The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined and correct access policies. It's a problem that pr...
Sandboxing, least privilege, and monitoring are well-established controls in terms of the defenses they provide against unexpected and unauthorized actions. But being well-established in theory doesn't always translate to successful in practice. Kieran Human talks about some of the properties that a good sandbox should have and how monitoring creat...
As cyber threats become more AI-powered, attacks continue to rise. Threats can arise from all areas of a company’s IT infrastructure, however most attacks utilize a domain name to infiltrate systems. How secure is your domain ecosystem? Ihab Shraim, Chief Technology Offider at CSC Digital Brand Services, joins Business Security Weekly to discuss wh...
Black Hat 2026 made one thing clear: AI is reshaping cybersecurity, but the industry is still working through what secure adoption looks like in practice. In this wrap-up discussion, Jackie McGuire and Mike Shema reflect on the biggest themes from the event, including AI agents, non-human identities, secure-by-design principles, and the challenge o...
AI agents can independently discover and install new tools, but the emerging ecosystem of AI Skills and MCP servers lacks many of the trust and security controls applied to traditional software. Michael Leland will discuss Island research uncovering thousands of malicious repositories, widespread security flaws across MCP servers, and a new attack ...
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
