Security teams can efficiently incorporate AI applications into their workflow by following 12 practices, including visibility, risk understanding, and trust building.
AI dominated conversations at RSAC 2026 Conference, but new research reveals that cybersecurity professionals face mounting stress, widening skills gaps, and growing complexity — making the human factor more critical than ever.
Cybercriminals on platforms like Telegram and Discord are increasingly using emojis to signal, obfuscate, and coordinate malicious activity, bypassing keyword filters and complicating automated monitoring efforts.
A threat actor used AI-assisted automation to launch more than 500 malicious pull requests against GitHub repositories, compromising at least two NPM packages in a campaign tracked as 'prt-scan.'
Apple has broken with its usual patching practice by extending fixes for the DarkSword exploit chain to iOS 18 users who have not upgraded to iOS 26, following the tool's leak on GitHub on March 22.
Security vendor Noma disclosed 'GrafanaGhost,' an indirect prompt injection vulnerability in Grafana's AI assistant that could silently exfiltrate user data. Grafana has since patched the underlying image renderer flaw.
Russia's APT28 has been silently intercepting internet traffic at government and critical infrastructure targets worldwide since at least 2024, exploiting old bugs in SOHO routers and tweaking a single DNS setting to steal credentials.
Chainguard has launched Factory 2.0, a rebuilt platform that uses agentic reconciliation bots and a controller/reconciler model to continuously harden open source artifacts across containers, libraries, GitHub Actions, and AI agent skills.
Pluralsight has unveiled SecureReady, an end-to-end security skill development platform combining on-demand content, hands-on labs, and expert seminars to help organizations build operationally ready cybersecurity teams.
Niobium has unveiled The Fog, a private cloud infrastructure platform that keeps data encrypted throughout computation using fully homomorphic encryption. The platform enters private beta now, with a public launch targeted for late Q2 2026.