Application securityOWASP Global AppSec: Cybersecurity industry overdue for a ‘market correction’Paul WagenseilNovember 6, 2026Insurance data will show which products work, and which are just FUD, says industry vet Jeremiah Grossman.
Incident ResponseAfter the breach: Uncovering the full scope of the attackPaul WagenseilOctober 28, 2026Following an incident, every major decision depends on knowing exactly what happened.
Endpoint/Device SecurityThe shadow AI epidemic: Uncovering hidden AI agents and components on the endpointPaul WagenseilOctober 27, 2026Traditional EDR solutions often miss agentic AI. Here's how to make sure nothing stays hidden.
Container securityMoving images: How a runtime bill of materials provides total dependency visibilityPaul WagenseilOctober 22, 2026An SBOM tells you what's in a piece of software. An RBOM reveals what that software actually uses.
Penetration TestingIn continuous operation: How Simpson Strong-Tie safely AI red-teams AI-powered applicationsPaul WagenseilOctober 21, 2026Here's how a leading American manufacturer used AI to strengthen its security posture.
MDRHow to get enterprise-grade security without an enterprise-sized teamPaul WagenseilOctober 14, 2026Managed security services can give SMBs capabilities that would otherwise be difficult to afford or operate.
Risk Assessments/ManagementThe AI you can’t see: Bringing third-party shadow AI into the risk picturePaul WagenseilOctober 13, 2026As AI supply chains become more interconnected, continuous visibility must be the basis of third-party risk management.
MDRTransforming MDR: How AI challenges and strengthens protection servicesPaul WagenseilOctober 8, 2026By automating a lot of the grunt work, AI makes enterprise-grade MDR affordable for SMBs.
Incident ResponseChanging the game: How AI forces organizations to revisit assumptions about recovery and resiliencePaul WagenseilOctober 6, 2026AI changes recovery plans because it is at once a threat accelerator, a new kind of critical infrastructure and a defensive tool.
AI doesn’t create new cyber threats – it just makes the old ones unstoppableIvan Khamenka November 4, 2026
