We cut through the noise so you can stay informed, ahead of threats, and ready to act.
Machine identities now significantly outnumber human users in many enterprises, with API keys, OAuth tokens, and service accounts often unmanaged, overprivileged, or poorly rotated. The article explains how attackers exploit these vulnerable machine identities and highlights their emergence as a rapidly expanding attack surface that traditional IAM programmes struggle to govern.
AI agents and automated components can effectively become insiders because they hold powerful API tokens and can act autonomously beyond the visibility and control of traditional user-centric security models. The article focuses on understanding and limiting what agents are permitted to do, and reconstructing what an agent was allowed to do and actually did after an incident.
Cybercriminals are rapidly adopting AI to produce convincing, personalised scams, social engineering, and other attacks at scale, increasing both frequency and sophistication. The article offers guidance on separating genuinely valuable security applications of AI from hype, so teams can prioritise practical use cases when building an AI-enabled cyber strategy.
We handpick 10 must-read stories from trusted sources.
Get the week's most important insights in minutes.
Strategic insights for professionals who make an impact.
Catch up on earlier weekly briefings and track how cybersecurity themes are evolving over time.
Cyber This Week Edition 98 explores breach concealment, cyber metrics, threat visibility, continuous identity verification, board accountability, agentic AI, and cyber resilience.
Cyber This Week Edition 97 explores AI-speed cyber risk, disaster recovery, security assurance, OT zero trust, cyber insurance, SOC containment, vendor risk, critical infrastructure, and quantum readiness.
Cyber This Week Edition 96 explores ransomware losses, third-party risk, AI data leakage, converging cybercrime, litigation exposure, logging gaps, quantum readiness, emergency response, and evolving cybersecurity teams.
