Employees Drive Rising Cybersecurity Risk As Shadow AI and Unsafe Work Habits Surge, WatchGuard Global Survey Finds
New Research Highlights Growing Visibility Gap Between Employee Behaviour and Organisational Security Controls.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
The MemcycoFM Show: Ep 27 - What Is Agentic Threat Intelligence?
In the recently published blog from Memcyco titled "What Is Agentic Threat Intelligence?", we discussed agentic threat intelligence as an emerging CTI model. Bounded agents support repetitive investigation work, such as collection, enrichment, prioritization, and evidence packaging, while analysts retain control over takedown and escalation decisions. Vendor briefings are full of “agentic AI” right now. Most of them describe the same thing: faster dashboards and smarter alerts. That is not agentic threat intelligence.
Erasing Security Debt with an App Risk Remediation Platform
A risk remediation platform is the operational infrastructure that transforms security debt from an unmanaged backlog into a structured, measurable program. With 82% of organizations now carrying security debt and the average fix half-life sitting at 243 days, the gap between vulnerability discovery and resolution is where breaches happen.
Sophos Fusion in Action
Sophos Fusion is the industry’s most complete cyber defense system. It sees everything, connects everything, and enables your defenses to respond as one. In this real-world example, see how Sophos Fusion stopped a wire fraud attack using telemetry from multiple security vendors.
RBAC vs. ACL: Understanding the Differences in Access Control
Every employee, contractor, application, and device in your environment needs the right level of access, but deciding how that access is managed is where many organizations struggle. Grant too many permissions, and you increase security risks. Make access too restrictive, and productivity suffers. Understanding the differences between RBAC and ACL is essential for designing a secure, scalable, and compliant access strategy.
DLP for AI: Protecting Sensitive Data in the Age of AI
Employees paste code into ChatGPT. They drop customer lists into Gemini for a quick summary. They upload a contract to an AI note-taker before a meeting starts. None of it feels risky in the moment. But all of it can walk sensitive data straight out of your organization. AI DLP exists to close that gap.
The practical checklist for defending against supply chain attacks
Supply chain attacks are having a moment. Open-source malware detections jumped 73% in 2025. In the past year, the debug and chalk packages were backdoored, the tj-actions GitHub Action was compromised and pulled malicious code into thousands of pipelines, and the axios maintainer account was hijacked and used to distribute a RAT. Malicious releases also hit Zapier, ENS Domains, PostHog, and Bitwarden CLI. Every one of these attacks was preventable with controls that were available at the time.
The best AI lesson this summer came from watching our interns challenge AI
Unknown block type "undefined", specify a component for it in the `components.types` option Every conversation about AI and early-career employees seems to start in the same place: will it weaken foundational skills by doing too much of the work? That's a reasonable concern. It's also not the question that ended up mattering most this summer.
Managed IT services for health care: What MSPs need to deliver in 2026
Heath care organizations are under attack. That's not news. But how serious is the threat? Consider these numbers from the IBM Cost of a Data Breach Report 2025: Health care organizations need help, and managed service providers (MSPs) can drive revenue and grow their businesses by providing it. But working in health care isn't like working in other industries.
The tokenmaxxing bill is due: Take control of AI spend with SaaS Manager
A nasty shock is hitting finance leaders across every industry right now: AI token bills that run ten, twenty, even a hundred times over what they forecasted, blowing holes straight through quarterly budgets. These leaders are all asking the same questions: How could this happen if they didn't approve it? Why didn't any of their systems alert them to the spike? And most importantly, what can they do now?