Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

America's New Security Doctrine: Hardening Digital and Supply Chain Borders

In the span of six weeks this summer, the United States government issued three separate security directives that, on the surface, appear to address completely different problems. One tightens how federal agencies patch software vulnerabilities. Another creates a government-industry clearinghouse to triage AI-discovered bugs. The third restructures how defense contractors source the raw materials that go into missiles, aircraft, and military electronics. Different agencies. Different languages.

Don't Wait for a Crisis: Rehearse Your Zero-Day Response

How do you prepare for a zero-day attack before one impacts your organization? In this video, Daniel dos Santos explains why security teams should use past vulnerabilities and real-world attack scenarios to rehearse response plans. By testing decisions, controls, communications, and recovery actions—not just documentation—organizations can build confidence and improve readiness for future threats.

The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security

Every so often, an industry gets a moment that quietly redraws where the line is — not because anything was said, but because something was proven. AI security had one of those moments last week, and it's worth being direct about that before getting into the details: this wasn't an incremental data point. It was the moment a risk that security and safety researchers had described in theory for years showed up, fully formed, in a disclosed incident report.

Why ESG Data Security Is Becoming a Business Priority

As businesses increasingly focus on their environmental, social, and governance (ESG) performance, the data behind these efforts is becoming as important as financial information. This shift, along with using AI to analyse and report on sustainability metrics, has introduced new cybersecurity risks. Protecting this sensitive data isn't just an option anymore; it's a core part of corporate responsibility and managing risk. With AI involved, the potential for sophisticated data manipulation introduces AI as an emerging risk dimension that security teams need to deal with.

Emerging Threat: (CVE-2026-10818) WPForms Pro Arbitrary File Upload Leading to Remote Code Execution

CVE-2026-10818 is an arbitrary file upload vulnerability in WPForms Pro, the paid edition of a widely deployed WordPress form builder plugin. It was published on July 25, 2026, with Wordfence as the assigning CNA. The flaw sits in the ajax_chunk_upload_finalize function, which handles the final step of a chunked file upload. File type validation runs after the chunk metadata and the file contents have already been written to disk, and the assembled file is not deleted when that validation fails.

What Is AI Pentesting and How Does It Works?

AI pentesting (AI penetration testing) is the use of reasoning-capable AI models to autonomously find, exploit, and validate security vulnerabilities in running applications — especially the context-dependent flaws, such as broken authorization and business-logic abuse, that traditional scanners cannot detect.

Securing Your Data Pipeline from Internal Threats

When organisations design security strategies, they often focus on building a fortress to keep external threats out. However, some of the biggest risks to data integrity don't come from outside; they start within. Securing a data pipeline, the complex system that moves information from source to destination, needs strong defences against internal threats, whether they're intentional or accidental.

CVE-2026-6875: ServiceNow Sandbox Escape Leads to Pre-Auth RCE in AI Platform

ServiceNow AI Platform (the enterprise PaaS formerly branded in the Now Platform) contains a critical, unauthenticated remote code execution vulnerability tracked as CVE-2026-6875. The vulnerability allows a remote attacker to escape ServiceNow’s JavaScript execution sandbox. No credentials or user interaction are required, and the attacker achieves full code execution on the underlying instance.