Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI now plays a central role in defending organizations from the modern threat landscape. It triages alerts, investigates security events, and recommends what to do next. AI is critical to defending at machine speed, but security leaders can’t see how it is making decisions on their behalf. This visibility challenge creates multiple downstream problems for security leaders that need to justify AI decisions that they can’t fully explain to their board, regulatory bodies, and insurance partners.

A virtual switch is the software equivalent of a physical network switch, connecting the virtual network adapters of virtual machines (VMs) to a network at Layer 2 of the Open Systems Interconnection (OSI) model. VMware provides vSwitches across its virtualization platforms, but how you manage them depends on the type you choose. A standard vSwitch has to be set up by hand on every ESXi host.

Renewing a certificate is the easy part. Getting it onto the server is where automation breaks. Somebody rotates the API token on the firewall. A service account password expires. A VM gets rebuilt and the agent never comes back. The certificate renews right on schedule, the deployment fails, and the server keeps serving the old certificate until it expires. Renewed and deployed are not the same thing.

The first thing GitGuardian ever shipped was a free warning. Now we’re making sure it gets heard.

The extortion demand is the figure that gets quoted and rarely the largest line. Downtime, restoration, forensics, legal hours and notification each contribute, and for a mid-market company the regulatory components behave in a way that catches finance teams out. ‍ Reporting deadlines do not scale with headcount.

Enterprise AI governance guidance assumes a review board that meets monthly, an independent validation function, an impact assessment per system and somebody whose job title contains the words AI and compliance. A company of three hundred people has none of those and is governed by the same regulations. ‍ The difference runs deeper than budget. Enterprise programs are assessment-led, which scales with headcount because every system needs an assessor.

An audit trail is usually judged by how much it contains. The more useful question is how many innocent explanations it rules out, because a record that admits a benign reading supports an assertion rather than a conclusion. ‍ Each source added to a trail removes an alternative explanation rather than adding detail. Confidence therefore climbs in steps rather than smoothly, and three sources of the same kind are worth less than two of different kinds. ‍

iGaming fraud detection already spans much of the player journey, from registration and identity verification to login, payments and account activity. But for phishing-driven account takeover (ATO), an important part of the risk can develop before suspicious activity appears inside the operator environment. That distinction matters as operators try to improve fraud detection without adding unnecessary friction.

Tens of thousands of European organizations are legally accountable for the security of companies they do not control but on whose services they rely. Under Article 21(2)(d) of the NIS2 Directive, any in-scope entity is required to manage supply chain security, including the security aspects of its relationships with its direct suppliers and service providers. Article 21(3) further specifies that an organization must take each supplier’s specific vulnerabilities into account.

A phishing campaign is using AI-themed lures to target employees who operate advertising accounts, according to a new report from Island. The campaign is launched from a phishing platform that poses as a portfolio of AI advertising tools, using branding from Gemini, Claude, ChatGPT, Perplexity, and Muse. The platform’s operator added a fake Muse Ads lure eight days after Meta launched its Muse AI agent.