ISC2 has published the outline for its forthcoming AI Security Certification pilot, offering a useful picture of the skills employers may soon expect from people responsible for securing AI deployments. The outline covers six domains, from model and data protection to architecture, incident response, governance and testing. It is a reminder that buying an AI security product … [Read more...] about ISC2 AI Security Pilot Puts Governance and Model Defense on the Same Exam
News
Your AI Assistant Is Becoming a New Route Into Your Accounts
Connecting an assistant to email, documents and business software changes the account-security picture. The assistant can now retrieve private material and, depending on the integration, make changes or send information elsewhere. An attacker may try to influence that behavior through content the assistant is expected to read. The route into the account can therefore begin with … [Read more...] about Your AI Assistant Is Becoming a New Route Into Your Accounts
Tracking Pixels Are a Compliance Liability Most Sites Never Audit
Ask a marketing team which tags run on their website and you'll usually get a confident answer. Ask them to prove it, page by page, with the cookie banner unanswered, rejected and accepted, and the room goes quiet. That gap between what a company thinks its pixels do and what they actually send has turned into one of the more expensive blind spots in corporate compliance. The … [Read more...] about Tracking Pixels Are a Compliance Liability Most Sites Never Audit
Datadog Offers Nearly 4 Billion Dollars for Israeli Cloud Security Startup Upwind
Datadog has offered close to $4 billion to buy Upwind Security, the Israeli cloud security startup, according to a report by The Information on Thursday. Upwind has not accepted. It is instead finalizing a $300 million funding round that values the company at about $3.8 billion. Neither company commented on the report. Look at those two numbers side by side. The gap between … [Read more...] about Datadog Offers Nearly 4 Billion Dollars for Israeli Cloud Security Startup Upwind
Cloudflare Deploys PHP2Shell Defenses as Critical PHP Flaws Put Websites at Risk
Websites and public services have been taken offline as organizations race to patch PHP2Shell, two critical vulnerabilities in the PHP runtime. The response has expanded beyond emergency firewall deployments into deliberate service interruptions, with operators choosing temporary unavailability while they secure exposed systems. Cloudflare has deployed protections for its … [Read more...] about Cloudflare Deploys PHP2Shell Defenses as Critical PHP Flaws Put Websites at Risk
Cybersecurity Digest, October 19, 2026: AI-Powered Intrusions, Cloud Compromises and Critical Infrastructure Vulnerabilities
The cybersecurity landscape is changing in ways that make traditional distinctions between sophisticated attackers and ordinary cybercriminals increasingly difficult to maintain. Today's developments illustrate the shift particularly well. Autonomous AI agents are reportedly conducting intrusions at remarkably low cost, trusted cloud services are becoming gateways into … [Read more...] about Cybersecurity Digest, October 19, 2026: AI-Powered Intrusions, Cloud Compromises and Critical Infrastructure Vulnerabilities
Continuum AI Pushes Autonomous Cybersecurity From Vulnerability Discovery Toward Tested Repairs
Continuum AI has introduced OrcaCyber Zero 1.5, a cybersecurity reasoning model designed to investigate vulnerabilities, validate exploitability and support remediation. The model includes a million-token context window, native tool use and extended reasoning intended for work across large codebases and interconnected systems. Continuum reports strong benchmark results, … [Read more...] about Continuum AI Pushes Autonomous Cybersecurity From Vulnerability Discovery Toward Tested Repairs
Japan’s Cybersecurity Warning Gains Urgency as Disclosed Incidents Surpass Last Year’s Total
TrendAI has issued a threat advisory for organizations in Japan after its researchers found that publicly disclosed incidents during the first nine months of 2026 exceeded the total they tracked for all of 2025. September accounted for 86 incidents. These figures describe the company’s monitoring of disclosed events, rather than a comprehensive national count of every … [Read more...] about Japan’s Cybersecurity Warning Gains Urgency as Disclosed Incidents Surpass Last Year’s Total
Lattice Brings Post-Quantum Security to the Firmware Beneath AI Infrastructure
Lattice Semiconductor has introduced Sentry 5.0, adding post-quantum cryptography to its platform firmware resilience and attestation stack. Announced on October 12, the release is aimed at AI data centers and critical infrastructure. Lattice describes it as the industry’s first PQC-enabled solution of its kind, a company claim rather than an independently established ranking. … [Read more...] about Lattice Brings Post-Quantum Security to the Firmware Beneath AI Infrastructure
An AI-Cloned CEO Voice Exposes the Security Risk of Obeying the Boss
A familiar executive voice can make an unfamiliar request sound legitimate. New KnowBe4 research from Singapore suggests that the employees most confident about detecting an imitation may also be among those most willing to act before checking. In a Censuswide online survey of 500 office workers, 35% of senior managers said they would likely comply with an AI-cloned CEO voice … [Read more...] about An AI-Cloned CEO Voice Exposes the Security Risk of Obeying the Boss