Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break!

Security teams face a demanding balancing act: keeping pace with evolving threats, managing complex environments, and demonstrating how their investments reduce risk. At LevelBlue, helping organizations meet those challenges is central to our work. That commitment is reflected in Frost & Sullivan’s recognition of LevelBlue as its 2026 Global Company of the Year in Managed Security Services.

A coding agent on a laptop runs as the developer. It reads the same keychain, carries the same tokens and appears in every downstream log under the same name. The identity record is accurate and it cannot answer the question governance needs answered. ‍ Every control keyed to identity therefore operates on a merged subject.

Interaction monitoring covers four of the ten risks in the 2025 Top 10 for LLMs and generative AI applications well, three partially and three not at all. The split is not arbitrary, and the line it follows tells a buyer more than the coverage count does. ‍ Monitoring observes systems being used. Several entries on the list describe defects in how a system was built, which no amount of observation at the point of use will surface.

Most register comparisons rank products on fields, workflow and integrations. A more useful test is which decisions the register can settle, because a register that cannot settle a decision is a record of one made elsewhere. ‍ Five decisions get asked of a register. Which risk to treat first, how much to spend treating it, whether to accept it, whether to transfer it, and whether the treatment worked.

The above was a quote from a young South African responder to our survey on cybercrime perceptions. Notice what's missing: there is no villain, underground or dark web. Just a skill, a community and a sense of finally being good at something. That is the picture that emerges from Crime or Career? Youth voices on cybercrime across the Global South, our new report developed in cooperation with the Global South Cyber Academies Network (CAN).

91% of Americans have been targeted by a scam, and 17% have fallen victim to one, according to a new survey by Consumer Reports. Notably, 20% of respondents said the latest scam they encountered was personalized, indicating that attackers are increasingly using automation and public or leaked information to craft targeted phishing attacks.

If you're an MSP or MSSP, you've probably had some version of this conversation with a customer: “We just found out we need to comply with NIS2, DORA , HIPAA, PCI DSS... What do we need to buy?” It's a fair question. It's also usually the wrong first question — and answering it well is where you create real value for your customers.

Public discussion of AI-enabled cybercrime tends to lean heavily on vendor marketing and speculation about future capabilities. We wanted to measure what criminal practitioners are actually discussing, what tools they prefer, and where their attention is shifting.