Technology Archives

EAR vs ITAR: What Export Administration Regulations Control

EAR vs. ITAR: What the Export Administration Regulations Actually Control

by Danielle Barbour August 28, 2026August 28, 2026 | Regulatory Compliance

Many exporters wrongly assume export controls apply only to obviously military goods — weapons, munitions, defense hardware. That assumption is both common and costly. The Export Administration Regulations (EAR) reach...

AI Agents Persist After Credential Revocation

AI Agents Outlive Revoked Credentials: What Black Hat and DEF CON 2026 Taught CISOs

by Patrick Spencer August 21, 2026August 21, 2026 | Cybersecurity Risk Management

Revoking a credential used to end an incident. At Black Hat and DEF CON 2026, it barely slowed one down. Both conferences, held in Las Vegas in August 2026, have...

FedRAMP for the Private Sector: A FedRAMP Compliant Private Cloud Benefits Commercial Businesses, Too

FedRAMP for the Private Sector: Why Companies Without a Federal Mandate Are Adopting It Anyway

by Robert Dougherty August 16, 2026August 27, 2026 | Regulatory Compliance

FedRAMP was built for one purpose: verifying that cloud service providers meet federal security standards before government agencies use them. Private companies with no government contracts and no federal data...

AI Agent Funding Surge Exposes Unmanaged Identity Risks

AI Agent Security Now Dominates Cybersecurity Seed Funding—Here’s Why That Should Worry You

by Patrick Spencer August 3, 2026August 3, 2026 | Cybersecurity Risk Management

Venture capital just confirmed what security leaders have been arguing internally for the better part of a year: agentic AI is now the single largest new attack surface enterprises have...

EU AI Act Transparency: Enterprise Governance Now Required

EU AI Act Transparency Enforcement Begins: What It Means for Enterprise AI Governance

by Marc ten Eikelder August 3, 2026August 3, 2026 | Regulatory Compliance

A regulator does not need to name a single company to change how thousands of companies operate. That is exactly what happened on August 2, 2026, when the European Commission’s...

Sysadmins Limit AI Autonomy in Production Systems

Why Sysadmins Still Don’t Trust AI With Production Systems

by Patrick Spencer August 3, 2026August 3, 2026 | Cybersecurity Risk Management

Two years of vendor promises about self-patching infrastructure have collided with a much less exciting reality: the people who actually run production systems still won’t let AI near the controls....

Cyber Resilience Demands CEO-CISO Alignment

Cyber Resilience: Closing the CEO-CISO Perception Gap

by Patrick Spencer July 28, 2026July 28, 2026 | Cybersecurity Risk Management

A company can pass every compliance audit, deploy every recommended control, and still take six months to get back on its feet after a serious cyber incident. That is the...

Non-Human Identity Governance: AI's Overlooked Security Gap

AI Confidence Just Fell 17 Points. Non-Human Identity Governance Is Why.

by Patrick Spencer July 21, 2026July 21, 2026 | Cybersecurity Risk Management

A 17-point drop in self-reported AI maturity sounds like bad news. It isn’t. It’s what happens when IT leaders stop grading their AI programs on ambition and start grading them...

MFT vs. SFTP: Platform Security Beyond Transit

MFT vs. SFTP: Key Differences and Which Is More Secure

by Bob Ertl July 15, 2026July 15, 2026 | Managed File Transfer

SFTP is a protocol that encrypts files as they move between two systems, while Managed File Transfer (MFT) is a platform that uses SFTP and other protocols while adding governance,...

AI Agents Leak Private Data Without Hacking

GitLost Proves Your AI Agent Doesn’t Need to Be Hacked to Leak Your Data

by Patrick Spencer July 9, 2026July 9, 2026 | Cybersecurity Risk Management

An attacker needed no stolen password, no phishing email, and no exploit chain to pull private source code out of a GitHub organization. A single sentence, typed into a public...

Azure CLI ROPC Attacks Bypassing MFA Controls

81 Million Azure CLI Password Spray Attempts. The Attackers Weren’t Trying to Break MFA. They Were Going Around It.

by Patrick Spencer July 2, 2026July 2, 2026 | Cybersecurity Risk Management

Eighty-one million password spray attempts. Seventy-eight compromised accounts. Thirty-nine organizations affected. Those are the numbers Huntress published on July 1, 2026, from an active campaign targeting Microsoft Azure environments –...

AI Agents Are the New Attack Surface

by Patrick Spencer June 30, 2026June 30, 2026 | Cybersecurity Risk Management

Security researchers just demonstrated that your AI coding assistant can be turned into an exfiltration tool – and your existing detection controls won’t catch it. Not as a theoretical concern....

npm Package Silently Steals Codex Authentication Tokens

OpenAI Codex Authentication Tokens Stolen in npm Supply Chain Attack

by Patrick Spencer June 5, 2026June 5, 2026 | Cybersecurity Risk Management

Supply chain risk has traditionally focused on software dependencies that introduce vulnerabilities into compiled products — the type of compromise represented by SolarWinds and XZ Utils. The Codex token theft...

AI Sandbox Bypasses Expose Data-Layer Control Gaps

When the Guardrail Fails: AI Coding Tools and the Data-Layer Question

by Patrick Spencer June 1, 2026June 1, 2026 | Cybersecurity Risk Management

There was no press conference. No breach notification letter. A flaw in a widely used AI coding assistant — one that researchers say could be chained with prompt injection to...

Synack 2026: AI Shrinks Exploit Window to Hours

Synack 2026 Report: The Exploit Window Has Narrowed to Hours

by Patrick Spencer May 29, 2026May 29, 2026 | Cybersecurity Risk Management

On May 14, 2026, Synack published its 2026 State of Vulnerabilities Report, an analysis of more than 11,000 exploitable vulnerabilities identified across customer environments in 2025. The central finding from...

Get started.