Ken Underhill

Iranian attackers are targeting U.S. critical infrastructure by exploiting PLCs with legitimate tools, enabling stealthy disruption of industrial systems.

AI-driven API growth is expanding the attack surface faster than security can keep up.

10 ChatGPT Prompts L1 SOC Analysts Can Use in Their Daily Work

NomShub shows how attackers can exploit AI coding tools to turn routine actions into full system compromise.

A Docker flaw (CVE-2026-34040) lets attackers bypass authorization controls and potentially take over host systems.

The proposed FY2027 budget cuts to CISA are raising concerns about weakened cyber defense and reduced collaboration.

A new report highlights growing gaps between perceived AI visibility and actual risk.

A critical FortiClient EMS vulnerability (CVE-2026-35616) is under active exploitation, allowing unauthenticated attackers to bypass API protections.

Ahead of RSAC 2026, I spoke with David Brauchler, Technical Director and Head of AI/ML Security at NCC Group about how you can secure AI agents.

Cisco finds AI-driven wireless attacks are rising as security gaps widen across complex networks.

Armis finds AI-driven cyberattacks are accelerating, widening the gap between perceived readiness and real-world defenses.

The CrowdStrike 2026 Global Threat Report shows how attackers are using AI, trusted access, and faster breakout times to launch stealthier attacks.