In the ever-evolving cybersecurity landscape, Microsoft has introduced various new features in Windows 11 designed to protect users from modern workplace threats. Among such features, Smart App Control (SAC) changes how Windows devices handle, and occasionally block, unwanted or potentially malicious applications. But what exactly is Smart App Control? How does it work, who benefits…
Tag: In
AI, Cybersecurity, Data Breaches, Global Security News, Network Security, Risk Management
Cybersecurity trends in SEC filings
In 2023, the Securities and Exchange Commission (SEC) required public companies to include a new section in their 10-K annual filings that is devoted to cybersecurity. This section is meant to address “cybersecurity risk management, strategy, governance and incidents.” I got curious as to what senior cybersecurity executives are conveying about their companies in these…
AI, Apps, Cybersecurity, Global Security News, Network Security, Risk Management
Stopping the quiet drift toward excessive agency with re-permissioning
In their infancy, LLM models were not difficult to contain. You gave a prompt; they responded, and if something was wrong it was usually “just text.” This could take the form of a summary that missed the best bits, a tone-deaf line or a wordy sentence. But then, agents were co-opted as the core reasoning…
AI, Apps, Compliance, Data Breaches, Global Security News, Network Security, privacy, Risk Management
Securing RAG pipelines in enterprise SaaS
In the enterprise SaaS space, AI agents are becoming an integral part of the SaaS product. To make these intelligent agents truly useful, they need contextual, customer-specific knowledge, something standard Large Language Models (LLMs), open source or otherwise, inherently lack since they are not trained on customer proprietary data. Retrieval-Augmented Generation (RAG) is the bridge…
AI, Global Security News
Introducing Gemini Enterprise Agent Platform, powering the next wave of agents
In the early days of generative AI, building safe and reliable business tools took massive engineering effort and a high tolerance for trial and error. We helped solve that with Vertex AI, our trusted AI development platform. But today, we’re managing a different level of complexity, with agents interacting across multiple systems — and often without…
AI, Cloud Security, Global Security News, Risk Management
Google gets agent-ready for the Mythos age
In response to Anthropic Mythos, instead of launching another LLM, Google unveiled a broad push toward agentic, AI-driven defense at Google Cloud Next ‘26 to help SOC analysts as they scramble to keep up with the influx of CVEs Mythos threatens. As Mythos promises more vulnerabilities, and reports of unauthorized access despite its limited preview…
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Europe, Exploits, Global Security News, Network Security, Risk Management
Palo Alto’s Helmut Reisinger sees a cyber sea change ahead as AI advances
In two decades, Palo Alto Networks has evolved from a next-generation niche player to one of the largest global cybersecurity giants today. Under its mantra of “platformization,” the company has catapulted its revenues over its closest competitors and boosted its stock valuation to over $130 billion. No stranger to AI use in cybersecurity, Palo Alto recently announced…
AI, APAC, Europe, Global Security News, Network Security, Politics, Risk Management
OpenAI pulls out of a second Stargate data center deal
In the space of one week, OpenAI has pulled out of two European Stargate data center deals, one in the UK and the second in Norway. Observers attribute the move to the company taking a more disciplined approach to its massive expenses, with OpenAI executives trying to make their books look better in a common…
AI, Apps, Global Security News, Risk Management
Curity looks to reinvent IAM with runtime authorization for AI agents
In 2026, enterprise developers are building and deploying the first generation of powerful, increasingly autonomous AI agents at incredible speed. Now comes the hard part: working out how to secure them. Vendors in the space are facing multiple challenges. To begin with, traditional identity and access management (IAM) tools were never designed to secure anything…
AI, Apps, Global Security News, Risk Management
Curity looks to reinvent IAM with runtime authorization for AI agents
In 2026, enterprise developers are building and deploying the first generation of powerful, increasingly autonomous AI agents at incredible speed. Now comes the hard part: working out how to secure them. Vendors in the space are facing multiple challenges. To begin with, traditional identity and access management (IAM) tools were never designed to secure anything…
AI, Global Security News
PC sales rise in Q1 despite memory shortage — IDC
In the first quarter of 2026, 65.6 million PCs were sold worldwide, according to data released this week by IDC. That represents a 2.5% increase compared to the same quarter a year ago. The research firm attributed the increase to customers moving to buy PCs now ahead of expected significant price hikes. The fact that…
AI, Global Security News
Video: SotaTek US CEO on AI Infrastructure Mistakes MSPs Must Fix
In this Channel Insider Partner POV episode, Katie Bavoso sits down with MK Tong, CEO of SotaTek USA, to break down why infrastructure—not AI models—is the real bottleneck for enterprise success. As AI workloads grow more complex, many organizations are rushing deployments without rethinking their infrastructure strategy. Tong shares where companies go wrong, how infrastructure…
AI, Compliance, Cybersecurity, Data Breaches, Global Security News, Network Security, privacy, Russia
The tabletop exercise grows up
In the early 1800s, Prussian officers began rehearsing battles around sand tables. They called it Kriegsspiel, and it worked because it forced them to make high-stakes decisions under pressure. Fast forward to today, and that same concept has become cybersecurity’s go-to tool for crisis preparedness: the tabletop exercise. For good reason: it still works. Full…
AI, Compliance, Cybersecurity, Data Breaches, Global Security News, Network Security, privacy, Russia
The tabletop exercise grows up
In the early 1800s, Prussian officers began rehearsing battles around sand tables. They called it Kriegsspiel, and it worked because it forced them to make high-stakes decisions under pressure. Fast forward to today, and that same concept has become cybersecurity’s go-to tool for crisis preparedness: the tabletop exercise. For good reason: it still works. Full…
AI, Apps, Compliance, Endpoint, Exploits, Global Security News, malware, Network Security
Why Kubernetes controllers are the perfect backdoor
In my years securing cloud-native environments, I’ve noticed a recurring blind spot. We obsess over the “front doors” such as exposed dashboards, misconfigured RBAC, or unpatched container vulnerabilities. We harden the perimeter, but we often ignore the machinery humming inside. Sophisticated adversaries have moved beyond simple smash-and-grab tactics. They don’t just want to run a…
AI, Apps, Compliance, Cybersecurity, Global Security News, Risk Management
Video: SecurityBridge CEO on SAP Security, AI Risks & 2026 Priorities
In this Channel Insider Partner POV interview, host Katie Bavoso sits down with Jesper Zerlang, CEO of SecurityBridge, to discuss SAP cybersecurity, AI-driven threats like data poisoning, and why channel-first strategies will define partner growth in 2026. Zerlang shares insights on securing mission-critical SAP environments, evolving compliance challenges for CISOs and CIOs, and how partners…
AI, Global Security News
Is MacBook Neo the Mac’s iPhone moment?
In news that will strike a chill to the heart of competing PC makers, Apple has effectively confirmed that demand for its new MacBook Neo is massively exceeding expectations. “Mac just had its best launch week ever for first-time Mac customers,” Apple CEO Tim Cook wrote on X. “We love seeing the enthusiasm!” Apple also introduced new MacBook…
AI, Exploits, Global Security News, Government & Policy, Network Security, Risk Management
Can you prove the person on the other side is real?
In my role, I spend a lot of time thinking about what “trust” means when money, grief and identity collide. By 2026, the real competition in our space won’t be who automates fastest or offers the most AI features. It will be who can still tell a legitimate executor, beneficiary or family representative from a…
AI, Global Security News, privacy
Nvidia NemoClaw promises to run OpenClaw agents securely
In the few short weeks since OpenClaw became the biggest story in agentic AI, it has been dogged by concerns that it is not secure enough to be safely let loose in enterprises. This week at the Nvidia GPU Technology Conference (GTC) conference, CEO Jensen Huang announced what he believes is the answer: NemoClaw. Built…
AI, Global Security News, privacy
Nvidia NemoClaw promises to run OpenClaw agents securely
In the few short weeks since OpenClaw became the biggest story in agentic AI, it has been dogged by concerns that it is not secure enough to be safely let loose in enterprises. This week at the Nvidia GPU Technology Conference (GTC) conference, CEO Jensen Huang announced what he believes is the answer: NemoClaw. Built…
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, Risk Management
AI use is changing how much companies pay for cyber insurance
In July 2025, McDonald’s had an unexpected problem on the menu, one involving McHire, its AI-powered platform used to recruit and screen job applicants. The system, developed by Paradox.ai, featured a rookie-level security flaw: the backend for restaurant operators accepted “123456” as both username and password, and lacked multi-factor authentication. As a result, the personal…
AI, Apps, Data Breaches, Exploits, Global Security News, Network Security, Risk Management
Why access decisions are becoming the weakest link in identity security
In my nearly two decades leading identity and risk programs, I’ve learned a sobering truth that every CISO eventually confronts: hackers don’t hack in — they log in. We often obsess over the perimeter and the sophistication of technical exploits, but many of the most damaging security failures I’ve witnessed didn’t involve a zero-day or…
AI, Apps, Cybersecurity, Exploits, Global Security News, malware, Network Security, Risk Management
14 old software bugs that took way too long to squash
In 2021, a vulnerability was revealed in a system that lay at the foundation of modern computing. An attacker could force the system to execute arbitrary code. Shockingly, the vulnerable code was almost 54 years old — and there was no patch available, and no expectation that one would be forthcoming. Fortunately, that’s because the…
AI, Apps, Global Security News, Government & Policy, Politics, Risk Management
Anthropic to Department of Defense: Drop dead
In recent weeks, AI giant Anthropic has been locked in a high‑stakes confrontation with the Trump administration’s Department of Defense (DoD) over new standard terms the Pentagon wants to impose on AI vendors. Defense Secretary Pete Hegseth had demanded contract language that would give the military “any lawful use” of Anthropic’s models, effectively stripping out…
AI, Compliance, Global Security News, Government & Policy
NATO approves iPhone and iPad to handle classified info
In an impressive and unique industry first that reflects the work Apple has done on mobile device security since the first iPhone arrived almost 20 years ago, the North Atlantic Treaty Organization (NATO) says iPhones and iPads running iOS 26 are secure enough to handle classified information in NATO-restricted environments — pretty much out-of-the-box. That’s going…
AI, Cybersecurity, Global Security News, Network Security, Risk Management
Video: Harbor IT on NENS Acquisition and Why the Generalist MSP Model Is Dying
In this episode of Channel Insider: Partner POV, host Katie Bavoso sits down with leaders from Harbor IT to discuss the company’s acquisition of New England Network Solutions, better known as NENS, and what it means for the future of managed services. CFO Hannah Paige and newly appointed CRO Michael Kourkoulakos, the former CEO of…
AI, china, Global Security News
SerpApi fights back against Google lawsuit
The web scraping wars have just intensified. In December, Google announced that it was taking action against web scraping company SerpApi, whose API lets customers’ scrapers mimic human searching, claiming that the company’s tool was “circumventing security measures” that protect its search results to feed the voracious appetite for training data required by many…
AI, Global Security News
5 reasons the enterprise data center will never die
In 2019, Gartner analyst Dave Cappuccio issued the headline-grabbing prediction that by 2025, 80% of enterprises will have shut down their traditional data centers and moved everything to the cloud. A lot has gone down since 2019, and Gartner’s latest guidance on the topic comes from John-David Lovelock, vice president analyst,who says, “It’s not as…
AI, Data Breaches, Exploits, Global Security News, Network Security, Risk Management
The ephemeral infrastructure paradox: Why short-lived systems need stronger identity governance
In my experience leading engineering projects, I have encountered the same pattern repeatedly. We obsess over deployment speed. We measure success in commit velocity and uptime. But we rarely pause to ask the most uncomfortable question in the room: Who actually owns the identities we just spun up? This silence isn’t malicious; it’s structural. We…
AI, Channel Insider, Global Security News, Video
Video: Hype, Bubble, or Breakthrough? Talking All Things AI with The Neuron
In this special crossover episode of Channel Insider: Partner POV, host Katie Bavoso welcomes the hosts of sister podcast, The Neuron — Grant Harvey and Corey Noles — alongside Channel Insider Managing Editor Victoria Durgin for a fast-paced, unfiltered discussion about the state of AI in 2026. From Anthropic vs. OpenAI vs. Google to the…
AI, Apps, Compliance, Cybersecurity, Exploits, Global Security News, Penetration Testing, Risk Management, Security, Security Practices, Risk Management
The hard part of purple teaming starts after detection
In my recent articles for CSO, I’ve talked about the limits of current SOC models and the importance of rehearsal. This time, I want to focus on something that’s becoming increasingly clear: purple teaming has lost its depth. We’ve turned one of the most powerful tools for resilience into a transactional exercise that feels reassuring…
AI, APAC, Cybersecurity, Exploits, Global Security News, Patch Management Software, Risk Management, Security, Threat and Vulnerability Management, Risk Management
CISOs must separate signal from noise as CVE volume soars
In 2026, the cybersecurity industry is expected to cross a threshold it has never reached before: More than 50,000 publicly disclosed software vulnerabilities in a single year. According to a new forecast from the Forum of Incident Response and Security Teams (FIRST), the median projection for 2026 is roughly 59,000 Common Vulnerabilities and Exposures (CVEs).…
AI, Endpoint, Endpoint Protection, Security, Vulnerabilities, Windows Security, Exploits, Global Security News, malware
Attackers exploit decade‑old Windows driver flaw to shut down modern EDR defenses
In a recent incident, attackers abused a legitimate but vulnerable Windows kernel driver to shut down endpoint security tools during an ongoing incident response. According to a Huntress report, the activity was observed during a customer investigation in early 2026 and involved the use of an old EnCase forensic driver (by Guidance Software) as part…