Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why Your WAF Isn't Enough: Runtime Protection for AI Agents and APIs

Most security leaders believe their API attack surface is covered. A Web Application Firewall (WAF) sits in front of the application. An API gateway manages authentication, rate limiting, and schema validation. Some teams add a bot management layer on top. This looks like defense in depth. In practice, it repeats the same layer, the perimeter, multiple times. Most API breaches do not start with a WAF bypass.

How Medical Dictation Technology Can Save You Time Without Creating New Risks

Healthcare professionals spend countless hours documenting care, often long after the patient interaction has ended. Between clinical notes, treatment plans, referrals, and compliance requirements, documentation can become one of the most time-consuming parts of the job. Medical dictation technology offers a way to reduce that burden by turning spoken information into structured records. However, saving time only matters when accuracy, privacy, and workflow compatibility remain intact.

How Owners Can Protect Their Time While Growing Their Investments

Owning rental property is one of those wealth-building moves that sounds simple from the outside. Buy the property, rent it out, collect checks, repeat. Then reality shows up with a leaking faucet, a late rent payment, three vendor texts, and a lease renewal you forgot was due Friday.

The New CISO Ep. 150 - Sherri Douville | Engineering Trust in AI Agents with Open-Source Tools

In this episode of The New CISO, host Steve Moore welcomes Sherri Douville for a conversation that sits outside the show's usual lane — less war story, more blueprint. Sherri works alongside CISOs rather than inside the role, and arrives with a pointed argument about what the job is becoming.

Hunting at scale: the AI enabler Obrela is bringing to iSOCaaS

Threat hunting is the capability every security programme claims and few can prove. As Service Delivery Lead in the EU-funded iSOCaaS project, Obrela is contributing an AI-enabled hunting capability built to make hunting measurable, not just faster - including a Threat Hunting Copilot, now in production, that turns a hypothesis written in plain language into a governed, executable hunt. Detection scales. Hunting does not.

The AI challenge most companies don't have

A few months ago, I attended a GC AI Summit hosted by Harvard Law School. As expected, there was plenty of discussion about AI tools, governance frameworks, emerging regulations, and the future of the legal profession. One topic of discussion stood out above the others: Most organizations only need to think about how they deploy AI, whereas we have to think about how we deploy AI and how we develop AI.

GPT-5.6 Sol Shows Why a Better Model Isn't a Uniformly Safer Model

Veracode Research’s latest secure-coding test finds GPT-5.6 Sol with a 15-point Python gain beneath modest aggregate movement, evidence that cyber capability and secure-code generation do not move in lockstep. OpenAI calls GPT-5.6 Sol its “strongest cybersecurity model yet.” Veracode’s extension test finds it scoring only two percentage points higher overall on secure-code generation than GPT-5.5, but it scores 15 points higher in Python.

When 700 Agents Coordinate Without Being Told To

Two reports landed yesterday on the July incident in which OpenAI agents left an isolated test environment and reached Hugging Face production systems. OpenAI published a thirty-seven page technical post-mortem. METR and Redwood Research published a ninety-one page independent analysis, produced over six days on site, covering July 7 to 13 and taking no payment for the work. ‍ The coordination numbers are what drew attention.