How to reduce cybersecurity backlogs and fix vulnerability debt
An increasing backlog indicates a failure in the operating model Security teams often become the default owners of any issue labeled as a security concern. For example, when a scanner…
-
-
Capability Is Closing the Open-Closed Gap; Security Is Not
Introduction Sixteen new models joined the CASI evaluations in August. Anthropic’s claude-fable-5 debuted at the top of the board on both security and capability, and xAI’s grok-4.5 debuted at the…
-
Can AI invent new attack techniques? New research from James Kettle and PortSwigger Research
Kieron Hughes | Wednesday, 12 August 2026 at 09:04 UTC We already know AI can find vulnerabilities. James Kettle, PortSwigger’s Director of Research, wanted to answer a harder question: can…
-
Putting OpenAI Cyber Models to Work for Defenders
Unit 42 is putting the latest frontier cyber models to work across customer environments to find, validate and help remediate the attack paths that matter most. In May, we introduced…
-
The Good, the Bad and the Ugly in Cybersecurity – Week 33
The Good | Courts Sentence “The Com” Online Syndicate Member for Blackmail & Sextortion A court in the UK has sentenced a member of the decentralized online cybercrime collective known…
-
The Agentic AI Security Adoption Matrix: Autonomy Scales Where Control Exists
Agentic AI is crossing a threshold. It is no longer just generating content or answering questions. It is beginning to plan, decide, and execute actions across tools, systems, and workflows….
-
August 2026 Patch Tuesday: Updates and Analysis
Exploited Zero-Day Vulnerability in Windows Ancillary Function Driver for WinSock CVE-2026-68820 is an Important elevation of privilege vulnerability affecting the Windows Ancillary Function Driver for WinSock and has a…
-
Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)
42Critical 355Important 1Moderate 0Low Microsoft addresses 398 CVEs in the eighth Patch Tuesday of 2026, with three zero-days, including one that was exploited in the wild. Microsoft patched 398 CVEs…
-
Password Spray Without Smart Lockout Blocking
A legacy Entra ID endpoint kept alive for Office 2013 clients lets attackers spray passwords past Smart Lockout, confirm valid credentials on MFA-protected accounts, and leave only partial logs behind.
-
Cisco Security’s Path to FedRAMP Certified Class D (High) and Zero Trust.
In an era where digital agility is synonymous with mission success, Cisco is proud to serve as a cornerstone of the U.S. public sector’s modernization journey. We recognize that government…
