30
30
UNISOC joins Google's Android Ready SE Alliance to deliver secure solutions to the Android ecosystem
30
30
55
42
42
30
30
30
30
30
30
55
42
55
30
55
30
30
30
30
Cyberthreats are moving faster than SMBs: Readiness must accelerate
ESET's SMB Cyber Readiness Index 2026 finds 73% of SMBs adopting AI while 40% lack AI policy, and reports 3,000+ malicious AI agent skills.
ESET argues AI is accelerating cyberthreats while expanding the attack surface: its SMB Cyber Readiness Index 2026 found 73% of SMBs integrating AI and 40% of businesses lacking a proper AI policy. ESET analyzed 900,000 AI agent skills across popular repositories between March and May 2026, finding over 25,000 suspicious and more than 3,000 malicious skills that exfiltrate data, execute malware, or abuse prompt injection. The piece also cites AI-assisted reconnaissance, exploit development, and social engineering, plus PromptSpy, an Android spyware abusing Google Gemini at runtime for persistence.
25
12 Best CIEM Tools Compared (2026): Features & Pricing
Buyer's guide compares twelve CIEM tools; Microsoft discontinued Entra Permissions Management, while Tenable (Ermetic), CyberArk, and Wiz lead the 2026 scorecard.
The scorecard evaluates twelve cloud infrastructure entitlement management vendors on permission analytics depth, JIT enforcement, non-human identity coverage, pricing predictability, and bundle leverage. Tenable (Ermetic) leads at 4.70, followed by CyberArk and Wiz, while Microsoft's retirement of Entra Permissions Management (CloudKnox) forces existing customers into migration cycles. Pricing structures span per-identity, per-resource, per-workload, credit-based, and quote-based models.
18
How AI and cybersecurity are reshaping ServiceNow
Analysis argues ServiceNow's $7.75B Armis acquisition and AI-driven consumption pricing are reshaping its ITSM platform amid SaaS market anxiety.
CSO Online examines how AI agents, vibe-coding fears, and a reported 30% share price drop are pressuring ITSM leader ServiceNow, and how the company is pivoting toward consumption-based revenue and cybersecurity. The piece highlights ServiceNow's $7.75 billion cash acquisition of Armis, priced at roughly 23 times the vendor's $340 million annual revenue, as a strategic move to supercharge ITSM workflows with accurate device inventory and orchestration rather than to sell a standalone security product. Experts note this ends Armis's vendor-neutral position, introduces the CISO as a new buyer, and will likely lead to aggressive Armis bundling at contract renewals.
45
Post-quantum cryptography adoption and the national security implications
Opinion analysis argues quantum computing favors nation-state espionage, leaving lagging post-quantum adoption at critical infrastructure exposed to harvest-now-decrypt-later attacks.
A CSO Online opinion piece argues that the extreme cost and infrastructure requirements of quantum computers will concentrate cryptographically relevant quantum capability among nation-states and a few corporations, favoring espionage and economic espionage over criminal monetization. It highlights harvest-now-decrypt-later risk to long-lived secrets, expert warnings such as Filippo Valsorda's, and diverging CRQC timelines with Google suggesting possibly 2029. The piece predicts governments, banks, and targeted sectors will adopt PQC first while utilities, small hospitals, and local government lag, widening exploitable gaps in critical infrastructure reminiscent of Salt Typhoon-style access.
32
How to secure hybrid meeting rooms without sacrificing user experience
Sponsored Barco piece, citing IDC data, says security is now the top videoconferencing purchase criterion as NIS2 and Cyber Resilience Act compliance pressures mount.
The sponsored article cites IDC research showing security (31%) now outranks price (26%) and quality (25%) as the top videoconferencing purchase criterion. It highlights concerns like malware propagation (47%), missed patches (39%), and risky user behavior (37%), and references NIS2, the Cyber Resilience Act, the Radio Equipment Delegated Act, and ISO/IEC 27001. Barco ClickShare marketing director Yannic Laleeuwe argues security is now a prerequisite for market access and resilience, but warns that usability tradeoffs drive risky workarounds.
12
What do CISOs need to rest easy about future AI risks?
IANS survey of 113 CISOs finds optimism about managing future AI security risks hinges more on organizational readiness and leadership support than current controls.
An IANS AI Security Survey of 113 CISOs fielded in April and May found 41% optimistic and 38% pessimistic about their organization's ability to manage AI security risks over the next 24 months. Six organizational signals—leadership understanding of AI risk, defined governance ownership, security team effectiveness with AI tools, CISO ownership of the AI-security budget, sustainable workloads, and staffing—separate confident CISOs from pessimistic ones. Interviewed analysts cautioned that these readiness signals measure self-assessed confidence rather than actual security, and recommended hands-on AI use by security teams plus governance of third-party models.
30
Triage & Response Bottlenecks Eating into MSSP Margins: How to Remove the Friction
ANY.RUN says manual triage bottlenecks erode MSSP margins and promotes its Threat Intelligence Lookup and sandbox to cut Tier 1 workload by up to 20%.
Vendor blog post from ANY.RUN describes recurring MSSP triage and response bottlenecks: manual alert validation, unnecessary Tier 2 escalations, manual handoffs, outdated threat data, and disconnected tools. It cites a healthcare MSSP case study where the Tier 1 closure rate rose from 20% to 70% and false escalations dropped 34% after adopting its tools. The piece claims ANY.RUN can reduce Tier 1 workload by up to 20%, letting MSSPs absorb more clients without proportional headcount growth.
18
Production data in testing is still common, and Tricentis' CISO wants it gone
Tricentis CISO Erika Dean urges keeping production data out of test environments and describes red-teaming that caught a prompt injection gap.
In a Help Net Security interview, Tricentis CISO Erika Dean recommends keeping production data out of QA and testing environments, even in finance and healthcare, where weaker QA controls create risk. Her team red-teamed an agentic chatbot before launch, found a prompt injection gap, and held the release for a week until it was fixed. She says vendors who cannot explain data residency, retention, and model training use are disqualified regardless of product quality.
20
What Is a Website Attack Surface? A Beginner’s Guide to Reducing Risk
Sucuri's beginner guide explains how logins, plugins, APIs, and forgotten backups expand a website's attack surface and how to reduce that risk.
Sucuri published educational guidance explaining that login pages, contact forms, plugins, APIs, staging sites, and forgotten backups each add exposed components that constitute a website's attack surface. The article frames continuous attack surface reduction as a risk management practice for website owners. It is evergreen educational content rather than breaking incident news.
15
55
30
30
30
30
55
55
30
30