Search: “ai industry”

5 stories in the last 24h

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll AI industry 9 Industry 5 AI safety & security 5 Phishing & fraud 2 AI policy 2 Ransomware 1 AI tools & infra 1 Data breach 1 Policy & legal 1

SeverityAll critical 0 high 2 medium 4 low 2 info 19

America’s cyber strategy overlooks the infrastructure that actually keeps the military moving

Op-ed argues US cyber strategy underweights Iranian threats to ports, rail, utilities and other commercial infrastructure sustaining military operations.

The author, a former Navy intelligence officer, argues that a prolonged Iran conflict means sustained Iranian cyber operations targeting many smaller systems like water utilities, manufacturers and transportation providers. He cites mapping of 130 documented techniques across five Iranian threat groups and warns destructive attacks such as wipers and ransomware could hit the defense industrial base. The piece urges defensive wargames now and flags the pause in CMMC implementation as particularly concerning.

CyberScoop10:00 UTC · 4h agoIndustry

The AI security question leaders should be asking instead

Gremlin security officer Frederic Bull argues AI has eroded the attacker-defender skill asymmetry while least-privilege controls remain essential for securing AI agents.

In a Help Net Security interview, Gremlin Security Officer Frederic Bull says AI has narrowed the expertise gap between attackers and defenders, enabling faster exploit discovery even by less-skilled actors. His team processed roughly nine times more vulnerabilities in the past year with unchanged staffing using LLM-based tooling, cutting time-to-remediate by about 5%. He argues least privilege, session-based RBAC via OIDC/OBO, and human-in-the-loop oversight remain the bedrock defenses for AI agents, and that hiring should favor engineers able to catch confidently wrong AI output.

Help Net Security05:30 UTC · 8h agoIndustry

CISO's Expert Guide to Agentic Pentesting for Websitesnew

A new free guide urges CISOs to adopt autonomous AI agents for continuous website pentesting as attackers weaponize vulnerabilities in about five days.

A free guide argues annual pentesting is obsolete, citing Verizon's 2026 DBIR finding that vulnerability exploitation starts 31% of breaches and Mandiant telemetry showing a roughly five-day average time-to-exploit versus a 43-day median patch time. It highlights agentic capabilities such as XBOW topping HackerOne's US leaderboard in 2025 and peer-reviewed agents exploiting 87% of one-day flaws unaided. The guide outlines vendor evaluation criteria, including provable work-item coverage, an independent validator agent, and browser-native operation, plus governance guardrails before production use.

The Hacker News10:50 UTC · 3h agoIndustry

Virtual Event Today: Attack Surface Management Summit

SecurityWeek's 2026 Attack Surface Management Summit runs today as a virtual event covering asset discovery, SBOMs, red teaming, and pen-testing.

SecurityWeek is hosting its fully virtual 2026 Attack Surface Management Summit from 11AM-3PM, focused on continuous asset discovery, prioritization, and risk reduction. Sessions cover proving exploitability, SBOM and AIBOM software supply chain risk with Dr. Allan Friedman, demos from Wiz and Horizon3's NodeZero, and the roles of red teaming, bug bounty, and penetration testing in enterprise defense.

SecurityWeekSep 16, 14:35 UTC · 23h agoIndustry

How MSSPs Can Prove Their Value When “Nothing Happened”

ANY.RUN outlines how MSSPs can demonstrate SOC value by reporting investigation outcomes, threat patterns, and response metrics using its sandbox products.

ANY.RUN's blog argues MSSPs should report investigation outcomes, decision speed, and recurring threat patterns rather than raw alert counts. It cites company 2026 data: email accounts for 30.3% of MSSP sandbox submissions, and customers report 20% less Tier 1 investigation time and 30% fewer Tier 1 to Tier 2 escalations. Frequently analyzed threat families include ClickFix, Sneaky2FA, EvilTokens, EtherHiding, and Kali365.

ANY.RUN08:15 UTC · 5h agoIndustry 3 sources