Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What Canada's Bill C-36 Means for AI-Powered Digital Experiences

As Canada strengthens privacy protections and enforcement, organizations must find a way to accelerate AI innovation while maintaining continuous visibility into how customer data is collected, shared, and protected. Canada’s proposed Bill C-36 is about more than privacy regulation. It reflects a broader challenge facing governments, regulators, and businesses around the world.

AI Export Controls and the Risk of Slowing Down Defense

The Trump administration has ordered Anthropic to restrict access to its most advanced AI models, Fable 5 and Mythos 5, citing national security concerns. Officials raised the possibility that these systems could be used by foreign actors to identify software vulnerabilities or support cyber attacks.

8 data governance tools for mid-market security teams in 2026

Data governance tools fall into two categories that buyers often conflate: catalog platforms for data quality and lineage, and access governance platforms for proving who can access sensitive data and demonstrating control to auditors. Mid-market teams under pressure from GDPR, HIPAA, SOX, or PCI DSS typically need both.

Top SIEM Tools for Hybrid Environments in 2026

Hybrid infrastructure has expanded faster than most Security Information and Event Management (SIEM) tools can keep up with: on-premises AD, cloud workloads, and SaaS each produce telemetry at different quality levels, while identity event normalization and compliance evidence output are the layers that most SIEM deployments address last. The platforms that close those gaps from the initial deployment architecture produce cleaner signals and audit-ready evidence without additional tooling.

Weekly Brief: Driftnet Edition | Why SOC and TPRM Teams Need the Same Intelligence

In this week's Weekly Brief: The Driftnet Edition, Brandon Torio explores why the most mature security organizations are breaking down the walls between Security Operations Center (SOC) and Third-Party Risk Management (TPRM) teams. Historically, these teams have approached risk from different angles. TPRM teams focus on vendor oversight, compliance, and risk workflows. SOC teams focus on attack surfaces, vulnerabilities, threat activity, and internet-facing exposures.

AI Agent Security Explained: Agents, MCP, Prompt Injection, and the AI Harness

AI Agent Security is quickly becoming one of the most important areas in cybersecurity. Terms like "agent," "harness," "MCP," "tool calls," "tool responses," "instruction hijacking," "indirect prompt injection," "prompt exfiltration," and "tool misuse" are appearing in conference talks, vendor announcements, podcasts, and industry discussions, often without clear explanations.

Application Security Already Knows What's Broken. Context Is How You Fix It Faster.

While traditional security tools excel at finding vulnerabilities, the sheer volume of alerts—now accelerated by AI-driven development—has made manual triage impossible. The true value of Application Security Posture Management (ASPM) lies not in providing more visibility or creating a cleaner backlog, but in shifting from cataloging risk to taking fast, context-driven, machine-speed action to actually fix what is broken.

GenAI fraud detection in academia vs industry

Academic fraud datasets often lack real-world grounding and miss insights that you can only glean from defending against ongoing adversarial attacks. Just ask Zhaofeng Si, a PhD student in computer science at the University at Buffalo who studies the detection of AI-generated synthetic images. Three weeks ago, he joined Persona for a 12-week internship. Now, he’s working alongside Persona’s research scientists to build a benchmark for selfie fraud.

Put agentic AI to work: Real-world defense against threats

Attackers are using AI to compress timelines from hours to minutes. Most SOCs, and most security platforms, weren’t built for that speed. Join Elastic Security product and research experts for a look at how modern security teams can detect, investigate, and respond faster using agentic AI. You’ll learn how to: You’ll leave better equipped to reduce investigation time, keep analysts focused on decision-making, and modernize security operations for machine-speed threats without removing humans from the loop.