Latest

Agentic AI

Why AI Agents Are Creating a New Security Blind Spot

Jennifer Lawinski  •  May 26, 2026

AI agents are becoming a new identity type inside enterprises, creating visibility gaps and security risks most organizations aren't prepared to manage. Okta's Charlotte Wylie explains why shadow agents, overprovisioned access and AI-driven attacks demand a new governance model.

Governance & Risk Management

Automated 'Megalodon' Campaign Spreads GitHub Repo Backdoors

Mathew J. Schwartz  •  May 25, 2026

More than 5,000 GitHub repositories fell victim to an automated campaign, codenamed "Megalodon," in which an attacker injected malicious GitHub Actions that executed a script designed to steal development environment secrets, plus a variety of keys, tokens and other credentials, researchers said.

Next-Generation Technologies & Secure Development

$2B US Tech Investments Could Help Hasten Q-Day Timeline

Jennifer Lawinski  •  May 25, 2026

The U.S. government just committed $2 billion to quantum computing development, including $1 billion to stand up America's first dedicated quantum chip foundry. Experts say the Q-Day timeline is compressing faster than most enterprises have planned for.

Incident & Breach Response

Responding to Breaches With AI? Beware Cross-Contamination

Rashmi Ramesh  •  May 25, 2026

Cybersecurity investigators who use artificial intelligence tools to draft incident response reports, beware: Information tied to one security incident can contaminate a report into a separate incident, if both get drafted using the same AI tool in the same session, researchers warn.

Data Privacy

Neural Device Implants: Emerging Privacy, Security Risks

Marianne Kolbasuk McGee  •  May 25, 2026

Neural devices promise breakthroughs for patients with paralysis, stroke and other medical conditions. But AI, weak governance and poor security practices could turn implanted tech into surveillance and manipulation tools, warns Penn State professor Andrea Matwyshyn.

Demystifying Claude: Signal vs. Speculation

Uma Ramani  •  May 25, 2026

A researcher's phone buzzed with an email from an AI that wasn't supposed to have internet access. The real story isn't about rogue machines; it's about what happens when AI capability outpaces our ability to interpret, validate and govern it.

Endpoint Security

RondoDox Botnet Exploits 2018 Flaw in Asus Routers

Greg Sirico  •  May 22, 2026

Operators behind a botnet picked up on a nearly decade-old flaw in Asus routers allowing an unauthenticated attacker to achieve remote code execution as a root user. VulnCheck began observing exploitation of the Asus vulnerability on May 17.

Artificial Intelligence & Machine Learning

HHS Launches AI-Powered Effort to Identify Fraud, Waste

Marianne Kolbasuk McGee  •  May 22, 2026

Artificial intelligence tools are the centerpiece of a new U.S. Department of Health and Human Services initiative that will enable officials to better analyze audits and ultimately crack down on states and grantees that are potentially wasting, abusing or fraudulently spending federal funding.

Critical Infrastructure Security

New Telecom Espionage Campaign Tied to China

Tiffany Wang  •  May 22, 2026

Newly discovered malware tied to China-linked actors breached telecom providers across Asia and the Middle East, highlighting growing efforts to gain persistent access into interconnected communications infrastructure.

Cyberwarfare / Nation-State Attacks

Iranian Hackers Using Fake Job Sites to Breach Defense Firms

Chris Riotta  •  May 22, 2026

Palo Alto Networks' Unit 42 said Iran-linked operators tied to Screening Serpens are using fake recruiting campaigns, cloned aerospace hiring portals and malware-laced job materials to infiltrate defense, satellite communications and government networks.

Agentic AI

Zscaler Targets AI Identity Risk With Symmetry Acquisition

Michael Novinson  •  May 22, 2026

Zscaler plans to acquire San Francisco-based Symmetry Systems to unify visibility across AI models, identities, applications and datasets, helping enterprises track AI lineage, govern agentic identities and enforce granular zero trust controls across cloud and SaaS environments.

►

Agentic AI

ISMG Editors: The Governance Questions Haunting OpenAI

Anna Delaney  •  May 22, 2026

In this week's panel, four ISMG editors discussed what the Musk vs. Altman trial exposed about OpenAI's governance program, how AI is reshaping the way enterprises think about security and why Cisco, Cloudflare, Arctic Wolf and other firms are redesigning their workforces for the AI era.