As a new AI-powered Web browser brings agentics closer to the masses, questions remain regarding whether prompt injections, the signature LLM attack type, could get even worse.

AI autonomy has redrawn the security battlefield. What was once human-versus-human is now AI-versus-AI, with both attackers and defenders wielding machine power. The surge in vulnerabilities—from prompt injections to model exploits—demands a renewed focus on offensive security.

Advanced fraud attacks surged 180% in 2025 as cyber scammers used generative AI to churn out flawless IDs, deepfakes, and autonomous bots at levels never before seen.

Contractors may wish to start planning now how they might implement the new proposed SP 800-172 controls. In addition, federal agencies may choose to begin implementing portions of the SP 800-172 controls in selected contracts, grants, or other agreements involving particularly sensitive data.

Today's identity security environment has evolved into a fast-moving tangle of human, machine, cloud, and Agentic AI identities, all making real-time access decisions across hybrid environments. Each identity may possess privileges, permissions, and entitlements – making quite the mess for IT.

The FDA has long been associated with drug approvals and food safety, but its role in regulating medical technology is just as critical. In recent years, the FDA has raised concerns about unsecured healthcare software, a problem that is growing as hospitals and clinics rely more on digital systems.

Hackers are now using spyware to attack WhatsApp and other messaging accounts. The new warning from America’s cyber defense agency puts WhatsApp account hacks front and center again. Do not lose your account — all users should check their security now.

Traditional identity systems were never designed for a hybrid AI-human world. "There's an assumption that we'll always know who's real. That assumption is disappearing quickly. If we don't stay ahead of this, everything from hiring and acquiring to voting and financial security could be affected."

Cybersecurity cannot rest on a single person, password, or team. It must be built on controlled, intelligent, and collective responses. Threat intelligence makes this possible; arming individuals with context, supporting stretched SOCs, and connecting organizations into shared defense ecosystems.

Cybercriminals are finding new ways to exploit technology and target your personal information—and retirees are increasingly at risk. With over 73 million Americans aged 65 and older, the threat is real and growing. Don’t let fraudsters take advantage—stay informed and protect what matters most.

In a mixed economic environment, how are cybersecurity budgets competing among business priorities, and what may be ahead for 2026?

Businesses are increasingly embracing Managed Security Services to tackle the escalating intricacies of cyber threats. Numerous organizations are opting for external cybersecurity providers to assist in risk management and ensure uninterrupted business operations.

In October, ransomware incidents targeting the healthcare sector surged by 67%, underscoring a mounting risk to patient information and the continuity of operations.

As threats grow more sophisticated, agentic AI helps cybersecurity teams work smarter by handling routine tasks and helping junior analysts level up more quickly. What do you think? Will AI be a helper or a pain?

Did you know that while the 7 elements of a compliance program apply across all industries, they originated in healthcare in the 1990s? Despite being 25+ years old – and not necessarily having been adopted to tackle the same issues – many orgs still use the 7 elements in their original format.

AI is changing the game, but there’s one risk even major insurers aren’t ready to take. The Financial Times reports that leading insurance providers are urging U.S. regulators to let them exclude AI-related liabilities from corporate policies.

From pacemakers to patient portals, modern health care systems are increasingly reliant on connected technologies. However, innovation can make health care systems vulnerable to sophisticated cyberattacks, threatening not only data but patient lives.

Automation is rewriting early-career cybersecurity work, raising urgent questions about how the next generation of security professionals will gain real-world expertise.

Did you know ‘Ghost in the Shell’ is celebrating its 30th anniversary this week? Long before the internet became part of everyday life, this iconic anime envisioned a world where AI, cyber-espionage, and digital identities blur the line between human and machine.

CVE-2025-13223 is a flaw in the Chromium V8 JavaScript engine that poses significant risks to users worldwide, potentially enabling remote code execution and data breaches. Discovered and patched by Google on November 19, 2025, the issue affects Chrome versions before 131.0.6778.72.

The House just advanced the PILLAR Act, which aims to strengthen vital grant support for defending not only IT but also OT and AI-enabled systems. While funding levels aren’t finalized, this marks a significant step in helping public sector organizations protect their data and infrastructure.

Researchers warn that a critical vulnerability in Fortinet FortiWeb is under active exploitation, amid criticism that the company issued a silent patch for the flaw in late October.

Cybercriminals are leveraging bulletproof hosting providers to evade law enforcement and target critical sectors. In response, the NSA, CISA, and partners have released the “Bulletproof Defense” CIS, delivering recommendations for ISPs and network defenders to counteract these threats.

The “All of Us” database contains the personal health data of more than 1 million people, including electronic health records and genomic data.

Big changes could be on the way for telecom security. This Thursday, the FCC will vote on whether to roll back key cyber rules that required telecom carriers to proactively protect their networks under CALEA. Carriers may soon be left to self-regulate how they prevent and report unauthorized access.

Anthropic's announcement of the world’s first AI-led hacking campaign prompts both alarm and scepticism among experts.

While the primary work in healthcare often takes place on the operating table or in the doctor’s office, an overlooked aspect involves what’s happening in the backend systems. That’s where artificial intelligence (AI) comes into play, serving as an enhancer to the healthcare industry.

Consumer biodata may be entering a regulated era. Is the wearable industry ready to meet it?

As cloud providers, AI innovators, and SaaS platforms expand into healthcare, they’re facing HIPAA compliance head-on—often for the first time. Even the most experienced legal teams can be caught off guard by healthcare’s complex regulatory landscape. Is your organization ready for the challenge?

The line between humans and machines in digital spaces is becoming increasingly blurred. NHIs, including AI agents, bots, and machine-generated tokens, are rapidly becoming the new digital workforce. Currently, 35% of businesses have adopted NHIs, and over 70% plan to implement this tech soon.

Who’s really behind your logins? As AI agents and machine identities enter the digital workforce, the boundaries between human and non-human actors are rapidly fading. Today, 35% of organizations are leveraging NHIs—and with over 70% planning to join them, the risk landscape is changing rapidly.

Threat actors are actively exploiting multiple Cisco vulnerabilities for which patches were previously issued in August; however, attacks are ongoing, including attacks on devices that have been improperly patched

As the distinction between physical and digital systems becomes increasingly blurred, the importance of physical-cyber convergence grows. In recent years, around 70% of Australian businesses have adopted at least one AI tool and a majority have leveraged some form of cloud service.

The debut of IVP is more than an addition to a Hype Cycle – it’s a wake-up call. Enterprises can no longer afford to operate on blind faith that their identity tools are functioning as intended.

The future of cybersecurity will center on resilience — the capacity to detect, contain and recover from incidents as they unfold. Continuous response represents a step in that direction. It reframes defense not as a sprint to the next alert but as an ongoing cycle of readiness.

Have you ever wondered how heavy reliance on AI could impact your team's critical thinking? MIT research reveals that occasional AI use may not dull problem-solving, but overdependence can gradually erode these essential skills.

Check out these four tips from experts on how hospital leaders can prepare for cyberattacks and what to consider when developing cyber plans.

As connected medical devices become increasingly complex, cybersecurity has emerged as a fundamental element of patient safety and regulatory compliance. At the CySecMed 2025 conference, Deloitte experts explored how resilience can be built into every stage of the device lifecycle.

The security gap between financial-services firms and their vendors highlights a major third-party risk facing the financial sector, which generally outperforms other sectors on cybersecurity but is still exposed to the failures of its suppliers.

Recent research indicates that exposing AI chatbots to external tools and systems, a key requirement for building AI agents, expands the attack surface by presenting more avenues for threat actors to conceal malicious prompts that are ultimately parsed by models.

As organizations worldwide look ahead to future challenges, cybersecurity must move from the background to the forefront of our preparedness strategies. Building secure, ethical, and resilient AI isn’t optional—it’s essential for earning trust and driving real impact.

Think your browser is safe? Think again. With rapid releases, evolving AI agents, and advanced tracking, AI-powered browsers are creating new—and often hidden—cybersecurity risks. Is your organization prepared to defend against the next wave of threats?

The Computer Weekly Security Think Tank considers the burdens and responsibilities that accompany the role of chief information security officer, and share guidance on how to navigate a challenging career path.

The healthcare system in the United States is facing unsustainable costs, and yet it is also on the precipice of incredible transformation. Sitting at the center of all this turbulence is a complex legal, political, and regulatory landscape poised for disruption.

Companies left them for dead, but the remnants of old infrastructure and failed projects continue to haunt businesses' security teams.

The Secure by Design initiative, launched by the Cybersecurity and Infrastructure Security Agency (CISA) in 2023, urges technology vendors to prioritize customer security and reduce exploitable flaws at the source.

The Cybersecurity and Infrastructure Security Agency and the National Security Agency on Thursday unveiled a best-practices guide to help organizations address security issues with their on-premises Microsoft Exchange Servers.

The old way of doing fax with racks of servers, expensive telecom lines, and constant maintenance just doesn’t fit the way modern organizations operate. It slows teams down and piles on costs. That’s where cloud faxing changes the game.

Security and business leaders warn that companies are accelerating their use of agentic AI beyond the ability to maintain proper guardrails.

Is your organization clear on how much cyber risk it’s willing to accept? As cyber threats become increasingly complex, defining your risk appetite is crucial for an effective defense. Risk appetite goes beyond compliance—it’s about aligning protection with your enterprise’s strategic priorities.