Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI is becoming part of everyday work. Employees rely on services such as ChatGPT and Claude to research, create, and solve problems, while developers increasingly use AI-powered tools like Cursor and coding agents in their development workflows. As employees increasingly rely on AI to work more productively, the AI experience is becoming a critical part of the digital experience IT teams are expected to support.

Eight eMudhra intermediate certificate authority (CA) private keys were compromised after being generated with insufficient randomness. Attackers could use these keys to forge certificates and impersonate legitimate websites or services to clients that still trust them. An attacker able to intercept a connection could potentially read or modify sensitive traffic.

This article is part of an ongoing series from Sophos frontline security operations specialists, sharing the expertise they use to strengthen our industry-leading Managed Detection and Response (MDR) service and defend customers against evolving AI-era threats. Every physical penetration test starts with the same quiet hope: that somewhere, between the polished lobby, the badge readers, the CCTV domes, and the confident hum of office life, there is a tiny gap no one has noticed.

Prompt injection started as a simple idea during its initial chatbot phase: Tell the model to ignore its instructions and return information in violation of its guardrails. Now, prompt injection attacks can aim at something harder to see: how an agent plans, and how a model reasons and decides which rules apply.

CrowdStrike OverWatch identified a VAPOR PANDA campaign using ARTEX alongside the Chinese-developed DeepSeek large language model (LLM) and a second commercial LLM to conduct intrusions against multiple high-value targets in parallel.

TL;DR: Mend SCA now scans Bun-managed JavaScript and TypeScript projects, including both the text-based bun.lock and legacy binary bun.lockb lockfiles. It detects direct and transitive dependencies automatically, works in the Mend CLI and every repository integration, and supports reachability analysis so teams can fix the vulnerabilities their code actually calls first.

How Kroll and CrowdStrike Are Turning Innovation into Value for Customers At Fal.Con 2026 in Las Vegas, Kroll Managing Director Robb Mayeski joined CrowdStrike Vice President of Global Scale Partnerships Dan Danielli for a live interview with theCUBE, SiliconANGLE. The discussion explores how Kroll and CrowdStrike are helping organizations defend against AI-accelerated threats while adopting AI in a way that delivers measurable business value and strengthens cyber resilience.

Cybersecurity is reaching an inflection point. Attackers use AI to research vulnerabilities, develop exploits, and run increasingly automated campaigns, compressing the time defenders have to respond. As that window shrinks, defenders need to know which vulnerabilities an attacker can actually reach. Answering that question is difficult when security tools provide separate views of vulnerabilities, assets, and network controls.

For most small businesses, outsourcing business IT support gives more cover for less money than hiring your own IT person. Some firms prefer to keep IT in-house for direct control, and many larger ones combine their own team with a provider, an approach called co-managed IT. The choice affects more than your IT bill. It decides who spots problems and fixes them, and whether your IT knowledge stays with the business when someone leaves.

Enterprise security has a speed problem. Attackers are getting faster at finding and exploiting vulnerabilities, while many organizations still rely on ticket-based remediation, approvals, and scheduled maintenance windows. AI threatens to widen that gap considerably, exposing one of vulnerability management’s largest unchanged challenges: getting the right systems to fix the right problems before attackers exploit them.