TECH NEWS
The NIST National Cybersecurity Center of Excellence (NCCoE) is releasing a live document as part of its Secure Software Development, Security, and Operations (DevSecOps) Practices project. This project demonstrates how organizations can implement the security practices and tasks recommended in the NIST Secure Software Development Framework (SSDF) using modern DevSecOps
TECH NEWS
The NIST NCCoE has published the draft NIST Internal Report (IR) 8323 Revision 2, Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) to help organizations manage risks to systems, networks, and assets that use PNT services, such as Global Positioning Systems
TECH NEWS
Every year, millions of phones are stolen. While thousands of iPhones are shipped to China and broken down for parts, criminals can make more money selling a device that has been unlocked and wiped. Now researchers have unpicked part of the underground web of cybercrime services that can help provide
TECH NEWS
A comforting story is taking hold in enterprise cybersecurity circles: AI is broken at runtime because we haven't protected data while it's in use, and the answer is to wrap workloads in encrypted memory, hardware enclaves, and cryptographic attestation. Get the confidentiality model right, the argument
TECH NEWS
Foxconn has confirmed that several of its North American factories were hit by a cyberattack, after the Nitrogen ransomware group claimed to have stolen 8TB of data comprising more than 11 million files. According to the bad actor, the information supposedly obtained contains private directives, project details, technical drawings, and
TECH NEWS
Microsoft is poised to set a new record for yearly patching by having released patches for over 130 vulnerabilities as part of its May Patch Tuesday release, pushing Microsoft’s total number of patched vulnerabilities to over 500 in just five months in 2026. Researchers at Microsoft and other organizations
TECH NEWS
There's a myth spreading through every boardroom and pitch deck right now. More agents = more intelligence. More automation = more value. More AI = better business. It's wrong. And the companies that believe it are building systems that will fail them — not loudly, not obviously, but quietly, fluently,
TECH NEWS
AI agents are reading executive email at Fortune 500 companies. They are moving stablecoins between corporate treasury wallets. They are closing six-figure procurement contracts on behalf of teams that have never seen the agent. They have been doing this for eighteen months, ever since Anthropic shipped Computer Use in October
TECH NEWS
As CEO Chuck Robbins talked about another strong strong AI-driven quarter for Cisco, up to 4,000 of the firm’s staffers, five percent of the total workforce, are about to join the growing ranks of the tech sector’s AI-enabled unemployed. Robbins told Cisco employees in a memo that
TECH NEWS
Exploitation attempts targeting a recent authentication bypass vulnerability in PraisonAI started less than four hours after public disclosure, application protection firm Sysdig warns. PraisonAI is a multi-agent framework that allows organizations to deploy autonomous AI agents for the execution of complex tasks. Tracked as CVE-2026-44338, the newly disclosed security defect
TECH NEWS
For years, cybersecurity strategies were built around the idea of a hardened perimeter: keep attackers out, and systems remain safe. That model is now obsolete. In today’s cloud-first, SaaS-driven environments, identity has become the new control plane and, increasingly, the primary attack vector. This shift reflects both the success
TECH NEWS
A disgruntled security researcher this week publicly disclosed two zero-day vulnerabilities in Windows that enable BitLocker bypass and privilege escalation. BitLocker, Windows’ built-in full-volume encryption feature, relies on TPM (Trusted Platform Module) to deliver hardware-based security, protecting users’ data from unauthorized access if the device is stolen or lost. On
