All The Latest!
Keeping up with cyber-news is hard. Enjoy our specially curated collection of various RSS feeds to help make finding relevant news a little less tedious. If you have something to share, be sure to let us know!
CSA Feed
- Why You Need a Zero Trust Program Management Office
October 8, 2026Zero Trust implementations rarely fail because an organization forgot to buy a security tool. More often, progress stalls because identity, cloud, data, and network security teams pursue separate init …
- The Agent Kill Switch is No Longer Optional
October 8, 2026Walk through almost any factory and you will see large red emergency-stop buttons on dangerous equipment. They are deliberately obvious and accessible because, when machinery malfunctions, operators m …
- PQC is a Stress Test for Enterprise DNS
October 8, 2026Executive Summary Post-quantum cryptography (PQC) is often framed as a cryptographic upgrade. For enterprise DNS, however, it is something more consequential: a stress test of operational maturity. …
- Your Roadmap to the Frontier Ready Journey
October 8, 2026In April 2026 the Cloud Security Alliance, working with our partners SANS and RSAC, first published The “AI Vulnerability Storm”: Building a “Mythos-ready” Security Program that opened the floodgates …
- Sanctioned Apps, Unsanctioned AI: Governing the Agents Inside Your SaaS Stack
October 6, 2026A sparkle icon shows up in the CRM. Nobody in IT deployed it. Account executives start using it to summarize renewal risk across their book, and the help desk is fielding tickets about whether it …
Tech Target
- SOC 3 (System and Organization Controls 3)
February 8, 2023A System and Organization Controls 3 (SOC 3) report outlines information related to a service organization's internal controls for security, availability, processing integrity, confidentiality an …
- software-defined perimeter (SDP)
September 29, 2022A software-defined perimeter, or SDP, is a security technique that controls access to resources based on identity and forms a virtual boundary around networked resources.
- SOC 1 (System and Organization Controls 1)
April 5, 2022System and Organization Controls 1, or SOC 1 (pronounced "sock one"), aims to control objectives within a SOC 1 process area and documents internal controls relevant to an audit of a user en …
- Build your knowledge of Azure AD conditional access policies
February 17, 2022The rapid pace of change in the modern workplace requires new methods to control who has access to what. This Azure Active Directory feature can help IT meet those security goals.
- Why you should plan to upgrade to Azure AD Connect v2 soon
December 6, 2021Administrators who rely on an Azure AD Connect v1 version for hybrid identity with Office 365 should prepare for the impending retirement of several technologies in the utility.
Schneier On Security
- Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
October 16, 2026New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you can also use this squid post to talk about the security stories in th …
- Backdooring Open-Weight AI Models
October 16, 2026This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in t …
- Measuring Human Cryptanalysis Effort
October 15, 2026Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public cryptanalysis …