Application securityShadow AI expands attack surfaces beyond visibilityChris BoehmMarch 3, 2026AI sprawl and machine identities outpace governance, demanding real-time, dynamic defense.
Threat ManagementNorth Korea’s Lazarus Group targets US, Middle East healthcare sectorsSteve ZurierFebruary 24, 2026Threat actor focuses on identity-based attacks followed by a ransomware drop.
IdentityPDF phishing attack leads to stolen Dropbox credentialsLaura FrenchFebruary 2, 2026The attack uses seemingly benign attachments and trusted cloud infrastructure to evade detection.
Security Operations860GB of Target source code stolen. No one knows who did itMora GozaniJanuary 28, 2026A source code leak shows how compromised identities and blind spots can expose dev environments.
Application securityResearchers find 16 browser extensions stealing ChatGPT session tokensLaura FrenchJanuary 27, 2026One of the malicious ChatGPT “mods” has a featured badge on the Chrome Web Store.
IdentityThe CX puzzle: How convenience, trust, and identity fit together amid agentic AIMichael HubbardJanuary 21, 2026Security must be built into CX to reduce friction and earn trust as AI agents grow.
IdentityPhishing campaign exploits LinkedIn messages via DLL sideloadingSteve ZurierJanuary 20, 2026Attackers exploit the trusted professional social media platform to deploy a remote access trojan.
