So Many AI Security Benchmarks, But None Tell the Whole Story

Measuring AI model security gets complex fast — a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against your own code and workflows.

Risks & Rewards: How AI Is Redefining the CISO's Role

Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.

In-the-Wild Attack Abuses AI Agents' Trust in Markdown

A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.

'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets

An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.

10 Software Security Practices Built for the Next 250 Years

This Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations.

Trust Is Not What It Seems — And Fraudsters Are Counting on It

Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence.

Exposed to PHP2Shell? Cyber Experts Weigh in With Advice

Fixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself.