All The Latest!
Keeping up with cyber-news is hard. Enjoy our specially curated collection of various RSS feeds to help make finding relevant news a little less tedious. If you have something to share, be sure to let us know!
CSA Feed
- Anthropic’s Mythos is Here: Defending from the Vulnpocalypse
April 8, 2026I don't really know who coined it, but for the past six months or so we've been tossing around the term "Vulnpocalypse." We use it to describe the inflection point where LLMs are a …
- Who’s Behind That Action? The AI Agent Identity Crisis
April 8, 2026In collaboration with Aembit, CSA has released a new survey report about identity and access for AI agents. The report shows that AI agents are already operating across internal applications, APIs, Sa …
- Standardizing the SaaS Ecosystem: The Case for SSCF Adoption
April 8, 2026The rapid proliferation of SaaS platforms, compounded by the emergence of Agentic AI, has created a critical visibility and control gap within the enterprise for SaaS. While the Cloud Controls Matrix …
- AI Security Risks Start with Poor Data Visibility
April 2, 2026For a lot of organizations, AI has become the answer to almost every security question. Need faster detection? Add AI. Need better prioritization? Add AI. Need help managing an exploding volume of fil …
- From Compliance to Credibility: How to Turn CCM/CAIQ Work Into Content People Actually Cite
March 31, 2026You can do a lot of honest work in CCM and CAIQ and still end up with one frustrating outcome: nobody outside your audit circle ever sees it. Meanwhile, a competitor with thinner controls looks “more …
Tech Target
- SOC 3 (System and Organization Controls 3)
February 8, 2023A System and Organization Controls 3 (SOC 3) report outlines information related to a service organization's internal controls for security, availability, processing integrity, confidentiality an …
- software-defined perimeter (SDP)
September 29, 2022A software-defined perimeter, or SDP, is a security technique that controls access to resources based on identity and forms a virtual boundary around networked resources.
- SOC 1 (System and Organization Controls 1)
April 5, 2022System and Organization Controls 1, or SOC 1 (pronounced "sock one"), aims to control objectives within a SOC 1 process area and documents internal controls relevant to an audit of a user en …
- Build your knowledge of Azure AD conditional access policies
February 17, 2022The rapid pace of change in the modern workplace requires new methods to control who has access to what. This Azure Active Directory feature can help IT meet those security goals.
- Why you should plan to upgrade to Azure AD Connect v2 soon
December 6, 2021Administrators who rely on an Azure AD Connect v1 version for hybrid identity with Office 365 should prepare for the impending retirement of several technologies in the utility.
Schneier On Security
- Friday Squid Blogging: New Giant Squid Video
April 17, 2026Pretty fantastic video from Japan of a giant squid eating another squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderati …
- Mythos and Cybersecurity
April 17, 2026Last week, Anthropic pulled back the curtain on Claude Mythos Preview, an AI model so capable at finding and exploiting software vulnerabilities that the company decided it was too dangerous to releas …
- Human Trust of AI Agents
April 16, 2026Interesting research: “Humans expect rationality and cooperation from LLM opponents in strategic games.” Abstract: As Large Language Models (LLMs) integrate into our social and economic interactions, …