The Leadership Question How can an authorizing official approve a system whose model, prompts, memory, tools, permissions, ...

Industrial Control System Integrators Addressing the cybersecurity concerns associated with outside contractors that oversee ...

Modern connected applications in industry, rugged edge, autonomous vehicles and critical infrastructure rely heavily on ...

Securing frontier AI systems such as GPT-6 Astra requires multiple layers of protection rather than relying on a single safeguard. OpenAI describes containment as one part of a broader technical ...

The author works on public-key infrastructure and certificate-lifecycle security, and has spent years on the operational side of trust-anchor changes. This piece focuses on the US trust ecosystem, but ...

An employee asks an AI assistant to summarize a potential acquisition. The request takes seconds. Behind it, a system may retrieve financial statements, internal emails, legal advice, and strategic ...

Q1. The report suggests that misuse of AI by employees may currently be a larger concern for organizations than use of AI by threat actors. How often does that internal misuse vector show up in the ...

While Cyber Defense Magazine, Cyber Defense TV, Cyber Defense Radio, Cyber Defense Webinars, and Cyber Defense Conferences are not affiliated with ISC2, ISACA, CompTIA, or other certification bodies, ...

Imagine walking into your Security Operations Center on a Monday morning and discovering that your enterprise AI assistant has been quietly leaking internal project names, infrastructure details, and ...

E-commerce has a problem. Really, everyone has a problem, but e-commerce in particular has a serious problem. Mass AI scraping using residential and commercial IP ranges, free and cheap VPC hosts, and ...

On September 28, 2026, NVIDIA announced its new Open Agent Safety Platform to directly tackle the rising security concerns associated with fully autonomous AI deployment. As organizations increasingly ...

Most cloud security conversations still start with detection. Which solutions catch the most alerts? Which ones catch them first? Who has the broadest coverage across endpoint, cloud, identity, and ...