Adding Approved Documents to eTMF
Learn the multiple ways to upload documents to your eTMF study, from the study Dashboard or directly from the Collaborate file system, so your trial master file stays complete and organized.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
PHP2Shell vs. Log4j: Understanding the Risk and Exposure | Bitsight Webinar
Could PHP2Shell become the next Log4j-scale cybersecurity threat? Newly disclosed critical PHP vulnerabilities are raising concerns about widespread exposure across enterprise environments and third-party supply chains. In this webinar, Bitsight cybersecurity experts examine the potential impact of PHP2Shell, share findings from Bitsight's latest exposure research, and explain how security teams can identify vulnerable assets, assess third-party risk, and prioritize remediation.
Patching at the Speed of Mythos
Can you move faster without risking downtime? Mythos is putting pressure on IT teams to patch in days, not weeks. But September's Patch Tuesday was a reminder that speed comes with its own risk: what happens when the patch you need to deploy quickly is the thing that causes an outage? In this session, we'll unpack what September taught us about faster patch cycles and look at how teams can shorten remediation timelines without giving up the testing and control that keep production running.
Tanium Certified Operator: 2026 Refresh: Tanium Tech Talks #174
The refreshed Tanium Certified Operator (TCO) exam swaps simulations for concept-based Q&A. See what changed, what didn’t, and how to prep. The TCO is the foundational Tanium exam: testing whether you understand the basics of interacting in Tanium. This episode covers what changed in the latest cert refresh, what stayed the same, which version to take, and how to prepare.
Why Organizations Secure AI Agents with Falcon Guardian
AI is changing from a tool that generates content into agents that reason, decide, and take autonomous action. Employees now use AI assistants in their browsers and desktop apps. Developers run coding agents that read files and execute commands on their machines. Business teams build agents and connect them to enterprise data through Model Context Protocol (MCP) servers. This shift from asking AI to tasking AI creates hard questions for security teams: Which AI agents are operating in the environment?
Key compliance frameworks in Australia: Privacy Act, CPS 234 & more
Accelerating security solutions for small businesses Tagore offers strategic services to small businesses. A partnership that can scale Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.
Keeper Security Named in the 2026 Gartner Magic Quadrant for PAM
Keeper Security has been recognized in the 2026 Gartner Magic Quadrant for Privileged Access Management (PAM), the Gartner evaluation of vendors in the PAM market. Gartner also included Keeper Security in its companion report, Critical Capabilities for Privileged Access Management, which assesses vendors against specific PAM use cases and capabilities.
AI Agents in Bank Accounts: From "Who Logged In" to "Who Decided"
The banks aren’t being hacked, at least not in the way the headlines imply. They’re being out-authenticated. No breach of JPMorgan’s, Morgan Stanley’s, Bank of America’s, Citi’s, or Wells Fargo’s core systems has been publicly reported. Instead, Axios reported on October 22—and Reuters corroborated—that AI agents in bank accounts (major U.S. banks) are being detected and blocked.
CVE-2026-115560: Another PHP Session-Handler RCE
Two days after PHP shipped emergency patches for PHP2Shell (CVE-2026-109618 and CVE-2026-109619), the project is back with another RCE advisory: CVE-2026-115560. Looks like PHPoclypse is going to stick around till the weekend. In this blog, we break down what CVE-2026-115560 actually is, the narrow configuration that makes it exploitable, and the one-line mitigation you can apply before the weekend.
6 Linux Kernel Vulnerabilities Leaked on LKML
TL;DR: On October 22, 2026, Zero Day Initiative accidentally posted six unpatched Linux kernel vulnerabilities to the public LKML. Two are CVSS 9.0 SMB RCEs; three are local privilege escalation. No mainline patches exist yet. Monitor your distribution and unload exposed modules.