Infrastructure Security

PHP2Shell explained: Timeline of the global vulnerability crisis

Two critical PHP RCE flaws, dubbed PHP2Shell, triggered mass patching worldwide. Here's the timeline, the technical details and what CISOs should do.

By Damon Garn • Oct. 27, 2026

AI makes Rust rewrites easier, but there are caveats

AI can make it easier to update legacy apps to Rust for stronger security, but a language switch does not solve system design problems.

By Ben Lutkevich • Oct. 27, 2026

Welcome to TechTarget Cybersecurity

Our expanded reporting, deeper analysis and sharper enterprise security coverage will help CISOs cut through the noise, assess emerging risks and make informed decisions that strengthen their security posture and business resilience.

By Sharon Shea , James Walker • Oct. 27, 2026

PHP2Shell disclosure unravels after leaks forced early patch drop

Although website shutdowns were inevitable to patch critical PHP flaws, early leaks and a broken embargo turned routine maintenance into an emergency scramble.

By James Walker • Oct. 22, 2026

Bug bounty reckoning: AI slop forces enterprise strategy shift

As AI fills bug bounty queues with low-quality reports, tech giants like Intel and Google are rethinking paid rewards and shifting toward automated internal defenses.

By Dan Raywood • Oct. 14, 2026

The rise of token-theft attacks: No password or MFA needed

Threat actors continue to find new ways to use stolen tokens to compromise protected systems. AI only makes it easier for them.

By Mary Pratt • Aug. 25, 2026

CISO’s guide to RAG data security risks and protection strategies

Retrieval-augmented generation enhances AI security, but expands the attack surface. Organizations need to aggressively manage RAG security to protect their networks and data.

By Damon Garn • Aug. 24, 2026

AI agent security must move beyond human-in-the-loop, experts say

Human-in-the-loop can't scale with AI agents. Security leaders at Black Hat explained action-driven approaches for managing agentic ecosystems.

By Sharon Shea • Aug. 18, 2026

How to adopt microsegmentation: From visibility to control

Perimeter-based security can't meet modern threats. With microsegmentation, defenders improve their awareness, data protection, containment and compliance.

By Damon Garn • Aug. 11, 2026

Employees’ shadow AI use is poorly monitored, survey finds

Employee behavior has always presented one of the biggest enterprise cybersecurity challenges. Add AI into the equation, and education and governance become even more critical.

By Craig Galbraith • July 21, 2026

Why CISOs should automate SBOM management with AI

AI tools can drive continuous, accurate SBOM management that turns compliance documentation into real-time supply chain security. Here's what CISOs should know.

By Matthew Smith • July 16, 2026

Why CISOs should use zero-trust security for IoT

IoT devices have significant business benefits but also open enterprises to escalating security risks. Discover why zero trust is the most practical way to secure IoT.

By Andrew Froehlich • July 15, 2026

Evaluating secure enterprise browsers vs. security plugins

Malicious actors have long targeted and exploited browser vulnerabilities. The widespread adoption of AI increases the risk, forcing CISOs to reevaluate browser security options.

By John Burke • July 7, 2026

TLS certificate lifetime changes: What CISOs must do now

TLS certificates now expire after 200 days. That window will soon narrow to 100 days and eventually to 47. Is your organization ready?

By Samira Sarraf • July 1, 2026

Zscaler lays out its vision to secure the AI era at Zenith Live

Zscaler's Zenith Live event revealed AI-focused innovations like Enterprise Browser and ZAgent Framework, positioning zero trust at the core of AI security.

By John Grady • June 17, 2026

Cloud security metrics and KPIs: A CISO’s guide

Today's distributed computing environments require a cloud strategy that goes well beyond choosing the best security tools. Instead, CISOs need a far more integrated approach.

By Dave Shackleford • June 16, 2026

How to implement zero trust for AI

As organizations embed AI into business systems, they also expand the attack surface. Applying zero trust to AI can help mitigate the risk.

By Damon Garn • May 12, 2026

Claude Mythos changes the AI security threat matrix

The Claude Mythos preview has raised alarms about AI-driven threats. Is this a new era for cybersecurity professionals?

By Phil Sweeney • May 7, 2026

Buyer’s guide for CISOs: Cloud security posture management

Cloud security posture management is a critical component of cloud defense strategy. Need help choosing a CSPM platform? This guide lists key features and platforms to consider.

By Dave Shackleford • May 6, 2026

5 top SIEM use cases in the enterprise

In the age of AI everything, SIEM isn't exactly flashy -- but it still matters. Explore top SIEM use cases that span the enterprise, from cybersecurity to IT ops.

By John Burke • April 25, 2026

CISO checklist: Cybersecurity platform or marketing ploy?

The cybersecurity market is booming with countless vendors claiming to offer unified platforms. Here's how to separate the real deal from empty marketing.

By Alissa Irei • April 10, 2026

RSAC 2026 recap: AI security and network security trends

RSAC 2026 spotlighted AI security as a key theme. Explore insights on securing AI agents, enterprise browsers, sovereignty and platformization trends.

By John Grady • April 7, 2026

Cloud security architecture: Enterprise cloud blueprint for CISOs

As cloud adoption unlocks innovation, it also introduces new risks. A sound cloud security architecture is the blueprint for secure enterprise cloud deployments.

By Dave Shackleford • April 2, 2026

10 enterprise secure remote access best practices

Remote access is a critical necessity in today's work-from-anywhere environment. It's also incredibly risky. But there are ways to protect assets and combat potential attacks.

By Karen Kent • March 24, 2026

How to start an enterprise bug bounty program: A CISO’s guide

Bug bounty programs offer flexible rewards, global expertise and enhanced security, helping organizations address vulnerabilities before exploitation.

By Rob Shapland • March 11, 2026