Security Operations

Federal AI security guidance misses real-world enterprise threats

Federal AI incident response guidance leaves enterprise security teams to bridge critical gaps around rogue agents and prompt injection.

By Nathan Eddy • Oct. 27, 2026

PHP2Shell explained: Timeline of the global vulnerability crisis

Two critical PHP RCE flaws, dubbed PHP2Shell, triggered mass patching worldwide. Here's the timeline, the technical details and what CISOs should do.

By Damon Garn • Oct. 27, 2026

Some businesses are pulling back from AI. CISOs can’t afford to

Some businesses are pulling back from AI amid low ROI, but CISOs can’t afford to lose it. Here’s how to protect AI in security operations.

By Richard Livingston • Oct. 27, 2026

Welcome to TechTarget Cybersecurity

Our expanded reporting, deeper analysis and sharper enterprise security coverage will help CISOs cut through the noise, assess emerging risks and make informed decisions that strengthen their security posture and business resilience.

By Sharon Shea , James Walker • Oct. 27, 2026

Max-severity GitLab flaw lets attackers run code on servers

A high-impact GitLab flaw lets unauthenticated attackers run code on self-managed servers. Every release since 2014 is affected.

By Alissa Irei • Oct. 22, 2026

Just-in-time access: A CISO’s guide to reducing standing privilege

Adopting just-in-time access helps companies better control who is accessing corporate resources, dovetailing with other key strategies such as PAM and zero trust.

By Damon Garn • Oct. 22, 2026

Cloud repatriation: What CISOs need to know

Moving workloads off the public cloud can offer greater control over costs and data, but it also brings new security responsibilities and operational demands.

By Jaikumar Vijayan • Oct. 20, 2026

AI agents risk blind spots without shared security data, experts warn

Building a common, continuously updated view across security tools raises practical questions about data ownership, freshness and resolving disagreements.

By Nathan Eddy • Oct. 20, 2026

AI in the SOC: 5 high-value use cases for enterprise SOCs

AI helps enterprise SOCs prioritize alerts, speed up investigations, improve threat hunting, streamline incident response and reporting, and manage risks with human oversight.

By Damon Garn • Oct. 19, 2026

Crest CEO: ‘Basics shouldn’t be abandoned in the race to deploy AI’

Crest's Nick Benson breaks down new AI testing standards, human oversight and the rapid shift toward mandatory security compliance.

By James Walker • Oct. 16, 2026

5 cybersecurity training program mistakes most companies make

Companies need to reassess their cybersecurity awareness training programs to ensure they deliver the right information to the proper employees.

By Mary Pratt • Oct. 15, 2026

How AI threat detection is transforming enterprise cybersecurity

AI-powered threat detection transforms cybersecurity by analyzing network traffic, user behavior and security data to identify evolving threats in real time.

By Stephen Bigelow • Oct. 15, 2026

CIRCIA reporting deadline puts OT data integrity under the microscope

As CISA's incident reporting rule advances, critical infrastructure operators must prove the data and commands driving operations are authentic -- even when networks seem secure.

By Richard Livingston • Oct. 15, 2026

Best practices to evaluate LLM-based AI security tools

LLM-based AI is accelerating cyberthreats, but also security capabilities. Discover what CISOs need to know when evaluating AI security tools.

By John Burke • Oct. 13, 2026

Kiteworks CISO: Why We Shut Down Systems Before Finding Vulnerability

A federal warning prompted the vendor to take systems offline before confirming a breach -- a decision that exposes difficult questions about downtime and risk.

By Nathan Eddy • Oct. 13, 2026

The CISO dilemma: Why AI speed makes security basics essential

Insights from the CyberRisk Alliance Summit reveal that AI hasn't rewritten the threat landscape -- it has simply erased the time defenders have to fix basic operational flaws.

By James Walker • Oct. 2, 2026

Why cybersecurity’s future isn’t AI vs. humans -- it’s both

AI won't replace cybersecurity analysts; it will augment them. Experts at the Billington Cybersecurity Summit explain why human judgment remains essential.

By Richard Livingston • Sept. 29, 2026

Human or AI: A CISO’s guide to identifying machine threats

AI is making it harder to discern if the adversary is human or machine. Here's how CISOs can spot machine-driven threats and respond.

By Matthew Smith • Sept. 23, 2026

Cybersecurity burnout is an operational threat: AI can help

Analyst burnout is more than just a wellness issue; it's a critical security risk. At the Billington Cybersecurity Summit, experts discussed how to fix the crisis.

By Richard Livingston • Sept. 23, 2026

What CISOs need to know about AIOps security

AI offers compelling benefits for IT, but organizations have to weigh operational advantages against risks that can spread unchecked through the network.

By Ed Moyle • Sept. 21, 2026

Defenders call out OpenAI defense pledge, Astra release timing

OpenAI pledged $1B to cyber defenders the same day it released Astra -- its most powerful offensive model yet. Some experts warn that defense is getting left behind.

By Alissa Irei • Sept. 4, 2026

Making sense of cybersecurity’s converging categories

AI is eliminating the dividing lines that once delineated technologies such as vulnerability management and network security. Enterprises have to find a new way to evaluate vendors.

By Todd Thiemann • Sept. 3, 2026

CISO’s guide to vector database security

Vector databases provide users with semantic search capabilities, but they can also expose enterprises to significant risks if not properly protected.

By Damon Garn • Aug. 31, 2026

CISA red team reveals why some SOCs fail and others succeed

CISA tested two critical infrastructure SOCs with similar red team tactics. The results expose dangerous gaps in detection, response and credential security.

By Sharon Shea • Aug. 28, 2026

Autonomous AI exploits raise stakes for vulnerability management

AI agents are increasingly finding and exploiting software vulnerabilities. The bigger challenge for security teams is figuring out which of those flaws matter most.

By Craig Galbraith • Aug. 25, 2026