Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest posts

Who was behind the attack? Possibly nobody

The fever dream continues, and I'm not even in Vegas for Hacker Summer Camp. Last week I wrote about Anthropic disclosing that one of their models published live malware to PyPI while believing it was inside a simulation. I was running a fever when I read the report. The metaphor was too good: a model that couldn't tell simulation from reality, covered by a writer who wasn't sure which way was up. I thought that was a one-week story. Very naive of me to have so much faith, I know.

Securing Agentic AI Workflows in n8n: From Leaked API Keys to Encryption Key Compromise

A leaked n8n API key is only the start. GitGuardian's research traces the full chain, from exposed tokens and weak keys to CVE-2026-25053 and the N8N_ENCRYPTION_KEY that protects every stored credential, then lays out a hardened configuration to break it.

How to Use Teleport and GitHub Actions to Deploy to Kubernetes Without Shared Secrets

We live in the era of Kubernetes. And if you are using Kubernetes, you are probably using CI/CD to deploy your applications into it. However, as CI/CD and Kubernetes have grown in popularity, the number of bad actors looking to exploit weaknesses in them has also grown. It is critical that modern security techniques keep your Kubernetes clusters, and the sensitive data and services within them, safe from attack.

Your Scanners See a Different Internet Than Your Users Do

A few years ago, cloaking was mostly a black hat SEO problem. Someone would serve one version of a page to Googlebot and another to human visitors, and the worst outcome was a spammy search result. It has since become one of the more effective evasion techniques in the phishing and malvertising toolkit, and most security teams are still measuring their external exposure from a vantage point that attackers stopped caring about some time ago.

6 Administrative Tasks Every Personal Injury Law Firm Can Automate With AI in 2026

Personal injury law firms spend a significant amount of time on administrative work that supports-but does not replace-legal expertise. Reviewing medical records, preparing demand letters, drafting litigation documents, organizing case files, summarizing evidence, and communicating with clients are all essential parts of managing a case, yet they can consume valuable hours every week.

Shadow AI Is the New Shadow IT: Getting Visibility Into the Models Your Teams Already Use

Security teams spent a decade wrestling shadow IT - the unsanctioned SaaS accounts, personal Dropboxes, and rogue cloud instances that employees adopted faster than governance could follow. That battle produced hard-won playbooks: discover, broker, monitor. Now the same movie is replaying with AI, at higher speed and with higher stakes. Developers embed model APIs into services over a lunch break, marketing teams paste customer data into chatbots, and product features quietly ship with third-party inference behind them. Most organizations today cannot answer a basic question.

Why Traditional Security Monitoring Is No Longer Enough in 2026

Cybersecurity has become significantly more complex over the past few years. Attackers no longer rely solely on mass phishing campaigns or simple malware. Modern threat actors use automation, artificial intelligence, credential theft, living-off-the-land techniques, and multi-stage attacks designed to evade traditional security controls. As a result, organizations that still depend on conventional monitoring tools often struggle to detect and contain threats before damage occurs.

Elastic: Unifying security operations with Elastic: From data ingestion to threat response

Discover how Elastic Security brings together the full spectrum of security operations - from ingesting large volumes of diverse data to responding to threats in real time - all within a single, scalable platform. This session will showcase Elastic Security's AI-powered workflows, including automated data ingestion, intelligent alert triaging, and a context-aware AI assistant that helps accelerate investigations and reduce noise.

Tigera: Securing Autonomous AI Agents in Production

While the industry focuses on LLM accuracy, technical decision-makers are facing a more complex challenge: How do we govern the autonomous AI agents that will soon operate across our entire infrastructure? Without a dedicated control plane, autonomous agents introduce significant risks to identity, authorization, and auditability. This session moves past the AI hype to discuss the architectural constraints and security patterns required to run agentic systems in highly regulated, enterprise environments.

Tigera: Your NSX DFW Covers Every VM Except the Ones on Kubernetes: Extending the Policy Model to Your Cluster with Tiered Microsegmentation

You have years of NSX distributed firewall policy in production. Tag-based security groups, rules that follow the workload, a tiered structure that keeps the security team's rules above what app teams can touch and an auditor who has already signed off on all of it. Now some of those VMs are moving to Kubernetes, where the default posture is that every workload can reach every other workload. The first question your security team will ask is whether this means starting over. It's the right question.