Satya Nadella just published one of the most important perspectives I've read on securing AI in the enterprise. In his essay, Models as Insider Risks in the Super Intelligence Era, he argues that as ...

The best podcast episodes on the biggest breaches were recorded close to the event, often by people who worked on it. My picks: Malicious Life on SolarWinds, Darknet Diaries on NotPetya, Andres Freund ...

SafeBreach Coverage for CISA Alert AA26-281A Learn how SafeBreach maps AA26-281A to simulations that test your exposure to ...

Most organizations still think about cybersecurity and physical security as separate disciplines. Typically, the physical ...

The Campaign With No CVE That Locks You Out of Your Own Firewall The Cyber Resilience Brief — A SafeBreach Podcast Episode 85 ...

He brings experience from both the public and private sectors, with expertise in intelligence analysis, cyber defense, and product development. He is known for translating complex technical concepts ...

Researchers at Varonis gave a phishing kit's built-in AI assistant a detailed brief: write a Microsoft 365 MFA lure aimed at a CISO, with a branded QR code and a credential-harvesting page.  What came ...

Most GRC platforms were built as trackers, not operational systems. They log that work happened without doing anything to reduce the manual burden. Teams re-map the same controls every time a new ...

Block Kit alerts, threaded conversations with Marcus, and every action tied to a verified Guard identity. The alert that matters usually lands in Slack. Someone sees it, someone else asks what it ...

Hack The Box has launched the AI Range Enterprise Edition to help cybersecurity teams evaluate, validate, and continuously ...

AI agents are becoming part of engineering teams, but most organizations have no identity, governance or security model for ...

Since Sonatype began tracking malicious open source packages in 2017, we have logged nearly 2 million malicious packages.