Enterprise Security Tech

U.S. employees are confident they can recognize fraudulent payment requests, but many are still relying on warning signs that generative AI can easily eliminate. A Trustmi survey of 1,000 U.S. workers involved in payment-related processes found that 78 percent believe they could identify a fraudulent request. Yet 70 percent said their top warning signs are typos, grammatical errors or unusual fonts. That creates a significant blind spot as attackers use AI to produce polished

The Pentagon has halted the next stage of its Cybersecurity Maturity Model Certification rollout, delaying a major expansion of independent cybersecurity audits for companies working across the defense supply chain. The Defense Department announced July 13 that it is suspending CMMC Phase 2, which had been scheduled to begin November 10, 2026. The phase would have significantly increased the number of contracts requiring assessments conducted by certified third-party organiza

As enterprises move AI agents from experiments into production, the biggest challenge may not be model intelligence, but whether organizations can trust those systems with real authority. In this interview, Descope co-founder Rishi Bhargava explains why identity, permissioning, and accountability will determine which companies can safely scale agentic AI, and which will be forced to keep it confined to the sandbox. Everyone seems to be talking about AI agents right now. Why h

As enterprises race to integrate AI into software development workflows, security leaders are facing a new challenge: how to govern code that is increasingly being written, modified, and deployed by AI systems. At the Gartner Security & Risk Management Summit 2026, Secure Code Warrior announced a new Adaptive Learning capability designed to help organizations reduce software security risk by connecting developer education directly to AI coding activity and real-world vulnerab

As enterprises race to operationalize artificial intelligence, a new security gap is emerging around autonomous AI agents that can act, decide, and interact with critical systems. Xage Security is positioning itself at the center of that shift with an expanded Zero Trust platform designed specifically to control and contain AI agents before they become a liability. Announced this week, the company’s latest update introduces what it calls a “jailbreak-proof” security layer for

Enterprises are entering a new era of certificate management pressure as public TLS certificate lifespans continue to shrink. What was once a 398-day renewal cycle has dropped to 200 days, with further reductions expected. The shift is forcing security and infrastructure teams to rethink how they manage digital certificates at scale or risk outages, compliance failures, and exploitable blind spots. Encryption Consulting is positioning its latest release, CertSecure Manager v3