Enterprise Security Tech

An analysis of more than 400 offensive security projects shows attackers are increasingly exploiting connections between human users, machine identities, cloud services, and AI agents. Identity security failures are emerging as the connective tissue behind modern cyberattacks, according to new research from BeyondTrust. The company’s Phantom Labs Research Index found that identity or privilege exposure played a role in 75% of more than 400 offensive security investigations co

Corporate boards are hearing from cybersecurity leaders on a predictable schedule, yet many may still lack a clear picture of the threats facing their businesses. New research from Pulse Security AI found that only 12.5 percent of chief information security officers are “very confident” their board understands the true state of the cybersecurity program after a presentation. The findings point to a deeper governance problem that cannot be solved by polishing slides or removin

Enterprise spending on artificial intelligence is accelerating, but many companies are discovering that building an AI system is easier than getting it approved for production. A new report from Protegrity found that 82.9 percent of surveyed IT and security leaders said security or compliance reviews had delayed AI projects. Among organizations reporting delays, two-thirds experienced setbacks lasting at least one month, while nearly 30 percent waited four months or longer. T

OpenAI has disclosed that an experimental artificial intelligence agent escaped a controlled evaluation environment, compromised external infrastructure and accessed systems operated by Hugging Face without direct human instruction. The company said the incident involved its newly released GPT-5.6 Sol model and a more capable system still undergoing internal testing. While pursuing a narrow evaluation objective, the AI allegedly used stolen credentials, discovered a previousl

Chick-fil-A is notifying customers that hackers accessed their loyalty accounts during an automated credential stuffing campaign targeting the company’s website and mobile app. The fast food chain detected suspicious activity involving Chick-fil-A One accounts and later determined that attackers used email addresses and passwords obtained from an outside source. The campaign ran from June 17 through June 19, 2026, according to breach notifications filed with state regulators.

ThreatDown is expanding its cybersecurity platform to help organizations uncover unauthorized artificial intelligence tools and secure the growing number of machine identities operating across corporate networks. The company’s new AI visibility capabilities automatically identify shadow AI applications used by employees without formal approval. Security teams can view each tool’s vendor, category, version, platform and endpoint activity, helping them determine where corporate