Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The post-quantum EO is an important milestone. Now it's time to get to work

On June 22, 2026, President Trump signed Executive Order 14409, "Securing the Nation Against Advanced Cryptographic Attacks." The order sets a December 31, 2030, deadline for federal agencies to transition their most sensitive systems to post-quantum encryption, and a December 31, 2031, deadline for post-quantum authentication. The EO also directs federal contractors to comply with post-quantum Federal Information Processing Standards (FIPS) by the end of 2030.

Monitoring Agents and SaaS AI Platforms with Microsoft Agent 365 [Part 1]

Agent usage is exploding and in Microsoft 365, agents aren’t monitored by default. Even though it’s early days for tools that can monitor agents, Microsoft’s newly released Agent 365 evolves this new category with some powerful capabilities. Here are some tips for using Microsoft Agent 365 and related tools to monitor agents. Solutions discussed in this post: This is part 1 of a two-part series.

Continuous vulnerability management: Is your program actually continuous?

Continuous vulnerability management (CVM) is an ongoing, automated approach to discovering, analyzing, prioritizing, and remediating security weaknesses across an organization's IT environment. It replaces periodic scans with real-time visibility that shrinks attacker opportunity windows.

Ep. 3: The Americans - Exclusive Interview: Laptop Farmer Facilitating N. Korea's IT Worker Scandal

All North Korean IT worker schemes hinge on one thing: a willing participant in America. We found one, and knocked on her door. Experts have dubbed some of these Americans “laptop farmers.” The North Koreans call them “facilitators” – people willing to host multiple laptops in their home and happy to not ask too many questions. But identifying these people can be hard: unless you have access to a private Discord channel where North Korean IT workers talk freely among themselves.

Inside FortiBleed: Reverse Engineering the CyberStrike Harvester Behind a Global FortiGate Credential Factory

FortiBleed is a large-scale credential compromise campaign that targets internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The campaign does not depend on a malware payload; instead, it uses a credential pipeline that utilizes credential stuffing, password spraying, configuration harvesting, offline cracking, and post-authentication capture processing.

5 lessons MSPs should take away from Pax8 Beyond 2026

Pax8 Beyond 2026 made one thing clear: the managed services industry has entered a new phase. For years, managed service providers (MSPs) drove growth by adding more tools, more technicians and more services. Today, that model is cracking. AI, automation and rising customer expectations are reshaping how MSPs operate and how they create value. Technology alone is no longer the differentiator.

Introducing AI-assisted query creation in 1Password Device Trust

Today we're shipping a new capability directly into 1Password Device Trust that lets admins query their fleets faster, without needing to be SQL experts. Now you can describe what you want to investigate in plain English, and Device Trust generates a ready-to-run SQL query you can execute across your devices in a single click.

Best Data Breach and Data Leak Detection Tools in 2026

In 2023, a single-file-transfer vulnerability enabled attackers to access hundreds of organizations simultaneously. Not only did they steal data, they immediately posted it to dark web extortion sites before most victims even knew they'd been hit. It was the MOVEit Transfer breach, and it exposed a gap that most corporate security stacks still haven't closed: the difference between stopping an attacker inside your network and finding your data after it's already left your network.