#how


The Blind Spots of Agentic Pentesting and How to Close Them

Oct 14, 2026 // 17:16

By Sila Ozeren Hacioglu, Security Research Engineer at Picus Security. For years, security teams had a window of several weeks between a CVE going public […]

How to keep AI agents within their permissions

Oct 9, 2026 // 17:36

Written by: Ido Shlomo Co-Founder and CTO of Token Security AI agents should do more on their own. Who has the time or attention span […]

OAuth grants pile up faster than you can review them. Here’s how to keep up.

Oct 9, 2026 // 00:57

Every time an employee clicks “Allow” on an OAuth consent screen, they create a standing trust relationship between two apps. An AI note-taker gets access […]

Why CISOs Struggle to Answer the Board’s Three Hardest Questions, and How to Fix the Report

Oct 2, 2026 // 14:39

The quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner, […]

How Financial Services Companies Can Modernize Their Software Supply Chain

Oct 1, 2026 // 14:50

Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. […]

Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI

Sep 28, 2026 // 15:00

AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across […]

17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360

Sep 24, 2026 // 23:39

ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on […]

How One Kubernetes YAML Can Hand Over a GCP Organization

Sep 23, 2026 // 17:16

When a developer needs to create a cloud resource — a database, a storage bucket, or a virtual machine — they need credentials to authenticate […]

Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar

Sep 19, 2026 // 16:30

A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it […]

1 2 3 … 8 Next