Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Most organizations now have an AI policy on paper. Far fewer can tell whether employees follow it. According to ISACA, 25% of organizations have no AI policy at all, and only 38% of those with one describe it as formal and thorough. Meanwhile, employees keep pasting, uploading, and delegating work to AI tools, both generative and agentic. Cyberhaven Labs found that 39.7% of employee interactions with AI tools involve sensitive data.

Schools depend on technology for nearly every part of their day-to-day operations, from classroom learning and communications to administrative systems. That makes the recent cybersecurity incident affecting Garden Valley School Division in Manitoba another important reminder that educational institutions need to be prepared for cyber disruption.

Every API security evaluation reaches the same objection: “We already run SAST and DAST.” The objection is fair. Static Application Security Testing (SAST) reads source code before release. Dynamic Application Security Testing (DAST) probes a running application from the outside. Both belong in continuous integration and continuous delivery (CI/CD) pipelines. Both also struggle with the two Application Programming Interface (API) flaws that matter most.

Short answer: GDPR does not require personal data to stay in the EU. It lets data leave only with a valid transfer mechanism. Data residency for LLMs comes down to three options: use the EU region of a hosted API, tokenize before the API call, or run the model yourself. Only the third keeps data out of the US in the literal sense. A procurement lead at a European customer sends your team a one-line requirement: “keine Daten in die USA.” No personal data in the United States.

Software supply chain attacks are on the rise, and naturally taking the headlines. But with the rise of localized models and common software embedded into smart “things”, risks may even be hidden in plain sight – or, in some cases, quite literally watching you. Vulnerabilities and malicious packages may extend risks to the unlikeliest of places, demanding change and accountability in even some well-intended innovations.

We handed four vibe-coding tools (Emergent, Replit, Lovable, Base44) the same prompt for a FastAPI user-management microservice. The spec was explicit: JWT auth, parameterized queries, rate limiting, four-tier role model with per-endpoint scope. Each tool shipped a build, and our flagship autonomous pentest surfaced 137 confirmed vulnerabilities across all four.

You shipped an app in a weekend. The AI wrote the login, the dashboard, and the database layer, and everything works, but it’s far from safe. With 0 logins, an attacker can forge admin invitations, alter audit logs, and change other users’ passwords. The guy is just swimming freestyle through your entire app stack. This is just one of the 137 vulnerabilities we found in vibe-coding across the top 4 platforms.

Fraudsters are exploiting the increased public interest in prediction markets such as PolyMarket and Kalshi, according to researchers at Recorded Future. Criminal groups known as “traffers” are providing fellow crooks with “websites, administrative panels, cryptocurrency payment infrastructure, victim-management capabilities, technical support, and promotional guidance” to target users of prediction markets.

When Claude Cowork executes code locally, it runs inside an isolated virtual machine on the user's computer. On the host, that VM runs as a single opaque process: The agent's activity inside the VM, including the processes it spawns, the packages it installs, and the network connections it makes, is not visible to the host's endpoint security sensor. Because host folders can be mounted into the VM, sensitive data can sit within the agent's reach.

I am delighted to announce CrowdStrike’s intent to acquire Fiddler at Fal.Con EU 2026. Fiddler, a leader in AI observability, will help ensure enterprise AI agents act as intended with pre-deployment evaluation and continuous behavioral monitoring as part of the CrowdStrike Falcon platform. Every business deploying AI agents asks the same questions: What are our agents doing? Are they staying on task? Are they acting in a way that could put the business at risk?