Application security and coding requirements

Sweden boosts cyber threat security defences amid AI advances

Sweden is strengthening its national security defences against cyber attacks Continue Reading

By

• Gerard O'Dwyer

Cyber authorities issue alerts over exploitation of Citrix vulns

The latest vulnerabilities to be uncovered in the frequently targeted Citrix NetScaler product lines were being exploited well before disclosure, prompting disquiet Continue Reading

By

• Alex Scroxton, Security Editor

Vast Data pitches confidential AI to APAC’s regulated industries

DataEnclave, due in the coming months, protects artificial intelligence models and sensitive data while they are processed on GPUs, with Australian neocloud Sharon AI among the cloud providers lined up to offer it Continue Reading

By

• Aaron Tan, Informa TechTarget

Australia sets up taskforce after OpenAI agent breaches statistics portal

Prime minister Anthony Albanese says OpenAI did not alert the government until almost three months after one of its AI agents got around blocks on a Medicare statistics portal, and even then only by emailing a public mailbox Continue Reading

By

• Aaron Tan, Informa TechTarget

Okta debuts agentic lifecycle management tools, AI kill switch

In the wake of a string of incidents involving badly managed AI agents, security firm Okta enhanced its year-old agentic services proposition with capabilities to securely manage agentic lifecycles Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft showcases AI-powered cyber defence tools at GISEC

The company highlights new security capabilities as businesses across the UAE look to secure growing artificial intelligence deployments Continue Reading

By

• Andrea Benito , Computer Weekly

Splunk Conf 26: Splunk hopes to build confidence in agentic AI

With trust in AI agents close to rock bottom in the popular imagination, Splunk and Cisco unveiled a series of platform enhancements designed to enhance observability and confidence in agentic AI Continue Reading

By

• Alex Scroxton, Security Editor

UK cyber shortfalls: A skills gap and/or a gender gap?

There is both a skills and gender gap occurring in UK cyber, says Code First Girls – something it is looking to remedy with an innovative partnership with Lloyds Banking Group Continue Reading

By

• Matthew Staff

AWS AI Symposium: Public sector must shape AI, use open source

As frontier models outpace cyber defences, two public sector voices set out different answers to the same security question – transparency and procurement leverage Continue Reading

By

• Antony Adshead, Datacentre and cloud editor (acting)

Patch Tuesday: Microsoft updates address almost 1,000 flaws

Microsoft has released another record-breaking Patch Tuesday update with almost 1,000 flaws in scope Continue Reading

By

• Alex Scroxton, Security Editor

US senator Bernie Sanders calls for ban on AI superintelligence

Two bills aimed at curbing the possibility of superintelligent AI systems, and regulating the use of agentic AI, are being introduced in the US Continue Reading

By

• Alex Scroxton, Security Editor

When the intern has admin rights: GDPR in the agentic age

The Security Think Tank explores the intersection of GDPR and artificial intelligence, considering how data protection standards in the UK and Europe are changing in this new paradigm. Continue Reading

By

• Javvad Malik, KnowBe4

Mythos helps bug bounty firm find critical hidden RCE

HackerOne used Anthropic’s controversial Claude Mythos 5 model on its codebase and found a critical hidden flaw Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Abby Kearns, ActiveState

ActiveState CEO Abby Kearns discusses open source’s ‘existential crisis’, how AI is changing the secure software playbook, and why it’s time to have a different conversation about open source security Continue Reading

By

• Alex Scroxton, Security Editor

Gartner: Deploy sandboxes to rein in AI agents

A string of mishaps is making sandboxing a priority for organisations deploying AI agents, but Gartner’s Manjunath Bhat warns that sandboxes are just one layer of defence Continue Reading

By

• Aaron Tan, Informa TechTarget

Mimecast CEO on why AI risk starts with the user

Ranjan Singh talks up the security supplier’s focus on human risk management, the behavioural data he believes rivals can’t match, and why having a local datacentre is a condition of doing business in APAC Continue Reading

By

• Aaron Tan, Informa TechTarget

NCSC tells organisations to have AI kill switches at the ready

In the wake of a series of cyber incidents involving AI agents, the NCSC has published interim guidance for operators of agentic systems, advising organisations retain the ability to pull the plug on AI systems entirely Continue Reading

By

• Alex Scroxton, Security Editor

Proofpoint launches AI security engineering centre in India

The security supplier is hiring over 200 engineers in Hyderabad to develop models that can interpret the intent behind the actions of AI agents, Proofpoint’s latest investment in a market where its business has tripled in a year Continue Reading

By

• Aaron Tan, Informa TechTarget

Apple addresses multiple WebKit vulnerabilities

Apple’s latest security updates address a swathe of WebKit vulnerabilities, many of them apparently discovered using OpenAI tools Continue Reading

By

• Alex Scroxton, Security Editor

South Korea's government overtakes telcos as top cyber attack target

Kaspersky researcher Sojun Ryu says ransomware crews have joined nation-state groups in going after South Korean organisations, as traces of LLM output start turning up inside malware Continue Reading

By

• Aaron Tan, Informa TechTarget

Mythos ran real-life supply chain attack in AI safety body test

Anthropic’s Mythos 5 has been caught orchestrating a real-world open source supply chain attack using social engineering techniques during a test run by the UK’s AI Security Institute Continue Reading

By

• Alex Scroxton, Security Editor

Nvidia-backed Open Secure AI Alliance puts AI security and sovereignty in focus for Middle East

Industry coalition aims to develop open tools for securing artificial intelligence systems, a model that could resonate strongly in the UAE and Saudi Arabia as governments and enterprises seek greater control over AI infrastructure, data and cyber risk Continue Reading

By

• Andrea Benito , Computer Weekly

Kaspersky to scan AI agents for backdoors as shadow AI spreads

The security supplier will release a tool this month that vets agent skills, models and artificial intelligence development components before they reach corporate networks to defend against threats from shadow AI Continue Reading

By

• Aaron Tan, Informa TechTarget

Amazon pins multiple open source compromises on North Korea

Amazon threat researchers found one threat actor behind four distinct open source compromises, including the March 2026 incident affecting the axios NPM library Continue Reading

By

• Alex Scroxton, Security Editor

Laundry Bear pivots to new exploit days after Zimbra alert

The NCSC and partners warned of a novel phishing technique being deployed against high-profile users of Zimbra’s Communication Suite, but the threat actor behind the campaign already seems to be moving on to new targets Continue Reading

By

• Alex Scroxton, Security Editor

Did an AI agent really break free and attack another company?

The reality of the AI-orchestrated cyber attack on Hugging Face is rather more complicated, and much more worrying, than it might appear at face value Continue Reading

By

• Dan Raywood

Russian APT Laundry Bear perfects zero-click phishing attack

A newly identified Russian state threat actor is using a novel zero-click phishing technique, likely developed with the help of an AI, to target Western users of Zimbra software products Continue Reading

By

• Alex Scroxton, Security Editor

Why embodied AI security extends beyond the robot

As AI moves into robots, autonomous vehicles and industrial systems, attackers are likely to target the credentials, cloud services and update channels that control them Continue Reading

By

• Aaron Tan, Informa TechTarget

Hugging Face ‘hacker’ was rogue OpenAI model

A hacker who broke into Hugging Face’s systems last week has been exposed as a pair of advanced OpenAI frontier models that were trying to cheat on an exam Continue Reading

By

• Alex Scroxton, Security Editor

Stop debating frontier AI – start defending against it

The Computer Weekly Security Think Tank considers if Anthropic’s Claude Mythos frontier AI model is a benefit or barrier to achieving resilient enterprise IT security, and how security leaders need to adapt. Continue Reading

By

• Mandy Andress, Elastic

Why bug bounty programmes are essential for cyber resilience

Periodic audits and one-off penetration tests offer only a snapshot of risk. Tapping a global community of security researchers through bug bounty programmes helps organisations find exploitable flaws before attackers do Continue Reading

By

• Craig Lawson

Chaotic July Patch Tuesday threatens to overwhelm defenders

Another mammoth Patch Tuesday update, likely topping 600 flaws in total, sends defenders into the weeds Continue Reading

By

• Alex Scroxton, Security Editor

Cyber field doubts promise of Cyber Shield

The NCSC has shared more details of its national AI Cyber Shield initiative, but experts say the project faces serious delivery challenges Continue Reading

By

• Alex Scroxton, Security Editor

European Central Bank demands AI security ‘action plan’

European Central Bank gives banks deadline to outline their plans to defend against artificial intelligence-based security threats Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

AI won't break your security, but your governance might

The Computer Weekly Security Think Tank considers if Anthropic’s Claude Mythos frontier AI model is a benefit or barrier to achieving resilient enterprise IT security, and how security leaders need to adapt. Continue Reading

By

• Chris Atkinson, PA Consulting

Breach of IBM-managed environment exposes personal data of 70,000 in Singapore

Unauthorised access to a development and testing environment managed by IBM has exposed the names, NRIC numbers and property addresses of about 70,000 people held by the Singapore Land Authority Continue Reading

By

• Aaron Tan, Informa TechTarget

US cyber agency warns over forgotten SharePoint flaw

An RCE vulnerability in Microsoft SharePoint that was mistakenly omitted from the May Patch Tuesday bulletin is being exploited in the wild, says Cisa Continue Reading

By

• Alex Scroxton, Security Editor

Singpass to roll out passkeys in fight against phishing scams

The passwordless feature will launch for iPhone users on 1 July 2026 with a device-bound model to avoid the security risks of cloud-synced passkeys Continue Reading

By

• Aaron Tan, Informa TechTarget

Why frontier AI must be stress-tested before CISOs trust it

The Computer Weekly Security Think Tank considers if Anthropic’s Claude Mythos frontier AI model is a benefit or barrier to achieving resilient enterprise IT security, and how security leaders need to adapt. Continue Reading

By

• Haris Pylarinos, Hack The Box

Secure Code Warrior CEO on surviving the AI ‘vulnerability apocalypse’

As enterprises embrace agentic AI and vibe coding, Secure Code Warrior CEO and co-founder Pieter Danhieux warns that code-generating models are still producing critical security flaws Continue Reading

By

• Stephen Withers

What frontier AI actually means for enterprise security

The Computer Weekly Security Think Tank considers if Anthropic’s Claude Mythos frontier AI model is a benefit or barrier to achieving resilient enterprise IT security, and how security leaders need to adapt. Continue Reading

By

• Rik Ferguson, Forescout

2026 World Cup billed as ‘largest entertainment attack surface in history’

With the tournament underway across North America, Palo Alto Networks warns that temporary supplier ecosystems, vulnerable municipal infrastructure and geopolitical tensions are creating risks for enterprises and fans Continue Reading

By

• Aaron Tan, Informa TechTarget

The truth about Claude Mythos is less dramatic than it seems

The Computer Weekly Security Think Tank considers if Anthropic’s Claude Mythos frontier AI model is a benefit or barrier to achieving resilient enterprise IT security, and how security leaders need to adapt. Continue Reading

By

• Ellie Hurst, Advent IM

Oracle fixes PeopleSoft flaw exploited by ShinyHunters

A zero-day vulnerability affecting Oracle’s PeopleSoft products is being exploited by a ShinyHunters campaign targeting schools and universities Continue Reading

By

• Alex Scroxton, Security Editor

Frontier AI models could be an adversary's force multiplier

The Computer Weekly Security Think Tank considers if Anthropic’s Claude Mythos frontier AI model is a benefit or barrier to achieving resilient enterprise IT security, and how security leaders need to adapt. Continue Reading

By

• Aditya K Sood, Aryaka

Established enterprise patching models dead in the water, says report

Vulnerability discovery and exploitation was surging dramatically even before Anthropic decided to unleash its frontier Mythos model. As such, an Action1 report finds old approaches to patching are no longer fit for purpose Continue Reading

By

• Alex Scroxton, Security Editor

Mythos is turning up the heat on risk, not rewriting the rules

The Computer Weekly Security Think Tank considers if Anthropic’s Claude Mythos frontier AI model is a benefit or barrier to achieving resilient enterprise IT security, and how security leaders need to adapt. Continue Reading

By

• Martin Riley, Bridewell

Microsoft smashes record for biggest ever Patch Tuesday update

Microsoft has obliterated the record for the largest ever Patch Tuesday drop, with its June 2026 update addressing approximately 200 flaws and three zero-days Continue Reading

By

• Alex Scroxton, Security Editor

Claude Mythos forces the conversation on defensive AI

The Computer Weekly Security Think Tank considers if Anthropic’s Claude Mythos frontier AI model is a benefit or barrier to achieving resilient enterprise IT security, and how security leaders need to adapt. Continue Reading

By

• John Bruce, Quorum Cyber

Infosecurity Europe 2026: AI turbo-charging cyber crime and response

AI is accelerating cyber attacks by criminals and hostile states, with attackers faster, more persistent and increasingly collaborative, say experts speaking at Infosecurity Europe 2026 Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Scottish residents granted permission for group action against Capita

People of Scotland given the go-ahead on group proceedings regarding the 2023 Capita cyber breach, in which the personal information of millions of people was stolen from Capita systems after a major cyber attack Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

AI agents help Cato slash ‘time-to-protect’ from new CVEs

The application of agentic AI to vulnerability management workflows has slashed mitigation times in experimental conditions, claims Sase specialist Cato Networks Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft hits out over irresponsible vulnerability disclosure

Microsoft goes on the offensive after a disgruntled security researcher unleashed a series of zero-days without checking in first Continue Reading

By

• Alex Scroxton, Security Editor

Glassworm botnet that targeted OS devs smashed to pieces

CrowdStrike, Google and the Shadowserver Foundation worked together to take down a botnet that poisoned over 300 GitHub repositories, risking widespread supply chain compromise Continue Reading

By

• Alex Scroxton, Security Editor

When your biggest security risk has never signed a contract

The Computer Weekly Security Think Tank considers the intersection of AI and IAM. In this article we explore how the frontiers of identity are expanding in the agentic era, and why this requires new approaches to governance. Continue Reading

By

• Lee Howells and Andrew Peel, PA Consulting

Vulnerability exploitation now primary origin of data breaches

Verizon’s annual cyber report reveals a major change in how data breaches originate, highlighting the impact of artificial intelligence Continue Reading

By

• Alex Scroxton, Security Editor

Can AI Apps Really Be Secure From Birth? Oh Yes (it's an Atsign of the times)

Timing and IT are not always aligned – spoiler alert: major understatement… How many times over the decades have we seen a wonderful technology looking for a problem to solve? Some are still out ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Generative AI is changing the game in video gaming

In this week’s Computer Weekly, we hear from executives at video game giant Ubisoft about how generative AI is being used to enhance the experience for gamers. Our latest buyer’s guide looks at the ways AI is changing network management. And we find out why bug bounty programmes are coming under scrutiny as cyber security experts question how best to report vulnerabilities. Read the issue now. Continue Reading

Microsoft releases rare zero-day free Patch Tuesday update

No zero-day flaws were addressed in May’s Patch Tuesday update but as usual there is much for admins to chew over in the coming days Continue Reading

By

• Alex Scroxton, Security Editor

ServiceNow Knowledge 2026: FedEx digital chief unpacks agentic AI’s potential

Speaking to Computer Weekly at ServiceNow Knowledge 2026, Vishal Talwar, FedEx’s executive vice-president and CDIO, lays out the company’s mission to scale artificial intelligence responsibly Continue Reading

By

• Ryan Priest

The Netherlands leads in quantum technology but lags on quantum security

The Dutch government has invested €615m to build a world-class quantum technology ecosystem, but many institutions have not started any quantum-specific preparations to protect themselves against the security threat Continue Reading

By

• Kim Loohuis

A new frontier: Identity stack evolves for agentic systems

The Computer Weekly Security Think Tank considers the intersection of AI and IAM. In this article, explore the changing nature of the identity stack and learn what will change as identity evolves into a real-time control plane for agentic systems. Continue Reading

By

• Aditya K Sood, Aryaka

ESET: Don’t fear the ‘AI Terminator’, but prepare for agent risks

While fully autonomous hacking bots remain a distant reality, an ESET expert warns that AI is quietly supercharging phishing schemes and creating new vulnerabilities inside organisations Continue Reading

By

• Aaron Tan, Informa TechTarget

ServiceNow Knowledge 2026: McDermott proclaims fully automated cyber defence

Chief executive’s conference keynote launches agentic artificial intelligence cyber security features for enterprise software player’s centralised platform Continue Reading

By

• Ryan Priest

CSA: Take AI cyber threats to the boardroom

Current cyber risk assumptions may no longer be valid given the speed of advanced AI, warns the chief executive of Singapore’s Cyber Security Agency Continue Reading

By

• Aaron Tan, Informa TechTarget

UK’s NCSC warns of ‘wave of patches’

Vulnerability discovery and mitigation continues to exercise the top minds at Britain’s NCSC as cyber experts continue to debate the impact of frontier AI models such as Mythos Continue Reading

By

• Alex Scroxton, Security Editor

Wiz founder: Hack yourself with AI, before the bad guys do

At Google Cloud Next, Wiz co-founder Yinon Costica called on security defenders to use AI to steal a march on threat actors, and launched agentic capabilities for cyber teams Continue Reading

By

• Alex Scroxton, Security Editor

Google launches Gemini Agent Platform, eighth-generation TPUs

With more AI agents moving to production, Google Cloud is targeting governance, multi-cloud data architecture and purpose-built silicon to help enterprises orchestrate agentic workflows Continue Reading

By

• Aaron Tan, Informa TechTarget

A tsunami of flaws: When frontier AI and Patch Tuesday collide

Microsoft’s April Patch Tuesday drop was the second-largest in history, falling just shy of an October 2025 record. What is behind the spike in vulnerability disclosures, and is there a connection to Anthropic’s bug-hunting Claude Mythos AI model? Continue Reading

By

• Alex Scroxton, Security Editor

Anthropic's Mythos raises the stakes for security validation

Letting probabilistic AI models autonomously operate inside production networks creates real safety and auditability issues, and that core security validation still needs deterministic guardrails. And Anthropic just raised the stakes. Continue Reading

By

• Amitai Ratzon, Pentera

Surging CVE disclosures force NIST to shake up workflows

NIST announces big changes to the way it categorises and manages CVEs, which are set to have a big impact on how organisations manage patching and remediation Continue Reading

By

• Alex Scroxton, Security Editor

Bank cyber teams on red alert as Anthropic promises them Mythos next week

Artificial intelligence supplier promises UK banks opportunity to review AI model, which has already revealed thousands of security flaws Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK businesses must face up to AI threat, says government

Technology secretary Liz Kendall urges Britain’s business community to sit up and pay attention to emerging AI threats, following the debut of Anthropic’s new frontier model, Mythos Continue Reading

By

• Alex Scroxton, Security Editor

April Patch Tuesday brings zero-days in Defender, SharePoint Server

Microsoft’s latest Patch Tuesday update may be one of the largest in history, with more than 160 issues in scope Continue Reading

By

• Alex Scroxton, Security Editor

AI agents are here. Are we ready for the security implications?

Agentic AI adoption may be surging, but security is lagging behind and its fundamental principles need to be intelligently re-scaled for a non-deterministic world Continue Reading

By

• Shiv Ramji

Lloyds admits coding fault exposed customer transactions

The bank has responded to the Treasury Committee’s request for information on a major data breach in its banking app Continue Reading

By

• Cliff Saran, Managing Editor

Emergency Microsoft, Oracle patches point to wider cyber issues

Emergency out-of-band patches from Microsoft and Oracle signal underlying security issues around update cycles and patching, and identity security and zero-trust, says the community Continue Reading

By

• Alex Scroxton, Security Editor

Why AI agents are one prompt away from ransomware

As AI adoption advances beyond chatbots, security leaders are up against rogue AI agents mirroring threat actors and a generational skills gap as security operations teams become overly dependent on AI Continue Reading

By

• Stephen Withers

Cyber pros must grasp the vibe coding nettle, says NCSC chief

At RSA in San Francisco, NCSC chief exec Richard Horne says security professionals have an opportunity and a responsibility to get in front of the security issues raised by the popularity of ‘vibe coding’ Continue Reading

By

• Alex Scroxton, Security Editor

Cyber platformisation is a skills issue for security teams

The Security Think Tank looks at platformisation, considering questions such as how CISOs can distinguish between a truly integrated platform and 'integration theater, and how to protect unified platforms. Continue Reading

By

• Haris Pylarinos, Hack the Box

AI makes debut in Bridewell cyber security in CNI report

Regulation has superseded cyber threats as the main driver of cyber security spending, and AI has made its debut for attack and defence, according to a CNI-focused report from Bridewell Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Gartner: Ditch ‘big transformation’ cyber strategies for continuous improvement

As artificial intelligence reshapes the enterprise, CISOs must abandon risky big bang security transformation initiatives in favour of incremental changes to build cyber resilience Continue Reading

By

• Stephen Withers

Beyond integration theatre: Building stronger cyber platforms

The Security Think Tank looks at platformisation, considering questions such as how CISOs can distinguish between a truly integrated platform and 'integration theater, and how to protect unified platforms. Continue Reading

By

• Joe Mayhew and Ahmed Tikail, PA Consulting

Companies House restarts online services following cyber breach

Companies House was forced to pull its WebFiling service offline at the weekend after it emerged that a flawed update was putting data at risk of exposure Continue Reading

By

• Alex Scroxton, Security Editor

Vulnerability reports: Increase in quantity, decrease in quality?

Bug bounties have become a staple of the cyber security toolkit, offering researchers a way to get paid to find and report bugs and giving businesses a route to fix unknown flaws. However, this model is now facing scrutiny. What is driving these concerns? Continue Reading

By

• Dan Raywood

Microsoft patches zero-days in .NET and SQL Server

Zero-days in .NET and SQL Server, and a handful of critical RCE bugs, form the nucleus of Microsoft’s March Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

WA auditor general flags weak Microsoft 365 security controls across state entities

Western Australia’s Office of the Auditor General has uncovered weaknesses in M365 configurations across seven government agencies, leading to compromised accounts and data breaches Continue Reading

By

• Aaron Tan, Informa TechTarget

APT36 unleashes AI-generated ‘vibeware’ to flood targets

The Pakistani threat group has been using AI to rewrite malicious code across multiple programming languages, prioritising scale over sophistication to evade detection, security researchers have found Continue Reading

By

• Aaron Tan, Informa TechTarget

Platformisation without illusion: Separating integration from theatre

The Security Think Tank looks at platformisation, considering questions such as how CISOs can distinguish between a truly integrated platform and 'integration theater, and how to protect unified platforms. Continue Reading

By

• Aditya K Sood, Aryaka

Spyware suppliers exploit more zero-days than nation states

Exploitation of zero-days by commercial surveillance and spyware developers outpaced exploitation by nation-state actors last year, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Zero-day in Android phone chips under active attack

Google and Qualcomm have tag-teamed a serious vulnerability in the chipsets used in Android mobile devices, which has been exploited in the wild as a zero-day Continue Reading

By

• Alex Scroxton, Security Editor

Open cyber standards key to cross-platform integration

The Security Think Tank looks at platformisation considering questions such as how CISOs can distinguish between a truly integrated platform and 'integration theater, and how to protect unified platforms. Continue Reading

By

• Stephen McDermid, Okta

CrowdStrike touts agentic SOC to tackle security woes

By embedding AI agents across its platform, CrowdStrike is looking to help security teams automate repetitive security tasks, enabling them to focus on complex and stealthier threats that could slip under the radar Continue Reading

By

• Aaron Tan, Informa TechTarget

Cisco Catalyst SD-WAN users targeted in series of cyber attacks

The NCSC, Cisa, and other Five Eyes agencies have warned of mass exploitation of vulnerabilities in Cisco Catalyst SD-WAN, which Cisco is attributing to an unknown threat actor called UAT-8616 Continue Reading

By

• Alex Scroxton, Security Editor

Application exploitation back in vogue, says IBM cyber unit

IBM’s X-Force unit observes an uptick in the exploitation of vulnerable public-facing software applications Continue Reading

By

• Alex Scroxton, Security Editor

How AI code generation is pushing DevSecOps to machine speed

Organisations should adopt shared platforms and automated governance to keep pace with the growing use of generative AI tools that are helping developers produce code at unprecedented volumes Continue Reading

By

• Stephen Withers

Why crypto agility is key to quantum readiness

With quantum computing threatening current encryption standards, experts call for organisations to achieve crypto agility by managing the lifecycle of certificates and cryptographic keys through automation Continue Reading

By

• Aaron Tan, Informa TechTarget

PromptSpy Android malware may exploit Gemini AI

A newly uncovered malware targeting the Android operating system seems to exploit Google’s Gemini GenAI tool to help it maintain persistence Continue Reading

By

• Alex Scroxton, Security Editor

Flaws in Google and Microsoft products added to Cisa catalogue

Cisa has added six CVEs to its Kev catalogue this week, including newly disclosed issues in Google Chromium and Dell RecoverPoint for Virtual Machines, and some older flaws as well Continue Reading

By

• Alex Scroxton, Security Editor

Generative and agentic AI in security: What CISOs need to know

AI is introducing new risks that existing evaluation and governance approaches were never designed to manage, creating a widening gap between what AI-backed security tools promise and what can be realistically controlled. Continue Reading

By

• Avivah Litan, Gartner