Enterprise Security Tech

The Pentagon has halted the next stage of its Cybersecurity Maturity Model Certification rollout, delaying a major expansion of independent cybersecurity audits for companies working across the defense supply chain. The Defense Department announced July 13 that it is suspending CMMC Phase 2, which had been scheduled to begin November 10, 2026. The phase would have significantly increased the number of contracts requiring assessments conducted by certified third-party organiza

As enterprises move AI agents from experiments into production, the biggest challenge may not be model intelligence, but whether organizations can trust those systems with real authority. In this interview, Descope co-founder Rishi Bhargava explains why identity, permissioning, and accountability will determine which companies can safely scale agentic AI, and which will be forced to keep it confined to the sandbox. Everyone seems to be talking about AI agents right now. Why h

Artificial intelligence is increasingly becoming an operational advantage for cybercriminals, and a newly documented intrusion demonstrates how attackers are using AI-generated code to speed up familiar attack techniques rather than invent new ones. Researchers at Huntress uncovered an intrusion in which an unidentified threat actor deployed what appears to be a large language model-generated PowerShell script to perform extensive Active Directory reconnaissance after gaining

Chainguard says its Athena coalition has processed more than 40,000 open source vulnerability findings in three weeks, highlighting how AI is changing the speed and scale of software security. Chainguard is expanding Athena, its industry coalition for coordinated open source software defense, as the cybersecurity world races to adapt to a new vulnerability landscape shaped by frontier AI models, automated exploit discovery, and increasingly compressed response windows. The Ki

Encryption Consulting has launched CBOM Secure V1.1, an enterprise platform designed to give security teams a full inventory of the cryptography running across their applications, cloud environments, and on-premises infrastructure. The release comes as enterprises face mounting pressure to understand where encryption keys, certificates, algorithms, and cryptographic libraries are hidden across sprawling technology estates. That visibility is becoming more urgent as the U.S. g

Ransomware activity in May 2026 remained stuck at historically high levels, even as attacks dipped slightly month over month, according to a new cyber threat intelligence report from NCC Group and Fox-IT. The report recorded 749 ransomware victim listings in May, a 4 percent decline from the previous month but still part of an elevated 2026 baseline. Industrial organizations were hit hardest, accounting for 29 percent of ransomware attacks. Qilin remained the most active rans