Enterprise Security Tech

Artificial intelligence is spreading through corporate environments faster than security teams can track it, and new research suggests the biggest risks may be hiding outside traditional cybersecurity controls. Fable Security analyzed 90 days of security telemetry covering approximately 290,000 employees across more than 30 organizations during the second quarter of 2026. Its inaugural AI Behavior Index found that 34 percent of workers had a detectable generative AI applicati

Anthropic researchers have found a new problem hiding inside the rush toward autonomous AI: agents that behave acceptably on their own can become aggressive when other agents stand in the way. In new research on multiagent systems, Anthropic tested how Claude-based agents behave when operating in shared environments, including software projects where multiple agents depend on one another. The company argues that as AI agents spread across codebases, markets, and enterprise sy

A major software supply chain attack targeting LiteLLM has exposed credentials and CI/CD data linked to more than 2,500 organizations, underscoring how deeply AI infrastructure has become embedded in enterprise development environments. New analysis from SOCRadar indicates the incident was significantly broader than the roughly 40-minute window in March 2026 when malicious LiteLLM packages appeared on the Python Package Index, or PyPI. Researchers reconstructed activity spann

Hackers suspected of links to China used publicly available AI tools to automate a cyberattack against Taiwanese government systems, compromising at least 85 accounts and stealing more than 2,500 personnel records, according to researchers cited by the Financial Times. The four-day campaign, which took place in early July, represents what Israeli cybersecurity company Dream described as the first observed end-to-end autonomous cyberattack against a government target. Rather t

A newly disclosed Windows zero-day is raising fresh questions about Microsoft Defender after Cyderes researchers found that the exploit can bypass a security fix Microsoft released just last month. Dubbed ShieldBreak, the vulnerability allows a standard Windows user to escalate privileges to NT AUTHORITY\SYSTEM, effectively gaining the highest level of local access without exploiting the Windows kernel, corrupting memory, or requiring administrator rights. Cyderes researchers

This guest article was authored by Rachel Vrabec, CEO of Kanary Every CISO can tell you where their network ends. Far fewer can tell you where their organization's human attack surface begins. That gap is exactly where adversaries are operating. The most sophisticated attack campaigns targeting enterprises today don't start with a vulnerability scan or a zero-day exploit. They start with a LinkedIn search. They continue with a cross-referenced Instagram account, a data broker