Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What October's security incidents taught us about exposed credentials

October brought a series of security incidents across AI and developer platforms. Several platforms reported incidents involving credentials or environment variables. Across several of those disclosures, access to one system became a way to reach credentials for others.

Securing the AI-era network: Why performance and defense now belong together

Secure the AI-era network by combining high-performance protection, deeper visibility across every environment, and coordinated response that stops fast-moving threats sooner. AI doesn’t operate in isolation. Its prompts, workflows, data exchanges, and API calls all depend on the network. As organizations put AI to work, it adds a new layer of traffic that is increasingly encrypted, application-driven, and machine-to-machine.

LevelBlue and rrelentless: Bringing Proactive Cyber Resilience to Cyber Insurance Policyholders

Cyber insurance has traditionally done its most important work after something goes wrong. We think it can do much more before an incident ever happens. That's why LevelBlue is partnering with rrelentless, a UK-based specialist Managing General Agent (MGA), to give its cyber insurance policyholders access to LevelBlue's cybersecurity expertise as part of their policy.

Is Your Refrigerator Running? Yes, It's Running an Outdated OS: What the Supermarket Refrigeration Attacks Reveal About Embedded Security

Overnight on November 2, freezers in supermarkets across Sweden, Belgium, Luxembourg and Ireland climbed to around 50°C, and stores awoke to spoiled stock. This is the second wave within a month, after a similar attack on hundreds of French stores in October. No one has publicly claimed either attack, and the attack vector hasn't been confirmed. Regardless of who is responsible, the targets are what should worry us.

A Prioritized Backlog Is Still a Backlog

Vulnerability prioritization helps security teams identify what matters most, but it doesn’t actually resolve exposures. Even with better visibility, deduplication, and risk-based context, vulnerabilities remain unresolved until teams investigate, remediate, and verify the fixes. Real risk reduction isn’t about how efficiently you organize your backlog. It’s about how quickly you take action to shrink it.

The Deepfake Episode: AI Avatars, CEO Clones & Likeness | Attempted Intelligence Ep. 4

When AI-generated video floods your feed, how do you train an entire workforce on deepfakes without creating content that feels fake? In Episode 4 of Attempted Intelligence, hosts Harlan Parrott (VP of AI Innovation at KnowBe4) and Matt Duren (SVP of Engineering for AI & Data) welcome the show’s first guest: Isida Drake, SVP of Security and Compliance eLearning at KnowBe4. Isida leads the global team delivering security training across 36+ languages and integrating AI directly into course development.

Sophos NDR Overview: AI-Powered Network Detection and Response

The network's changed rapidly, with distributed users, data everywhere, and many connected assets unable to run an endpoint agent. At the same time, adversaries are using automation and stolen credentials to evade prevention. Sophos NDR (Network Detection and Response) provides complete visibility across managed, unmanaged, and agentless assets to catch threats wherever they move.

The Importance of Identity Governance for AI Agents

Identity governance answers three basic questions: Who or what has access? Should it have that access? And can you prove it later? Organizations have managed their employees this way for years. Every employee has an account, an owner, and a business reason for their access. But AI agents introduce new identities that require the same level of governance. Think about what an AI agent actually does.