Between July 9 and July 13, 2026, an autonomous agent collective with no human operator behind it ran a full intrusion against AI model host Hugging Face, wanting the answers to a benchmark. It executed roughly 17,600 recorded actions in 4.5 days, took cluster-admin across multiple internal clusters in under 13 hours, and left without anyone knowing who was responsible. Hugging Face’s controls performed better than most enterprise environments would, and it still lost every layer that depended on identity. Security leaders can use this report to learn what it’s like defending against that kind of intrusion.

Black Hat 2026 generated more questions than it answered. Are we headed for a vulnerability apocalypse (aka vulnpocalypse), or are we clearing a backlog of flaws that AI can now find with ease? Can organizations patch fast enough? What should buyers expect from vendors when software can reason? Will AI be our undoing or our […]

Zero Trust threat prevention technologies are critical to companies’ ability to win, serve, and retain customers. To accelerate their performance in Zero Trust threat prevention, organizations are evaluating and adopting a range of contributing technologies. This Forrester Tech Tide™ report analyzes the maturity and business value of the 18 technology categories that support Zero Trust threat prevention. Security and risk professionals should read this report to shape their company’s investment approach to these technologies.

Security and risk leaders enter 2027 with two near-term inflection points converging on the same budget cycle: Agentic AI is moving from pilot to production at enterprise scale, and post-quantum cryptography migration timelines are accelerating ahead of original NIST guidance. Forrester data indicates that boards and CFOs are still funding the work — most CISOs expect another year of budget growth — but the budget mix matters far more than the total number. This data-and-insights-driven report provides spending benchmarks and concrete invest, divest, avoid, and experiment recommendations to align your 2027 security budget to the threat and capability shifts that will define the next 24 months.

Proactive security strategies and the security operations center (SOC) are the backbone of your security program. While proactive security programs strive to improve the structural components of your risk posture, the SOC detects security incidents before they snowball into a breach. Security and risk (S&R) professionals should read this report to understand how proactive security and SOC teams can aid one another through information sharing and collaboration.

Security assessments come in multiple flavors that serve different purposes. Their surface similarities challenge technology executives for whom this evolving discipline isn’t entirely within their expertise. Yet, these tech execs need to decide what assessment to use to meet their goals. This document equips tech execs with knowledge on how to select the appropriate assessment type and work with proactive security teams to turn these results into meaningful improvements and business outcomes.

On Friday, June 12, the same model class covered by our previous blog post went dark. Anthropic suspended Fable 5 and Mythos 5 worldwide after the US Department of Commerce issued an export control directive, which led to requests from prominent cybersecurity pros to undo the action. The bypass that triggered the export controls, per […]

Anthropic’s Fable 5 and Mythos 5 is the most 2026 product launch you’ll read this year. The same model can find nation-state zero days, design novel drug candidates, and play FireRed on a Gameboy Advance with nothing but screenshots. And for the gaming fans out there, yes, we got Fable 5 before Fable 4. These […]

ServiceNow Knowledge 2026 showcased how ServiceNow is expanding its role in enterprise AI, workflow automation, and digital workplace transformation.

OpenAI recently announced Daybreak, its vision for making agentic application security faster and more capable. While promising, Daybreak will also make security more expensive per unit of work. In this model, customers will pay for tokens and multiagent workflows burn tokens. CISOs and CIOs should budget for application security (AppSec) line-item inflation, not deflation, with […]