DeviceSecurity.io RSS Syndication

Secret Service Driven to Personal Phones by Heavy Limits

Agents Couldn't Group Chat or Text Foreign Counterparts
U.S. Secret Service agents abroad jeopardized their protective mission by using personal smartphones on foreign trips, say auditors, who fault the Department of Homeland Security office of the chief information officer. Government devices came with too many limits.

AI Firms Seek US Help Against China Model Distillation

Anthropic Says Legal Gaps Leave Frontier Labs Vulnerable to LLM Copying
U.S.-based AI companies are urging the U.S. government to crack down on alleged illicit model distillation by Chinese AI developers, arguing current protections lack enforcement. Anthropic and others say legal reforms and clearer antitrust rules are needed to deter theft of frontier AI models.

Snyk Reportedly Cuts 90 Jobs to Accelerate AI Strategy

Interim CEO Ken MacAskill Says Changes Will Speed Product Development and Execution
Boston-based Snyk is reportedly eliminating about 90 jobs while reorganizing leadership, go-to-market operations and research to accelerate AI-focused application security development as the company navigates slowing growth, a CEO transition and intensifying market competition.

Breach Roundup: How Hackers Exploited a Cisco SD-WAN Flaw

Also, Three Ubiquiti Flaws Under Exploitation
This week, Mandiant detailed a Cisco SD-WAN hack as attackers exploited Ubiquiti flaws. London Hydro disclosed a customer data breach, researchers flagged cross-cloud bucket hijacking risks an INC ransomware leak, Texas and Gravity SMTP incidents.

Live Webinar | Proactive Cyber Defense: Identifying Risk Before It Becomes an Incident

OnDemand | How FinServ Leaders are Applying Zero Trust to AI Agents

Beyond the Inbox: Defending Against AI-Enabled Social Engineering

Addressing Quantum Readiness in Healthcare Security

Healthcare organizations should prepare for post-quantum cryptography without overreacting to hype, said John Frushour, CISO of New York-Presbyterian Hospital. Stronger encryption standards, commercial software support and attention to medical devices can help providers manage emerging risks.

How FDA's Draft Guidance Shapes AI Medical Device Safety

FDA's draft guidance for AI-enabled medical devices reflects a major change in how regulators address software that changes over time, recognizing AI's ability to evolve while emphasizing patient safety, transparency and accountability, said Phil Englert of the Health-ISAC.

How AI Governance Protects Patient Care and Sensitive Data

Healthcare organizations face mounting pressure to govern AI without slowing innovation. Krista Arndt of St. Luke's University Health Network explains how agile governance, technical controls and collaboration can reduce data loss risks, protect patient care and strengthen AI security programs.

Why Hospitals Must Rethink Cyber Resilience

In the face of relentless cyberattacks that threaten patient safety, hospitals must strengthen their resilience, with clinical continuity, secure backups and coordinated recovery emerging as critical strategies, said John Riggi of the American Hospital Association and Josh Howell of Rubrik.

Five Quantum Questions Every Bank CISO Should Ask

Quantum Deadlines Loom. Most Banks Can't Say Where Their Cryptography Is Deployed
The standards are written, CERT-In has issued its CBOM guidance and adversaries are already harvesting encrypted data to decrypt later. The gap isn't quantum hardware. It's visibility. Here are five questions every bank CISO should answer now, starting with one: Do we have a cryptographic inventory?

From Reflection to Shadow: AI, Us and the Space in Between

When AI Partnerships Deepen, Security Leaders Can Access Powerful Joint Cognition
Sustained dialogue with AI does more than reflect a mind back. It casts a shadow shaped by two minds moving together, opening a vantage point once reserved for the few. For security leaders, recognizing this joint cognition is operationally vital, and so is keeping the shadow attached before it slips free.

6 Ways to Contain Enterprise Risk in Model Context Protocol

Understand Agentic AI Risks and Secure All MCP Deployments
MCP has rapidly become the connective tissue of the agentic AI era and the standard for connecting AI agents to enterprise systems. But it also introduces new attack vectors, from tool poisoning to prompt injection. Here are six ways to reduce the risk.

Policy as Code: From Documents to Machine Intelligence

Policy as Code Turns Static Compliance Documents Into Enforceable, Auditable Policy
For decades, policies, standards and procedures have anchored security and compliance governance. But static documents can no longer keep pace with dynamic regulations and frontier technology. Policy as Code transforms them into machine-readable, enforceable, continuously verifiable rules that drive real business decisions.