CYBR.SEC.Media

Featured

Certificate Authorities, PHP Runtimes, and the Limits of Defense-in-Depth in the “Vulnpocolypse” Era

The eMudhra vulnerability exposed a years-long window of significant certificate risk. The PHP2Shell vulnerability is ubiquitous. Last week’s five vulnerabilities targeted many of the security controls assumed to be trustworthy.

[un]prompted II: Full Coverage

Bill Brenner

CYBR.SEC.Media's full coverage of [un]prompted II 2026: AI agent security research, expert talks, debates and analysis from San Francisco, October 27–29.

Rilian Brings Agentic AI to Rural Hospital Cybersecurity in White House Pilot

Bill Brenner

Rilian joins the White House's Project Lifeline 250 to protect South Carolina rural hospitals, putting its agentic AI approach to critical infrastructure security into practice.

Community Corner

See all

From the CYBR.SEC.Community

Above the Packet: Field Notes from the Meaning Layer

Own Your World Model

A kilometer of fiber, two houses, some very heavy machinery, and the world cybersecurity is supposed to protect.

, and Chris Blask

· October 26, 2026

AI and Vulnerability Management

AI Is Finding Old Vulnerabilities Faster Than We Can Fix Them

LLM-assisted bug hunting is uncovering critical vulnerabilities in old software such as FATFS, exposing a growing cybersecurity problem: AI is accelerating vulnerability discovery while patching and remediation struggle to keep pace.

, and Michael Farnum

· October 19, 2026

How to CISO

Crypto Agility: Preparing Encryption for Quantum Threats

As quantum computers become cryptographically relevant, agentic networks will have to keep one step ahead of the decryption storm.

, and Andy Ellis

· October 16, 2026

Adventures in Threat Hunting

Building Determinism in an AI World: Why AI Agents Need Proof of Control

AI agents operate unpredictably, creating security blind spots that traditional controls can't address. The emerging Proof of Control standard aims to make agent actions auditable, traceable and independently verifiable.

, and Michael Smith

· October 13, 2026

Cybersecurity's Next Generation

AI Spend as a Security Control

What if the next attacker doesn’t want your data, but your AI budget? Why usage-based billing is a security risk, and what to do before the invoice arrives.

, and Connor Fitzgerald

· October 12, 2026

Latest Articles

See all

[un]prompted IIGitHub prompt injection

Who Is Prompt-Injecting Coding Agents? A Scan of 86 Million GitHub Items

, and Bill Brenner

At [un]prompted II, Radware researchers reveal how hidden prompt injections found in a scan of 86 million GitHub items can manipulate AI coding agents, redirect workflows and threaten sensitive data.

October 27, 2026

[un]prompted IIAgentic AIMicrosoft Security

From DARPA AIxCC to Microsoft FORGE Lab: Lessons Building Hyperscale AI Code Scanning Tools

, and Bill Brenner

Microsoft FORGE Lab's AI agents helped find 140 Windows CVEs. At [un]prompted II, Taesoo Kim explains why fixing bugs is the bigger challenge.

October 27, 2026

[un]prompted IIAgentic AICapsem

AI Agent Sandboxing: Google Researcher Unveils Capsem

, and Bill Brenner

Google DeepMind's Elie Bursztein presents Capsem at [un]prompted II, using hardware isolation to secure AI agents without sacrificing speed.

October 27, 2026

HITRUST IRIDXGRCFinance and Cybersecurity

HITRUST Launches IRIDX to Measure Cyber Risk and Financial Exposure

, and Bill Brenner

HITRUST launches IRIDX, a new information risk ratings company designed to standardize residual cyber risk measurement, quantify financial exposure and improve third-party risk decisions.

October 27, 2026

[un]prompted IIAgentic AIAI Security

AI Agent Security Gaps Take Center Stage at [un]prompted II

, and Bill Brenner

A review of submissions during the CFP found 71% of 490 conference submissions focused on AI agents, exposing gaps in production defenses, vulnerability remediation and threat intelligence.

October 26, 2026

Remembrance

Remembering Sean Bodmer: Cybersecurity Pioneer, Author, Mentor and Friend

, and Bill Brenner

Cybersecurity pioneer Sean Bodmer leaves a lasting legacy as a threat intelligence researcher, author, inventor and mentor who advanced cyber counterintelligence, championed deception technology and helped wounded veterans build careers in security.

October 23, 2026

AI security rolesAI and HiringCISO

AI Security Roles Are Proliferating. CISO Authority Is Not

, and George V. Hulme

Large enterprises are naming AI security leaders inside security organizations while leaving AI governance accountability with CIOs, chief AI officers, and CTOs, a 1,400-respondent report finds.

October 22, 2026