week 3: Don't Take the Phishing Bait

Phishing remains one of the most persistent cyber threats in the digital age. These attacks trick individuals into revealing sensitive information—like passwords, account numbers, or personal details—through emails, texts, or calls that appear to be legitimate.‍ Despite major advances in cybersecurity, attackers continue to refine their tactics.

Intel Chat: RediShell, Cisco 0-day, AI voice cloning, Brickstorm & teen hackers arrested [256]

Intel Chat - Episode 256: RediShell, Cisco 0-day, AI voice cloning, Brickstorm & teen hackers arrested A podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly. Chris and Matt dive into critical vulnerabilities, sophisticated threat actors, and emerging attack vectors. From a 13-year-old Redis vulnerability with active exploitation to China-linked espionage targeting infrastructure blind spots, this episode covers some of the most significant security developments impacting organizations today.

Agentic Marketplaces: Why Visibility Will Define the Next Decade of Digital Commerce

The web is entering a new phase. Artificial intelligence is beginning to act on behalf of people rather than simply assisting them. AI agents are now browsing, comparing, and buying, taking on the decisions that once sat firmly in human hands. This marks the start of the agentic marketplace, an emerging ecosystem where autonomous systems interact, negotiate, and transact across digital platforms.

LevelBlue to Acquire Cybereason, Strengthening Position as World's Largest Pure-Play MSSP

Today marks a strategic leap forward in LevelBlue’s mission to become the most complete cybersecurity partner on the market. I’m excited to announce that LevelBlue has entered into a definitive agreement to acquire Cybereason, a global leader in Extended Detection and Response (XDR), digital forensics and incident response (DFIR), and elite threat intelligence. Together we’ll deliver unified, proactive, and outcome-driven security solutions around the globe.