Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Grounding the AI SOC: The Context Graph Problem

See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo David Melamed is Head of Emerging Technologies at Torq. He joined through Torq’s acquisition of Jit, which he co-founded and led as CTO since 2020, building agentic security on a production Context Graph. A cloud security veteran with 20+ years of experience, David previously held senior technical roles at Cisco (via the CloudLock acquisition) and MyHeritage.

How visual embeddings leak identity and how to fix it

CVPR 2026 paper overview with research scientist Daniel George, a coauthor of “From Measurement to Mitigation: Quantifying and Reducing Identity Leakage in Image Representation Encoders with Linear Subspace Removal." He discusses some of Persona’s recent research efforts, embeddings, and the paper’s focus. The paper was accepted to the Conference on Computer Vision and Pattern Recognition (CVPR) 2026, a premier conference in computer vision and machine learning.

Securing Your AI Agents: Today's New Data Threat

AI agents are already inside your company - reading files, calling APIs, executing code. Most of them were never approved by security. In this session, Nightfall AI walks through exactly how agents become an attack surface: prompt injection, malicious MCP servers, credential exfiltration, and more.

Beyond Prevention: Frontier AI and the Shift to Cyber Resilience

Frontier AI is compressing the time between vulnerability discovery and exploitation, making reactive security strategies harder to sustain. In this webinar, Roland Cloutier (Former CISO of of ByteDance & TikTok, ADP, and EMC) and Gabi Reish discuss how security leaders can move beyond patching everything to prioritize real risk, measure cyber readiness, and communicate security posture to the board.

WatchGuard Earns Eight TrustRadius Top Rated Awards for 2026

We're proud to share that WatchGuard has been recognized with eight TrustRadius Top Rated Awards for 2026, highlighting our continued commitment to delivering powerful, practical cybersecurity solutions that help organizations and managed service providers stay secure in an increasingly complex threat landscape. TrustRadius Top Rated Awards are based entirely on verified customer feedback.

Cato CTRL Threat Research: From Fiscal Lures to Remote Access, A Previously Undocumented NinjaOne RMM Abuse Chain

Cato CTRL researchers recently identified an undocumented, active phishing campaign targeting Brazilian organizations with fake business-document lures, downloading a NinjaOne Remote Monitoring and Management (RMM) agent. The use of NinjaOne is particularly significant, underscoring how attackers no longer need exotic malware to penetrate an enterprise. Familiar business workflows and software is enough.

CISOs need decision-grade risk intelligence, not another workflow

In large enterprises, the hardest security decisions are rarely made in the SOC. They are made in board meetings, budget reviews, audit discussions, customer escalations. The most dire are often represented in the moments when leaders have to decide what matters now, what can wait, and what risk the business is actually taking on. The real GRC problem is no longer how to manage more work. It is how to help the business make better decisions with higher confidence. CISOs do not need another workflow.

Your Audit-Ready PCI DSS Compliance Checklist for 2026

Analysts summarized by the PCI Security Standards Council found that breaches in scope for PCI frequently involved card data. Teams already know the risk. The hard part is proving, month after month, that the controls around that data stayed in place and kept working. That is why many PCI DSS audits stall in the same places: scattered evidence, undocumented scope changes, firewall rules that drifted after a change window, and logs that exist but were never centralized.

How to Monitor and Manage User Sessions in Drupal

Most Drupal security strategies focus on protecting user accounts before login. Organizations invest in strong passwords, multi-factor authentication (MFA), and Single Sign-On (SSO) to prevent unauthorized access. While these controls are important, security risks do not disappear once a user successfully authenticates. Users may remain logged in for extended periods, share credentials with others, access accounts from multiple devices simultaneously, or leave active sessions unattended.