Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Today, Cyberhaven is joining the Open Secure AI Alliance to help advance a future in which enterprises can adopt open-source AI without compromising security, compliance, or control over their data. Cyberhaven is betting on a world where companies are free to choose from many models, agent frameworks, and open harnesses, as well as run them on infrastructure they control. That choice matters. Enterprises will not standardize on a single model or AI platform.

Construction firms have invested heavily in technology to connect project information. Drawings, specifications, RFIs, submittals, BIM models, photos, and field reports are increasingly accessible from anywhere, helping office and field teams work from the same information. Connecting project information is a critical first step. It improves collaboration, reduces rework, and helps office and field teams work from the same information.

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break! I was a little concerned when I saw an email from a charity alerting to this that I don’t recall ever contacting… Did I or was it phishing? Hmmm.

Traditional vulnerability management focuses primarily on identifying, prioritizing, and remediating known vulnerabilities. CTEM is a broader, continuous framework that also considers other exposures, validates which risks are realistically exploitable, and mobilizes the right teams to reduce them. CTEM does not replace vulnerability management; it builds on it by adding the business context and operational focus needed to address the exposures that matter most.

This year National Social Engineering Day falls on Aug. 6. This day is designed to give us an opportunity to remind people that cybercriminals do not always need sophisticated malware, an undisclosed vulnerability or a dark room filled with glowing monitors, sometimes, all they need is a good story. Social engineering existed long before computers. Confidence tricks, impersonation, false authority and appeals to greed or fear have been used for centuries.

AI has changed the calculus of a credential attack. Before, finding and exploiting credentials in an enterprise environment required time, patience, and human judgment. An attacker had to decide which accounts were worth testing and which systems were worth reaching. Many credentials never made the list.

We studied what happens when Large Language Models (LLMs) generate vulnerability patches for recently disclosed, complex vulnerabilities. Our data shows that LLMs produce Fix-Like Artifacts with Embedded Defects (FLAWED) 53.9% of the time when complex patches are required.