The difference between a prompt injection attack you'll catch and one you won't might just be whether your AI agent can explain itself.

The attack on water systems across seven states was preventable. Utilities had the playbook. They didn't use it.

A cryptographic technique could let companies prove they're vulnerable to critical flaws without revealing the sensitive data that attackers could exploit.

We almost never get both sides of an intrusion. This time we did. Last month, Hugging Face disclosed a breach into part of its production infrastructure, saying…

The Hugging Face breach shows there is a gap in federal policy. The frameworks to govern autonomous AI already exist—there just needs to be the desire to…

Future major events can’t rely on yesterday's playbook. Lessons from the World Cup show why true cyber resilience starts months before kickoff and extends far beyond stadium…

AI companies can find vulnerabilities and write patches. But only the government can build the long-term defense strategy America needs.

Moving from tool approval to true governance is the only way for CISOs to keep pace with the accelerating velocity of software risk.

The government's new AI clearinghouse risks becoming a committee that discovers more problems than it solves — unless it's designed around patching, not just scanning.

AI is surfacing vulnerabilities at a scale the industry has never seen, and most organizations have no way to determine which ones actually matter.