Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1292 articles
A practical guide to exporting systemd journal data with journalctl, covering filters, output formats, permissions, log persistence, and reading journal files from disk images for incident work. Several LogTotal workflow sections contain unresolved proof placeholders.
Gravwell CEO Corey Thuen discusses his hacker mindset, work on industrial control system security, and career—from Idaho National Laboratory to founding companies including Gravwell and Southfork Security.
Opal CEO Howard Ting argues that AI agents require continuous access governance. He describes a decision engine that assesses ownership, purpose, work context and resource sensitivity before granting scoped access, denying it or escalating to a person.
The article surveys security risks in AI-assisted development and software supply chains, citing vulnerable generated apps, exposed data, agent sandbox escapes, and compromised packages, then recommends human review, stronger access controls, AI asset inventories, andis
Sekoia’s David Bizeul discusses how AI agents could handle repetitive SOC triage and investigation, while analysts focus on judgment, agent oversight, training, and metrics such as MTTD, MTTI, and MTTR.
The article explains how satellite connectivity, autonomous assets and radio-frequency threats expand critical infrastructure's attack surface, and argues for integrated cyber defense, communications redundancy, signal monitoring and tested response procedures.
A policy op-ed argues that vaultless, keyless pseudonymization could limit exposure of sensitive data across systems and urges federal agencies to evaluate the approach and related procurement claims.
A practical guide to exporting and analyzing security logs with LogTotal, which pseudonymizes data using keyed HMAC tokens before analysis and correlates detections into attack chains.
The article explains how deterministic controls can constrain AI pentesting agents, manage prompt-injection and credential risks, and produce reproducible findings, then promotes Pentera Apps as an implementation.
Criminologist Nicola Harding discusses scam psychology, social engineering, fraud prevention, and ways to reduce harm, including avoiding PIN reuse and making it easier for victims to report scams.
Arctic Wolf describes how its Aurora Agentic SOC uses AI agents to investigate threats and recommend containment actions, while requiring human approval for high-impact responses across email, identity, endpoint, and network tools.
Qualys research found that vulnerability closures rose sixfold from 2022 to 2025, while the share of critical findings still open after seven days increased. The article argues for prioritizing vulnerabilities using exploitation evidence and asset context.
AWS’s updated IAM Identity Center migration guide describes preserving users, groups, memberships and assignments when moving away from Active Directory, and provides an Okta migration runbook with validation and rollback steps.
The article explains NIS2 scope, controls, reporting deadlines, enforcement and national implementation status, then presents LogTotal for privacy-conscious log triage and outlines use cases across 10 markets.
A buyer’s guide offers 30 questions for assessing AI pentesting tools, covering exploitation evidence, human oversight, production safeguards, data handling, testing coverage and threat-led prioritization.
A Brazilian man traveled 2,000 km to meet an online persona he believed he knew. The account operator says the character was AI-generated and denies private contact; police said they could not determine whether a crime occurred.
Aikido compares eight Mimecast alternatives, outlining their email-security capabilities, deployment options and limitations. The guide also explains how to assess archiving, continuity, licensing and migration needs.
The article compares eight security awareness platforms and offers guidance on choosing training that covers role-specific procedures, phishing and voice or text scams, AI use, recurring assignments, reporting, and existing controls.
Aikido’s guide compares nine alternatives to KnowBe4, covering training, phishing simulations, and broader workforce protection. It outlines selection and migration considerations and notes that Noon Security is in early access.
A buyer’s guide compares nine phishing-simulation tools and explains how to assess scenario realism, multichannel campaigns, automation and reporting. It flags Noon’s early-access status and a reported security advisory affecting Gophish through version 0.12.1.
A 2026 buyer’s guide compares 10 email-security platforms, focusing on BEC and phishing detection, deployment and remediation options, integrations, and broader workforce coverage. It also offers criteria for assessing response workflows, licensing and operational fit.
Source scanners, SBOMs, certificate tools, network monitors, and vendor questionnaires may miss cryptography embedded in compiled software. The article explains how binary analysis can inventory those assets for post-quantum migration planning.
Security experts say AI-generated code and non-human identities are expanding SDLC risks. They recommend better identity visibility, short-lived credentials, activity logging, and closer security-development collaboration; AI may also speed vulnerability remediation.
The article explains security log analysis workflows, data sources, formats, monitoring, and pattern recognition, then promotes SOC Prime’s LogTotal tool for analyzing and correlating events with privacy safeguards.
