Enterprise Security Tech

Data Privacy Day has long been about safeguarding personal information, but in 2026 the conversation has shifted decisively. The biggest threat is no longer just lost laptops, misconfigured servers, or credential theft. It is the rapid normalization of artificial intelligence inside everyday business workflows, often faster than security teams can keep up. Across enterprises, AI is now deeply embedded in how work gets done, from responding to RFPs and managing customer inter

WhatsApp is preparing to roll out a new security option designed for users who face a higher risk of targeted surveillance, including journalists, activists, and public figures. The feature, called Strict Account Settings, reflects a broader industry shift toward defensive tools that assume attackers may already be well resourced, persistent, and patient. Once enabled, the setting places tighter limits on how people can interact with an account. Messages from unknown contact

As Data Privacy Day 2026 arrives, the conversation around protecting personal information is shifting in a way that feels both inevitable and unsettling. Data itself is no longer the first line of defense. Identity is. Across modern enterprises, identity has quietly become the control plane that governs access to systems, applications, and sensitive data. Attackers understand this reality better than most defenders, and the rapid spread of cloud services, non-human identitie

According to research from Simcha Kosman, a senior cyber researcher at CyberArk Labs , a critical remote code execution flaw in Apache bRPC has put a spotlight on a class of debugging features that quietly sit inside many production systems, rarely scrutinized until something goes wrong. Tracked as CVE-2025-60021 and scored at a near-maximum CVSS 9.8, the vulnerability affects all versions of Apache bRPC prior to 1.15.0. It stems from a command injection issue in the framew

In a software world shaped by supply chain attacks, brittle dependencies, and increasingly opinionated Linux distributions, control has become as important as code. Chainguard is making a deliberate move to hand more of that control back to the people actually running its operating system in production. The company announced the formation of a customer-led steering body for Chainguard OS called the Fully User Directed Committee, or FUD Committee. The name is intentionally pl

The future of enterprise security is supposed to be autonomous. AI agents negotiate contracts, move money, write code, and respond to incidents at machine speed. But according to a new industry survey, the foundation those agents depend on is still riddled with legacy systems that attackers already know how to exploit. That tension sits at the center of The Identity Underground Annual Pulse 2026 , a new report drawing on survey data and candid commentary from more than 150 id