Enterprise Security Tech

This guest article was contributed by Chuck Randolph, Chief Strategy Officer at 360 Privacy Enterprise security models have long assumed that attacks begin when an adversary starts collecting information about a target. That assumption made sense in an era when surveillance, casing, and reconnaissance were visible early indicators of hostile intent. Today, the earliest stages of many attacks occur long before any operational behavior is detectable. They begin when an individu

As artificial intelligence accelerates both cyberattacks and defensive capabilities, security teams are facing a structural shift in how vulnerabilities are discovered and exploited. Intruder is betting that traditional penetration testing is no longer sufficient, launching a new AI-driven approach designed to operate continuously rather than periodically. The company’s newly announced AI Pentesting capability introduces autonomous agents that investigate and validate vulnera

The phishing landscape has entered a new phase in 2026, defined by automation, artificial intelligence, and a rapid expansion beyond the traditional email inbox. A new industry report reveals that attackers are no longer relying on basic deception. Instead, they are operating with the precision, scale, and tooling of modern software companies, targeting users across collaboration platforms, corporate calendars, and real-time communication channels. According to the latest fin

A growing wave of AI-powered scams is reshaping how Americans interact with one of the most basic forms of communication: the phone call. New research from Truecaller suggests the threat has reached a tipping point, where fear of fraud is now actively disrupting everyday life and business operations. According to the company’s 2026 Phone Fraud and AI Threat Survey, scam activity has evolved from a persistent annoyance into a systemic trust breakdown. The data shows that a maj

A growing dispute over data exposure at Swedish AI coding startup Lovable is raising fresh questions about how quickly emerging developer tools are scaling without fully locking down security controls. The controversy began when an X user alleged that projects created on the platform prior to late 2025 were broadly accessible. According to the post, the individual was able to view other users’ application code, chat interactions with AI systems, and associated customer data u

A new wave of supply chain attacks is hitting the npm ecosystem, and this time the blast radius is moving deeper into AI developer workflows. Security researchers at Socket say the latest campaign shows strong overlap with a previously identified wormable attack dubbed CanisterWorm, suggesting either a shared operator or direct reuse of adversary tooling. At the center of the incident are compromised packages tied to Namastex Labs, a company that promotes AI consulting and au