Enterprise Security Tech

The Pentagon has halted the next stage of its Cybersecurity Maturity Model Certification rollout, delaying a major expansion of independent cybersecurity audits for companies working across the defense supply chain. The Defense Department announced July 13 that it is suspending CMMC Phase 2, which had been scheduled to begin November 10, 2026. The phase would have significantly increased the number of contracts requiring assessments conducted by certified third-party organiza

As enterprises move AI agents from experiments into production, the biggest challenge may not be model intelligence, but whether organizations can trust those systems with real authority. In this interview, Descope co-founder Rishi Bhargava explains why identity, permissioning, and accountability will determine which companies can safely scale agentic AI, and which will be forced to keep it confined to the sandbox. Everyone seems to be talking about AI agents right now. Why h

Microsoft is warning Windows users to expect a growing number of security updates as artificial intelligence dramatically speeds up the company's ability to uncover software vulnerabilities before attackers can exploit them. In a new blog post, Microsoft said AI is fundamentally changing how software flaws are discovered by enabling security teams to analyze significantly more code in less time. Rather than waiting for vulnerabilities to surface through external researchers o

Threat intelligence teams have long monitored ransomware groups, malware marketplaces, and dark web chatter for signs of emerging cyber threats. A new report from Radware suggests security teams may be overlooking another valuable source of intelligence: the underground tutorials where cybercriminals teach one another how to attack organizations. After analyzing nearly 9,000 tutorial posts published across 24 deep and dark web forums over more than three years, Radware resear

Artificial intelligence is increasingly becoming an operational advantage for cybercriminals, and a newly documented intrusion demonstrates how attackers are using AI-generated code to speed up familiar attack techniques rather than invent new ones. Researchers at Huntress uncovered an intrusion in which an unidentified threat actor deployed what appears to be a large language model-generated PowerShell script to perform extensive Active Directory reconnaissance after gaining