News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
EU Auditors Warn Information-Sharing Gaps Are Hindering Cyber Incident Response (opens Infosecurity Magazine in a new tab)
The EU Court of Auditors has criticized EU shortcomings in responding to major cyber incidents
-
Okta bets on identity to control AI agents, but is identity enough? (opens CSO Online in a new tab)
Concerns over agentic risks are rising, and identity and access management (IAM) giant Okta believes it’s making the moves of a would-be leader in this emerging cyber market. “Identity is the primary control plane for securing AI,” said Okta CEO and co-founder Todd McKinnon in an earnings call in...
-
AI malware just removed the human from the attack loop (opens CSO Online in a new tab)
Attackers using AI have greatly benefited when it comes to speed and scale, and now, says Cisco Talos, the technology has evolved to execute large portions of the attack chain entirely without human involvement. Researchers at the threat intelligence group have identified what they call the first...
-
Relays Are Masking Chinese Access to Frontier AI Models in the US (opens Dark Reading in a new tab)
More than 80,000 AI relay servers are helping users in China mask their identities while they access cutting-edge large language models (LLMs), probably to clone them.
-
How the CISO-CMO Alliance Builds Trust Before Crisis Strikes (opens Dark Reading in a new tab)
Cybersecurity and brand reputation are inextricably linked. Security and marketing leaders who establish regular touchpoints, develop joint crisis communications plans, and translate security risks into their brand impact position their organizations to significantly outperform those treating...
-
Microsoft’s EvilTokens takedown sheds light on state of AI-powered cybercrime (opens CSO Online in a new tab)
Microsoft has hailed its success in disrupting EvilTokens, an AI-powered a phishing-as-a-service (PhaaS) platform linked to more than 12,000 compromised Microsoft 365 inboxes across more than 10,000 organizations worldwide. Since February 2026, EvilTokens has offered a subscription platform...
-
Microsoft Disrupts EvilTokens Device Code Phishing Service (opens Dark Reading in a new tab)
Microsoft seized 50 websites and disabled more than 150 domains as part of a coordinated disruption effort against a phishing-as-a-service platform targeting Microsoft 365 accounts.
-
Deception by Design: CISA's Guide to Tricking Cybercriminals (opens Dark Reading in a new tab)
The Cybersecurity and Infrastructure Security Agency (CISA) is going old school to help organizations with limited resources set traps for hackers.
-
I Gave My Life Over to Meta’s A.I. Agent and Was Blown Away (opens NY Times in a new tab)
Muse, Meta’s A.I. agent, helped handle my dental insurance, booked dinner reservations and created a podcast for me. It also required my most personal data, and trust.
-
Anthropic Releases a New A.I. Model, Opus 5.5, Amid Safety Debate (opens NY Times in a new tab)
The company released a cheaper, faster model that it said was the strongest performer on its most rigorous internal safety tests to date.
-
Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real (opens Dark Reading in a new tab)
As more reports of misalignment incidents underscore AI risks, large AI labs, regular businesses, and even nations are searching for better ways to keep control and be secure.
-
The Big Threat Has Been Climate Change. Now Comes A.I. (opens NY Times in a new tab)
Both are human-caused, both are frightening, and one of them has raced to the forefront of the global conversation.
-
Z.ai disables coding assistant feature after flaw exposed enterprise code upload risk (opens CSO Online in a new tab)
Chinese artificial intelligence company Z.ai had to disable several features of its ZCode coding assistant this week after a default setting was caught sending users’ local code repositories to Alibaba Cloud servers in China without their consent, raising fresh concerns for enterprises over how AI...
-
NCSC talks up agents for cyber defense – but there's an 'inconvenient truth' businesses need to accept (opens IT Pro in a new tab)
Cyber defenders need to identify the lowest-risk actions that can be automated before making decisions about adoption
-
NCSC talks up agents for cyber defense – but there's an 'inconvenient truth' businesses need to accept (opens IT Pro Security in a new tab)
Cyber defenders need to identify the lowest-risk actions that can be automated before making decisions about adoption
-
North Korean Attackers Hit 30,000 Devices and Steal $10.7m (opens Infosecurity Magazine in a new tab)
WaterPlum compromised 30,000 devices and took funds or credentials from 7000 crypto wallets
-
Huawei reiterates its commitment to open source standards at Connect 2026 (opens IT Pro in a new tab)
The Chinese IT giant is the latest to declare open source a key element of AI
-
AI Incident Response Readiness Lags Behind AI Adoption, ISACA Finds (opens Infosecurity Magazine in a new tab)
A new report by ISACA found that 71% of orgs have not run AI incident response exercises as teams face rising pressure
-
Workers are being told to use AI, but not why to use it (opens IT Pro in a new tab)
A Culture Amp survey shows workers are eager for AI tools, but they'd like to know the business goal of the technology
-
More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds (opens Dark Reading in a new tab)
Industrial companies are increasing cybersecurity investment as connected operations, AI adoption, and IT/OT convergence expand operational risk.