Zero Trust Security

Fran Hutchings | Friday, 13 March 2026 at 09:21 UTC Note: This is a guest post by pentester Julen Garrido Estévez (@b3xal). 1. Acknowledgements This article is based on the…

CompTIA’s SecAI+ is the newest certification designed specifically for AI security professionals, and interest around topics like CompTIA SecAI+ salary is already emerging, even though the certification itself is brand…

Infostealers targeting macOS have continued to proliferate over the last two years, with threat actors iterating on successful techniques across related malware families. Researchers at Moonlock, Jamf, and Malwarebytes have…

Prompt injection is among the defining security challenges of the AI era. As organizations move from chatbots to AI agents, adversaries are finding more ways to manipulate the language, context,…

Varonis Threat Labs discovered a critical vulnerability in Google Cloud Platform’s (GCP) Dialogflow CX service, Google’s flagship conversational AI platform for building interactive experiences across voice and text chatbots. We’ve…

Okta Threat Intelligence is tracking a large-scale phishing campaign that has impersonated at least a dozen service providers that specialize in hotels and vacation rentals.  In these attacks, targeted users…

Cloud security posture management (CSPM) is being redefined as two forces collide: Cloud environments are becoming more interconnected—spanning workloads, identities, data, APIs, and development pipelines—while security teams must reduce risk…

Cloudflare Workflows allows you to build durable, multi-step applications with built-in retries and state persistence across long-running processes. When a Workflow executes, each step can call external systems, retry failures,…

Security teams have spent 20+ years drowning in alerts, and the average breach still goes undetected for 241 days. Here’s why. This is the first in a series of guest…

Most software composition analysis tools read what developers declare. Insignary Clarity’s patented binary-first platform analyzes what is actually built, shipped, and deployed — including the open-source components that never appear…