Infrastructure Security

Why Black October signals a new era of cyber-risk

Experts unpack Black October 2026, a wave of cybersecurity incidents that show how AI accelerates exploitation of old vulnerabilities. Read their insights to get ahead of the next storm.

By Sharon Shea • Oct. 30, 2026

Google’s ACE offers cloud alternative for agentic isolation

Google steps into the infrastructure-based agentic security fray with Agent Compute Engine, rooting sandboxes in its TPUs.

By Agam Shah, freelance writer • Oct. 30, 2026

CISOs and UC teams: Join forces against vishing attacks

Vishing is a major security issue for enterprise communications and only growing more threatening thanks to AI. Learn how attackers exploit UC platforms and explore defense strategies.

By Irwin Lazar • Oct. 30, 2026

What FBI breach tells CIOs about outsourced IT oversight

A missed patch at the FBI shows why CIOs need more than provider reports. Here's how to verify critical outsourced work without checking every task.

By Liz Hughes • Oct. 28, 2026

PHP2Shell explained: Timeline of the global vulnerability crisis

Two critical PHP RCE flaws, dubbed PHP2Shell, triggered mass patching worldwide. Here's the timeline, the technical details and what CISOs should do.

By Sean Kerner • Oct. 27, 2026

AI makes Rust rewrites easier, but there are caveats

AI can make it easier to update legacy apps to Rust for stronger security, but a language switch does not solve system design problems.

By Ben Lutkevich • Oct. 27, 2026

Welcome to TechTarget Cybersecurity

Our expanded reporting, deeper analysis and sharper enterprise security coverage will help CISOs cut through the noise, assess emerging risks and make informed decisions that strengthen their security posture and business resilience.

By Sharon Shea , James Walker • Oct. 27, 2026

PHP2Shell disclosure unravels after leaks forced early patch drop

Although website shutdowns were inevitable to patch critical PHP flaws, early leaks and a broken embargo turned routine maintenance into an emergency scramble.

By James Walker • Oct. 22, 2026

Bug bounty reckoning: AI slop forces enterprise strategy shift

As AI fills bug bounty queues with low-quality reports, tech giants like Intel and Google are rethinking paid rewards and shifting toward automated internal defenses.

By Dan Raywood • Oct. 14, 2026

The rise of token-theft attacks: No password or MFA needed

Threat actors continue to find new ways to use stolen tokens to compromise protected systems. AI only makes it easier for them.

By Mary Pratt • Aug. 25, 2026

CISO’s guide to RAG data security risks and protection strategies

Retrieval-augmented generation enhances AI security, but expands the attack surface. Organizations need to aggressively manage RAG security to protect their networks and data.

By Damon Garn • Aug. 24, 2026

AI agent security must move beyond human-in-the-loop, experts say

Human-in-the-loop can't scale with AI agents. Security leaders at Black Hat explained action-driven approaches for managing agentic ecosystems.

By Sharon Shea • Aug. 18, 2026

How to adopt microsegmentation: From visibility to control

Perimeter-based security can't meet modern threats. With microsegmentation, defenders improve their awareness, data protection, containment and compliance.

By Damon Garn • Aug. 11, 2026

Employees’ shadow AI use is poorly monitored, survey finds

Employee behavior has always presented one of the biggest enterprise cybersecurity challenges. Add AI into the equation, and education and governance become even more critical.

By Craig Galbraith • July 21, 2026

Why CISOs should automate SBOM management with AI

AI tools can drive continuous, accurate SBOM management that turns compliance documentation into real-time supply chain security. Here's what CISOs should know.

By Matthew Smith • July 16, 2026

Why CISOs should use zero-trust security for IoT

IoT devices have significant business benefits but also open enterprises to escalating security risks. Discover why zero trust is the most practical way to secure IoT.

By Andrew Froehlich • July 15, 2026

Evaluating secure enterprise browsers vs. security plugins

Malicious actors have long targeted and exploited browser vulnerabilities. The widespread adoption of AI increases the risk, forcing CISOs to reevaluate browser security options.

By John Burke • July 7, 2026

TLS certificate lifetime changes: What CISOs must do now

TLS certificates now expire after 200 days. That window will soon narrow to 100 days and eventually to 47. Is your organization ready?

By Samira Sarraf • July 1, 2026

Zscaler lays out its vision to secure the AI era at Zenith Live

Zscaler's Zenith Live event revealed AI-focused innovations like Enterprise Browser and ZAgent Framework, positioning zero trust at the core of AI security.

By John Grady • June 17, 2026

Cloud security metrics and KPIs: A CISO’s guide

Today's distributed computing environments require a cloud strategy that goes well beyond choosing the best security tools. Instead, CISOs need a far more integrated approach.

By Dave Shackleford • June 16, 2026

How to implement zero trust for AI

As organizations embed AI into business systems, they also expand the attack surface. Applying zero trust to AI can help mitigate the risk.

By Damon Garn • May 12, 2026

Claude Mythos changes the AI security threat matrix

The Claude Mythos preview has raised alarms about AI-driven threats. Is this a new era for cybersecurity professionals?

By Phil Sweeney • May 7, 2026

Buyer’s guide for CISOs: Cloud security posture management

Cloud security posture management is a critical component of cloud defense strategy. Need help choosing a CSPM platform? This guide lists key features and platforms to consider.

By Dave Shackleford • May 6, 2026

5 top SIEM use cases in the enterprise

In the age of AI everything, SIEM isn't exactly flashy -- but it still matters. Explore top SIEM use cases that span the enterprise, from cybersecurity to IT ops.

By John Burke • April 25, 2026

CISO checklist: Cybersecurity platform or marketing ploy?

The cybersecurity market is booming with countless vendors claiming to offer unified platforms. Here's how to separate the real deal from empty marketing.

By Alissa Irei • April 10, 2026