Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What happens when Keeper Security, a production company and Atlassian Williams F1 Team driver Alex Albon enter a studio? Watch to find out.

AI agents are creating a new penetration testing risk when they act beyond the tester’s intent and leave messy accountability behind. Once an agent touches email, tickets or workflows in a user’s name, legal, forensic and control problems start stacking up fast.

The FBI just issued a FLASH alert on TeamPCP — the group behind a wave of software supply chain attacks that compromised widely-used developer and security tools, harvesting cloud credentials, SSH keys, and Kubernetes secrets at scale. Tova Dvorin and Adrian Culley break down how TeamPCP operates with an APT's patience, and the open question the FBI alert doesn't answer: is a nation-state pulling the strings? Full breakdown on The Cyber Resilience Brief.

A criminal crew with APT-grade patience is trojanizing the very tools defenders trust. Host Tova Dvorin sits down with Adrian Culley to break down FBI FLASH-20260702-01 (coordinated with CISA) on TeamPCP — the group compromising Trivy, KICS, LiteLLM, and the Telnyx SDK to sit inside CI/CD pipelines. Inside: the CanisterWorm and SANDCLOCK credential stealers, the self-replicating "Mini Shai-Hulud" worm across npm and PyPI, npm account takeovers via expired recovery domains, and five concrete defenses — starting with searching your GitHub org for "tpcp-docs" right now.

Human in the loop AI security is failing because analysts are asked to review machine-speed output at human speed. AI now produces too many alerts, findings and decisions for manual review to remain the main safety control in modern cyber defence.

Intel Chat with Matt Bromiley and Chris Luft. Matt and Chris break down four stories from the week in threat intel: Chapters: The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly. Subscribe wherever you listen.

In this week's SecurityScorecard Weekly Brief, Brandon Torio explains how leading security organizations are moving beyond annual vendor reviews and enforcing security standards continuously. Instead of waiting for the next assessment cycle, mature security teams are defining clear security policies, and automatically identifying when vendors fall out of compliance. With Driftnet and TITAN Secure, organizations can.

Shadow AI is already inside many companies through unapproved AI tools, local LLMs and public AI apps used without oversight. That creates data security, governance and compliance risk because the business often has no clear view of what is being used or where sensitive information is going.

Learn how to convert a physical Linux machine to a VMware ESXi virtual machine using two proven physical-to-virtual (P2V) migration methods. In this step-by-step tutorial, you will see how to migrate an Ubuntu 24.04 LTS physical server to VMware ESXi using: These methods allow you to safely migrate physical Linux systems to virtual infrastructure for modernization, disaster recovery, hardware replacement, or virtualization projects.

Learn how to convert a physical Linux machine to a Hyper-V virtual machine using a backup with NAKIVO Backup & Replication. In this step-by-step tutorial, you will see how to back up an Ubuntu Linux physical server and export the backup as a Hyper-V VHDX virtual disk, allowing you to quickly perform physical-to-virtual (P2V) migration and restore workloads to a virtual environment. This method is useful for.