Threats & Vulnerabilities
-
Getty Images
Federal AI security guidance misses real-world enterprise threats
Federal AI incident response guidance leaves enterprise security teams to bridge critical gaps around rogue agents and prompt injection.
By Nathan Eddy • Oct. 27, 2026 -
Yong Teck Lim via Getty Images
PHP2Shell explained: Timeline of the global vulnerability crisis
Two critical PHP RCE flaws, dubbed PHP2Shell, triggered mass patching worldwide. Here's the timeline, the technical details and what CISOs should do.
By Damon Garn • Oct. 27, 2026 -
Getty Images
Some businesses are pulling back from AI. CISOs can’t afford to
Some businesses are pulling back from AI amid low ROI, but CISOs can’t afford to lose it. Here’s how to protect AI in security operations.
By Richard Livingston • Oct. 27, 2026 -
Getty Images
Welcome to TechTarget Cybersecurity
Our expanded reporting, deeper analysis and sharper enterprise security coverage will help CISOs cut through the noise, assess emerging risks and make informed decisions that strengthen their security posture and business resilience.
By Sharon Shea , James Walker • Oct. 27, 2026 -
Getty Images
PHP2Shell disclosure unravels after leaks forced early patch drop
Although website shutdowns were inevitable to patch critical PHP flaws, early leaks and a broken embargo turned routine maintenance into an emergency scramble.
By James Walker • Oct. 22, 2026 -
Getty Images
PHP2Shell: 22M exposed servers at risk as emergency patches released
AI gave defenders a head start, but PHP2Shell has sparked a chaotic race against automated exploits across 22 million vulnerable servers.
By James Walker • Oct. 21, 2026 -
Brand Experience Team/TechTarget
Off the rails: Railway cyberattacks highlight infrastructure risks
Cyberattacks on Japanese rail operators Keio and Tokyo Metro reveal how corporate IT breaches expose passenger data and threaten operational technology systems.
By Richard Livingston • Oct. 19, 2026 -
Brand Experience Team/TechTarget
CISA to AI labs: Share test-network IPs to flag rogue agents
CISA wants AI testing labs to provide a mechanism for mainstream cyber defenders to spot and flag rogue agents before they cause real damage. Experts' reactions were mixed.
By Alissa Irei • Oct. 15, 2026 -
Brand Experience Team/TechTarget
Historic Curl flaw shows AI risk to legacy supply chain
An AI audit of Curl unearthed a 25-year-old authentication flaw in code powering 20 billion devices, proving heavily scrutinized legacy libraries still harbor hidden risks.
By Craig Galbraith • Oct. 14, 2026 -
Brand Experience Team/TechTarget
AI-discovered flaws are rarely exploited but pose greater risk
Relatively few AI-discovered flaws are exploited, but new research shows the ones that are can pose outsized risk to enterprises.
By Alissa Irei • Oct. 13, 2026 -
Brand Experience Team/TechTarget
Pentagon breach exposes failure to follow its own standards
The Pentagon's DMDC breach exposed millions of records due to failures in basic security controls despite clear DoD cybersecurity standards.
By Richard Livingston • Oct. 8, 2026 -
Brand Experience Team/TechTarget
Developers facing a patchwork of competing AI safety regulations
Policymakers are moving swiftly to regulate agentic AI, creating varying mandates across regions and leaving developers to figure out compliance. Experts explain how the industry can keep pace.
By Richard Livingston • Oct. 2, 2026 -
Brand Experience Team/TechTarget
Nvidia Sentry’s millisecond claim raises AI agent detection questions
Nvidia's Sentry design promises millisecond AI agent containment, but security experts warn speed offers little protection when valid credentials or detection delays are involved.
By Nathan Eddy • Oct. 1, 2026 -
Brand Experience Team/TechTarget
August’s ransomware activity hit new high for the year
NCC Group identified 83 ransomware groups active last month, but it said AI wasn't necessarily what drove the increase in the number of bad actors.
By Nathan Eddy • Sept. 30, 2026 -
Brand Experience Team/TechTarget
Can ‘agent canaries’ catch rogue AI before it escapes?
AI agent canaries could become valuable security tripwires if enterprises treat them as sensors rather than safeguards.
By Nathan Eddy • Sept. 22, 2026 -
Brand Experience Team/TechTarget
What the AI safety fallout means for enterprise CISOs
High-profile resignations and calls for a development slowdown have accelerated the AI safety debate. Here's how security leaders are filtering noise from immediate operational risk.
By Richard Livingston • Sept. 21, 2026 -
Brand Experience Team/TechTarget
Revolut breach exposes authentication-authorization gap
The Revolut data breach showed what can happen when organizations over-trust and under-verify. Experts warn that countless companies are currently at risk.
By Alissa Irei • Sept. 17, 2026 -
Brand Experience Team/TechTarget
CISA Cyber Storm exercise offers blueprint for enterprise CISOs
The launch of CISA's Cyber Storm X puts national incident response to the test. For enterprise CISOs, the exercise serves as a practical model for evaluating supply-chain resilience and incident response playbooks under fire.
By Richard Livingston • Sept. 11, 2026 -
Brand Experience Team/TechTarget
Expert Advice
How CISOs can defend against ClickFix attacks
ClickFix attacks have become a top malware delivery method, exploiting unwitting users' trust and weaponizing their access. Stopping them requires a defense-in-depth approach.
By Matthew Smith • Aug. 27, 2026 -
Brand Experience Team/TechTarget
Expert Advice
What to know about deepfake phishing simulation software
Deepfake phishing simulation software uses AI to probe organizational resistance to state-of-the-art social engineering attacks. Learn why they should be on CISOs' radar.
By John Burke • July 29, 2026 -
Brand Experience Team/TechTarget
OpenAI models escape containment, hack Hugging Face
In an unprecedented -- and unintended -- cyberattack, frontier AI models autonomously escaped their contained testing environment and breached another company's systems.
By Richard Livingston • July 23, 2026 -
Brand Experience Team/TechTarget
Expert Advice
OpenClaw security best practices for CISOs
OpenClaw introduces huge risks to enterprises, but employee adoption might be inevitable -- whether CISOs sanction it or not. Here's how to enable safer deployments.
By Matthew Smith • July 22, 2026 -
Brand Experience Team/TechTarget
Industry reacts to Gold Eagle vulnerability management plan
As AI-discovered software vulnerabilities accumulate at an unprecedented pace, security pros say they hope Gold Eagle creates some order from the chaos.
By Phil Sweeney • July 17, 2026 -
Brand Experience Team/TechTarget
Expert Advice
Building cyber-resilient AI in the enterprise
AI attacks and breaches hit differently than traditional attacks, and therefore require more than traditional controls. The best defense requires planning for cyber-resilience.
By Amy DeCarlo • July 14, 2026 -
Brand Experience Team/TechTarget
ClickFix and removable media lead malware delivery methods
Now more than ever, defenders must look for suspicious behavior, not specific malware. Learn how to defend against two trending initial access methods.
By Alissa Irei • July 10, 2026
