Enterprise Security Tech

The White House's latest executive order on artificial intelligence is designed to accelerate federal AI adoption and strengthen America's leadership in the technology race. But as agencies move to integrate AI across government operations, cybersecurity experts warn that a deeper challenge is emerging beneath the policy discussions: critical infrastructure operators may not be equipped to defend against the rapidly evolving threats that AI is helping create. The June 2 execu

A cybersecurity incident at Carnival Corporation has once again highlighted how human-focused attacks continue to bypass traditional security defenses, exposing sensitive customer information despite the presence of enterprise-grade security controls. The cruise giant disclosed that threat actors gained unauthorized access to company systems in April after successfully manipulating an employee through a social engineering scheme. While Carnival said it moved quickly to contai

AI security startup 7AI has launched three new capabilities designed to give security teams greater control over autonomous security operations: Threat Hunt, Threat Intel Hunt, and Skills. The additions allow analysts to proactively investigate threats, automate intelligence-driven investigations, and customize how AI agents operate within their environments. Rather than relying solely on alerts, Threat Hunt enables analysts to launch hypothesis-driven investigations using na

A sophisticated cybercrime campaign is reshaping how attackers exploit the modern software ecosystem, moving beyond isolated breaches into a model where compromise can spread autonomously across trusted development pipelines. BlueVoyant security researchers tracking an actor known as Replicating Marauder say the group has evolved its operations into a multi-phase supply chain campaign that leverages developer tools, package registries, and CI/CD workflows as both entry points

As enterprises accelerate adoption of AI agents, a new identity problem is emerging that looks increasingly difficult to control. Machines are no longer just infrastructure. They are becoming autonomous actors that request access, execute tasks, and interact with sensitive systems in ways that traditional identity frameworks were never designed to handle. This week, Ping Identity announced a set of platform updates aimed at redefining how organizations manage identity in what

A new phishing campaign is quietly turning everyday “free reward” emails into a global data theft machine, according to fresh research from KnowBe4 Threat Labs. Security analysts say the operation blends high-volume email distribution with polished brand impersonation and behavioral psychology to extract credit card details and personal data from victims at scale. The campaign revives a familiar lure. Users receive emails promising high-end prizes like smartphones or headphon