All The Latest!
Keeping up with cyber-news is hard. Enjoy our specially curated collection of various RSS feeds to help make finding relevant news a little less tedious. If you have something to share, be sure to let us know!
Keeping up with cyber-news is hard. Enjoy our specially curated collection of various RSS feeds to help make finding relevant news a little less tedious. If you have something to share, be sure to let us know!

TL; DR Learn how transitioning to an AI-driven exposure management strategy enabled Tenable’s Chief Security Officer, Robert Huber, to conquer software sprawl, integrate fragmented data, manage the …
Hybrid environments demand end-to-end visibility to stop modern attacks Hybrid environments are a dominant trend in enterprise technology, but they continue to present unique issues to the defenders …
Metrics, logs, and traces pile up by the terabyte. Without the relationships between them, none of it adds up to an answer. Every cloud team has more observability data today than it did five years …
TL;DR: OWASP’s 2026 rankings reflect the growing consequences of giving LLM applications access to tools and enterprise systems. Prompt injection remains No. 1, while excessive agency rises to No. 3 a …
Review the code. Prove the agent is safe. Govern every call after — in your cluster. Artificial intelligence has entered a new phase. Organizations are no longer experimenting with simple chatbots t …
A virtual firewall is a firewall device or service that provides network traffic filtering and monitoring for virtual machines (VMs) in a virtualized environment.
The Cloud Security Alliance (CSA) is a nonprofit organization that promotes research into best practices for securing cloud computing and the use of cloud technologies to secure other forms of computi …
If your company is using a cloud database, it's critical to stay on top of security. Review the security features offered by top cloud providers, plus some best practices.
A cloud audit is an assessment of a cloud computing environment and its services, based on a specific set of controls and best practices.
SOC 2 (System and Organization Controls 2), pronounced "sock two," is a voluntary compliance standard for ensuring that service providers properly manage and protect the sensitive data in th …
There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice resource. It’s fun to reread my 2002 essay on the economics of …
Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking servic …
Interesting research: Abstract: Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from scratch. For such an …