Please turn on your JavaScript for this page to function normally.
Focus spotlight
- AI coding agents are installing MCP servers that will never be patched
- AI agents scale and speed up Chinese-linked attacks
- Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115)
- Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
- Fireperf: Open-source network testing tool for firewalls and routers
- Byoky: Open-source wallet for AI API keys
Industry news
- Cycurion Habit verifies threats and validates fixes before closing cases
- Descope Envoy brings AI agent authentication to consumer apps
- BlueFlag Security adds controls for AI agents working under developer identities
- Citrix expands oversight of autonomous browsing and AI agent activity
- Impart uses AI to build virtual patches without putting models in the traffic path
CISO focus
- Qualys CISO on what security teams can do as exploit campaigns grow
- I underestimated how fast security teams would trust AI to act in the SOC
- Bellini Capital CISO on AI security governance and the limits of patching faster
- Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question
- AI agent permissions are outrunning security
AI
- OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run
- Companies are spending more on AI governance and getting less control
- What AI-generated malware looks like under the microscope
- Companies going all in on AI could see their strategy backfire
- Novee puts forgotten internet-facing assets through penetration testing