Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Overrated and underrated AI hot takes.

AI changed who can build, and now IT teams must navigate a new challenge. Employees across the business are creating apps, agents, and automations faster than ever. The result is a wave of "wild code": unmonitored workflows that solve immediate problems but bypass traditional governance and operational ownership. Without the right platform to centralize visibility and ensure safety, you face blind spots that compromise your most important workflows.

GitGuardian's validity-override API lets security and engineering teams tell GitGuardian whether an exposed credential is actually valid, even when automatic checks mark it as Failed to Check. Secrets tied to internal services, private APIs, or systems GitGuardian cannot reach often fall into this category. GitGuardian automatically validates most supported credential types, but when it cannot, teams can now perform their own validation and feed the result back into the platform.

The victim had a SIEM. Had EDR. Had a mature program on paper. The controls existed—they just didn't do their job on the day. Offensive cybersecurity expert Adrian Culley on the only way to know whether your stack actually works: run the technique and watch. Dump credentials from LSASS memory—did the EDR block it? Did the SIEM rule fire? Did the SOC see it inside their target window?

Regulators stopped asking whether you have security controls. Now they want proof the controls actually work. Host Tova Dvorin sits down with Adrian Culley to argue that CTEM has a silent E—for evidence—and that evidence is now the currency of cyber regulation worldwide. Inside: DORA's Article 26 threat-led penetration testing, NIS2's "assess the effectiveness" clause and personal board liability, the SEC's 8-K materiality clock, NYDFS Part 500's personally signed CISO certification, and the EU AI Act's August logging deadline. Subscribe to The Cyber Resilience Brief for more.

Threat hunting often means following a lead without knowing where it will take you. Your search tools shouldn’t make you choose between exploring a hunch and losing your original results. Driftnet gives threat hunters multiple ways to refine artifact searches as they investigate. Use Add Filter to explore a narrower view without changing the underlying query, Add to Query to make that refinement persistent, or exclude artifacts to quickly zero in on what remains.

AI is merging into the modern workplace at roughly the pace computers did in the 1980s, and the risks are evolving just as fast. IBM and Ponemon found that 97% of organizations hit by an AI-related security incident lacked basic access controls, and 63% had no AI governance policy at all. In this video, Yakir breaks down the seven categories of AI risk every GRC leader needs to understand, and what separates knowing you have a control gap from knowing what it will cost you.

Visibility tells you an asset exists. Security requires knowing what it is, what it can reach, how it behaves, and what controls can be applied. In this clip, David Clapp explains why the gap between visibility and action remains one of cybersecurity's biggest challenges.