Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Customer zero: ServiceNow's autonomous IT journey with Tanium

What does it look like to be customer zero for enterprise IT and security? In this video, Glen Taylor, VP of Digital Technology Systems & Services; Sankha Nagchoudhury, SVP of Digital Technology; and Madhuri Manikonda, Sr. Director of Digital Technology & AI Operations at ServiceNow, share how ServiceNow operates at massive scale—supporting 30,000 employees while defending against constant cyber threats—and how Tanium plays a critical role in making that possible.

VibeScamming: Why AI-built scams are changing phishing risk

VibeScamming refers to AI-assisted phishing operations where attackers use natural-language tools to rapidly generate and modify phishing content and web pages, lowering (but not eliminating) the technical skill required. One of the primary enterprise impacts is faster phishing iteration and reconstitution after blocks or takedowns, with identity compromise remaining a major risk alongside malware and other payload-based attacks.

Vercel security incident: What the breach reveals about OAuth trust, supply chain risk, and response speed

Public reporting suggests the incident involved abuse of a third-party application that had been granted OAuth access to a Vercel employee account, enabling unauthorized access to some internal resources. Certain customer‑related tokens, environment variables, or other access artifacts may have been exposed, though Vercel has not stated that password theft was part of the initial access path.

Discover Walkthrough Redux - Tanium Tech Talks #159

What’s really on your network? Would you know if a rogue device was plugged in? Join us as Nash King breaks down how Tanium Discover works today - and how to use it effectively in real environments. You'll learn about: How Discover identifies network interfaces How to use different scan types IPv4 vs. IPv6 discovery (and why it matters) Using satellites to discover remote or unmanaged subnets Centralizing network definitions and exclusions Using labels to categorize interfaces.

Understanding shadow AI in your endpoint environment

Generative AI–and large language models in particular–reached mass consumer adoption beginning in late 2022 and early 2023, with ChatGPT reaching 100 million users faster than any consumer application in history. Since then, AI has advanced at a breakneck pace and now seems to be incorporated in every tool, app, and website–regardless of how useful it might actually be.

Axios npm package compromise: What happened, what matters, and how to respond

Attackers carried out a supply chain compromise by abusing a compromised npm maintainer account to publish malicious Axios versions ([email protected] and [email protected]). These releases introduced an unexpected dependency, [email protected], which attempted platform-specific malware execution via an npm lifecycle script during installation on Windows, macOS, and Linux.
Featured Post

The UK's Cyber Action Plan marks the end of compliance-led security

The UK government's new £210 million Cyber Action Plan signals an important shift in how cyber risk is being addressed at a national level. Designed to strengthen cyber defences across government departments and the wider public sector, the plan establishes a new Cyber Unit and introduces stronger expectations around resilience, accountability and operational capability.

Tanium Enforce: Policy Management Evolved - Tanium Tech Talks #158

Migrating Group Policy? Struggling with CIS remediation? Tired of managing sprawling Enforce policies? Join us as Time Mintner shows off our favorite Enforce update yet - from importing GPOs and CIS benchmarks to simplified policy management. Enforce 3.0 dramatically simplifies: Migrating Group Policy into Enforce Consolidating multiple policy types into a single, manageable policy Importing CIS Benchmarks (Build Kits) Improving compliance validation️ Managing services and custom registry settings.