Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Most cyber risk appetite statements cannot be breached. A board approves language about maintaining a low tolerance for disruption, the statement enters the policy library, and no observable event in the following three years violates it. A statement no event can cross is a value rather than a control. ‍ Making one testable requires four terms that get used interchangeably and mean different things, thresholds expressed in units something can exceed, and a defined response for when it does.

A support coordinator has a difficult letter to write. The customer record is open in one tab, a consumer AI assistant in another, and the deadline is this afternoon. She selects the record, copies it, pastes it into the prompt box, and asks for a polite draft. Thirty seconds later she has a good letter and a regulatory problem, and nobody in the organization knows about either. ‍ The sequence below traces that single action through to its consequences.

You're reviewing payment flows, the bank has asked for proof, and the audit deadline suddenly feels real. The problem isn't usually that the team has done nothing, it's that nobody has turned day-to-day security work into evidence a card brand, acquirer, or assessor can use. PCI DSS compliance is where that gap gets exposed, and it's why security teams that already run SIEM, XDR, or EDR still get pulled into a separate compliance scramble.

A new Mini Shai-Hulud wave hit keyv and 800+ npm packages. The malware now scans 469 secret locations, including AI agents, crypto wallets, and CI/CD tools.

Peak season brings challenges to the hospitality industry every year. Thousands of guests, temporary staff, vendors, and business partners interact daily with reservation systems, management platforms, mobile apps, and loyalty programs. That operational complexity makes hotels a particularly attractive target for cybercriminals. Artificial intelligence hasn't created a new problem for hotels, it is simply accelerating an existing one: identity-based attacks.

The insurance sector faces mounting pressure from both commercial growth and a persistent, evolving cyber threat landscape. This blog examines why insurers remain key targets, where their security gaps lie, and how cyber threat intelligence helps close the gap between ambition and resilience.

VMware ESX systems are a recurring target in ransomware campaigns. Threat groups including SCATTERED SPIDER, BlackBasta, Royal (aka BlackSuit), Akira, and the ESX-focused ransomware as a service (RaaS) platform shinysp1d3r have demonstrated that once an adversary reaches the hypervisor layer, they can rapidly encrypt virtual machines, disable logging, and cripple an entire data center.

AI is now in the pentest reporting workflow and plenty more updates from July. Ticketing gets even more updates, the Knowledge Base adds version control, and Fivetran connects to Job Monitoring. Here’s what shipped.