Incident response teams have more tools, automation and intelligence than ever before. In turn, the opportunities to make mistakes are also greater. Organizations are making the same expensive mistakes over and over again. They ignore warni…

Autonomous AI agents are reshaping enterprise operations. Their advanced reasoning can design and execute multi-step, high-privilege workflow actions. This makes the logic layer vulnerable to goal hijacking, indirect prompt injection and un…

Enterprise AI is deciding, detecting, and acting in production, while security and governance are still being retrofitted from procurement checklists and annual audits. This session from industry thought leader Noah M. Kenney introduces the…

tl;dr Benchmarking is a waste of time when focused solely on inputs (e.g. budgets) rather than outcomes (e.g. effectiveness of controls). The budget comparisons are never “apples for apples” and may often end up setting risk tolerance only …

It is tempting to compare cybersecurity to a chess game. Two adversaries facing each other, plotting strategy and tactics. Move and counter move, anticipating actions and grinding out a win. In reality, in our complex world of dependencies,…

We’re all talking about the tidal wave of vulnerabilities that is upon us, with repeated waves likely coming. As I’ve covered here, we can respond to this in various ways including ramping up speed across our entire defensive stack, which i…

The cybersecurity landscape continues to evolve at a rapid pace, driven by emerging technologies, shifting attacker tactics, and changing business priorities. Join Steve Piper, CEO of CyberEdge and Editor-in-Chief of Security Buzz, as he ex…

Ransomware remains one of the most disruptive and costly threats facing enterprises today, and preparation is critical to minimizing its impact. Join Steve Piper, CEO of CyberEdge and Editor-in-Chief of Security Buzz, as he discusses how se…

Peel back any compliance framework, and you'll find a person hiding under it. Attestation means somebody put their name on a claim and would rather not be embarrassed. Access review means asking whether this particular human still needs thi…

Ninety-five percent of organizations believe they have visibility into their AI and machine identity exposures, yet only 36% are actually monitoring them. SpyCloud , the leader in identity threat protection, today released its annual SpyClo…

A flaw in OpenAI’s ChatGPT allowed attackers to extract data from a victim’s connected Gmail account by passing hidden instructions between separate user sessions, according to research from Check Point. In a proof-of-concept, Check Point d…

ShinyHunters is claiming to have broken into a Florida government database containing sensitive information on the state’s drivers. The notorious extortion group said it has breached the Florida Department of Highway Safety and Motor Vehicl…

An approach to developing a better strategy in your cyber strategy. The post What I’ve learnt writing cyber strategies with grand scopes first appeared on Black Swan Security . As part of my new role, one of my first tasks has been to devel…

A short post comparing an information asset led approach to cybersecurity vs a critical service and customer-led approach. The post What do we protect in Cybersecurity? first appeared on Black Swan Security . I’ve moved from the priva…

I had cause recently to participate in a workshop considering identity across an enterprise and I wanted to share some of my thinking which was unexpectedly useful. Identity is a slippery thing, it has real world hooks but in the digital wo…

A few weeks ago I asked on X and LinkedIn a deceptively simple question: which “security basics” matter more against AI-armed attackers, and which ones don’t matter anymore? What Gemini think of this blog [before you freak out about ‘…but A…

(by Anton Chuvakin & Usman Chaudhary) Prologue: Three Years After “The End Is Nigh” Back in 2023, one of us wrote “Log Centralization: The End Is Nigh?” — an admittedly incomplete-thought blog with a scary premise: after 20+ years of yellin…

In Part 1 of this series , we dumped a pile of uncomfortable questions on you and promised answers. In Part 2 of the series , we talked about why 1990s-2000s alert triage must die. The core thesis, if you recall: if you add AI agents into a…

New ClickFix technique targets browsers. Business news: NetSPI and Synack to merge.

In this episode of the Microsoft Threat Intelligence Podcast, recorded live at Black Hat, Microsoft Threat Intelligence Director Elliot Volkman is joined by Andrew “Spike” Grant, Principal Threat Intelligence Incident Commander at Huntress.…

Yael Grauer won a Pulitzer and got laid off in the same year. She is a freelance investigative reporter covering cybersecurity, privacy, and surveillance. She sat down with Gianna to talk about what companies get wrong when journalists come…

Introduction In today's fast-moving cybersecurity landscape, threat analysts must move beyond basic, binary reputation scores to successfully defend against modern, highly adaptive web threats. Traditional URL analysis has been redefined by…

We’re adding a new specialist to VirusTotal’s Crowdsourced AI lineup: Knostic 's AgentMesh Agentic Security Supply Chain Reputation Engine. We are partnering with them to analyze Visual Studio Code extension (.VSIX) files. This complements …

At VirusTotal, we are closely following how AI agents are evolving and how we can be useful in that space. Part of that is analysis: the new generation of AI-native artifacts (skills, plugins, IDE extensions, agent configs) that attackers a…