All The Latest!
Keeping up with cyber-news is hard. Enjoy our specially curated collection of various RSS feeds to help make finding relevant news a little less tedious. If you have something to share, be sure to let us know!
CSA Feed
- AI Governance Programs: What CISOs Say vs. What They Actually Do
August 18, 2026Security leaders have heard the phrase “AI has expanded the attack surface” enough times. The more interesting story is the widening gap between what CISOs say they're doing about it and what …
- We Asked an AI Agent to Close a Linear Ticket. It Dropped a Production Table.
August 18, 2026Originally published by Eve Security. A developer opens Cursor, points it at a Linear ticket, and asks it to implement the fix. Cursor loads ticket-work, a small skill that standardizes how the agent …
- Legacy Operating Models Can’t Keep Pace With IT Complexity, Cloud Security Alliance Survey Finds
August 18, 2026Study reveals that fragmented ownership and limited visibility have made manual policy management a production risk SEATTLE – Aug. 18, 2026 — Fragmented operating models spanning teams, tools, and env …
- Downwind of the Labs
August 18, 2026One of the first things they teach you in hazmat response is to stage uphill and upwind. (And the rule of thumb: if you can’t cover the scene with your thumb, you’re too close). Before you treat a sin …
- When the Playbook Breaks: AI Incident Response for Systems That Don't Behave Like Anything Else
August 17, 2026Three years after the explosion of GenAI in the enterprise, most organizations now have an inventory of their AI systems, an acceptable use policy, and — at best — a process for approving AI use cases …
Tech Target
- SOC 3 (System and Organization Controls 3)
February 8, 2023A System and Organization Controls 3 (SOC 3) report outlines information related to a service organization's internal controls for security, availability, processing integrity, confidentiality an …
- software-defined perimeter (SDP)
September 29, 2022A software-defined perimeter, or SDP, is a security technique that controls access to resources based on identity and forms a virtual boundary around networked resources.
- SOC 1 (System and Organization Controls 1)
April 5, 2022System and Organization Controls 1, or SOC 1 (pronounced "sock one"), aims to control objectives within a SOC 1 process area and documents internal controls relevant to an audit of a user en …
- Build your knowledge of Azure AD conditional access policies
February 17, 2022The rapid pace of change in the modern workplace requires new methods to control who has access to what. This Azure Active Directory feature can help IT meet those security goals.
- Why you should plan to upgrade to Azure AD Connect v2 soon
December 6, 2021Administrators who rely on an Azure AD Connect v1 version for hybrid identity with Office 365 should prepare for the impending retirement of several technologies in the utility.
Schneier On Security
- AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks
September 4, 2026We cannot forget that AI coding agents are not yet trustworthy: Researchers at a stealth startup in Israel scanned 6,214 live domains belonging to defense contractors, Fortune 500, and Big Tech compan …
- Researching Employment Scams
September 3, 2026Researchers built a fake company to study fake employee scams.
- AI Agents Are Now Emailing Me with Their Security Concerns
September 2, 2026I received the two emails below earlier in the month. They’re vaguely coherent. I suppose I shouldn’t be surprised that the corpus that AIs are training on contain data suggesting that I am someone to …