cybersecurity

Crypto Ransomware: 2026 Crypto Crime Report

By / Blog / , ,

Total ransomware payments dropped 8% to $820M in 2025 amid a 50% rise in attacks; median ransom rose 368% to nearly $60,000. Criminals and state-linked entities share infrastructure. Law enforcement disrupts enabling services rather than just targeting groups. Ransomware incidents increasingly affect critical infrastructure, and Initial Access Brokers facilitate these attacks. While revenue declines, the complexity and impact of attacks increase, necessitating robust defenses against evolving methods.

https://www.chainalysis.com/blog/crypto-ransomware-2026/

Threat Modeling AI Applications

By / Blog / , , , ,

The post explains how to adapt threat modeling for AI systems, which differ from traditional software in that they produce probabilistic outputs, follow instructions, and have expanded attack surfaces. It recommends explicitly defining what assets the system must protect, understanding real usage patterns, and identifying risks such as prompt injection, misuse of tools, data integrity failures, and harmful outputs. It concludes that AI threat modeling requires structured analysis early in design to assess likelihood and impact and inform architectural mitigations. 

https://www.microsoft.com/en-us/security/blog/2026/02/26/threat-modeling-ai-applications/

Why Exposure Quantification Is the New Mandate for CISOs

By / Blog / , ,

CISOs must prioritize exposure quantification due to the evolving landscape of cybersecurity. Past views of breaches as mere IT issues are outdated; breaches now impact governance and require measurable evidence for compliance. Traditional methods fail against dynamic IT environments, necessitating continuous risk assessment. Regulators demand quantifiable security maturity, with incidents exposing critical vulnerabilities highlighting a need for better visibility. Effective exposure quantification hinges on integrating data, understanding attack paths, and communicating risks to align with business objectives. Ultimately, embedding this practice into governance will enhance trust and strategic decision-making.

https://www.frontier-enterprise.com/why-exposure-quantification-is-the-new-mandate-for-cisos/

Detecting and Mitigating Common Agent Misconfigurations

By / Blog / , , ,

The article emphasizes the need to detect and mitigate common agent misconfigurations to enhance security. Agents are increasingly integrated into business workflows, but misconfigurations pose risks, including unauthorized access, data leaks, and unmonitored legacy systems. Key mitigation strategies involve using Copilot Studio for authentication, implementing data policies, conducting regular audits on dormant connections, and restricting actions based on user roles. Overall, effective management and monitoring of agents are crucial for maintaining a secure operational environment.

https://www.microsoft.com/en-us/security/blog/2026/02/12/copilot-studio-agent-security-top-10-risks-detect-prevent/

In the AI Era, CISOs Worry About Data Leaks and Doubt Tech Will Solve Skills Gaps

By / Blog / , ,

CISOs recognize the need for AI but express concerns about risks, particularly data leaks and skills gaps. Despite AI's adoption in security, only mixed results are reported, with many affirming the technology won't resolve workforce shortages. Key worries include AI model hallucinations and regulatory challenges. Splunk's report recommends CISOs focus on clear AI governance and collaboration to integrate security into business strategy.

https://www.cybersecuritydive.com/news/in-the-ai-era-cisos-worry-about-data-leaks-and-doubt-tech-will-solve-skill/812964/

AI Won’t Break Microsoft 365. Your Security Backlog Will

By / Blog / , , , ,

TLDR: AI attackers exploit existing configuration backlogs in Microsoft 365, targeting long-neglected security settings rather than zero-day vulnerabilities. With rapid deployment of AI technologies and common misconfigurations across tenants, risks escalate while defenders struggle to keep up, emphasizing the need for immediate action on known security gaps.

https://thehackernews.com/expert-insights/2026/02/ai-wont-break-microsoft-365-your.html

Open-Weight AI Models Fail the Jailbreak Test

By / Blog / , ,

Cisco’s State of AI Security report found that open-weight AI models are highly vulnerable to multi-turn jailbreak attacks, with a 92.78% success rate. These attacks, which use iterative prompts to bypass content filters, highlight the need for improved AI security measures. The report also emphasizes the risks associated with excessive agency in AI systems, particularly when they are granted broad autonomous authority over tools and data.

https://www.databreachtoday.com/open-weight-ai-models-fail-jailbreak-test-a-30823

Secure or Just Certified? Why the Audit Report Is Not the End of Your Security Story

By / Blog / , ,

Compliance is just the starting point for true cybersecurity; it establishes a baseline, not an ultimate protection. Effective security requires a deeper understanding of vulnerabilities beyond compliance checklists. Organizations must rigorously manage supplier risks, as breaches can occur through third-party access. Additionally, navigating overlapping regulations like PCI DSS and GDPR requires adaptability. Security relies on culture and awareness, not just technology. Organizations should focus on resilience, viewing compliance as one layer in a broader, proactive strategy. True protection goes beyond audits to preventing breaches.

https://www.intelligentciso.com/2026/02/20/secure-or-just-certified-why-the-audit-report-is-not-the-end-of-your-security-story/

Scroll to Top