AI Agents Are Creating a New Identity Security Problem

Jennifer Lawinski • July 3, 2026

AI agents are multiplying across enterprises, creating a new identity challenge that many organizations are unprepared to manage. Entrust CIO Rishi Kaushal explains why agent governance, visibility and lifecycle management must become core components of enterprise security.

Blockchain & Cryptocurrency

Aryon Secures $29M to Thwart Cloud Risks Before Deployment

Latest

Fraud Management & Cybercrime

FBI Disrupts Widely Used NetNut Residential Proxy Service

Mathew J. Schwartz • July 3, 2026

The FBI and private-sector partners have disrupted NetNut, one of the world's biggest and most popular residential proxy networks. Google researchers said it comprised 2 million "secretly hijacked" home devices and was often used to route and disguise cybercrime and cyberespionage activity.

Cybercrime as-a-service

Lawmaker Probing Pegasus Spyware Infected Using Same Malware

David Meyer • July 3, 2026

Multiple European lawmakers are calling for a fresh investigation into spyware following new revelations that a European Parliament committee member probing Pegasus mobile device hacking software himself fell victim to attackers who wielded the surveillance tool against him.

Governance & Risk Management

ISMG Editors: Signs of Russia in Jaguar Land Rover Probe

Anna Delaney • July 3, 2026

In this week's ISMG Editors' Panel, four editors discussed new developments in the Jaguar Land Rover cyberattack probe, why export controls on artificial intelligence tools are reshaping post-quantum cryptography plans, and cybersecurity leaders' latest thinking about how to best govern AI.

Governance & Risk Management

The Elephants in the Technology Room - Part 4

Krishna Bagla • July 3, 2026

Shadow IT has evolved into shadow SaaS, shadow AI, shadow data and autonomous agents that operate beyond security's view. Traditional governance models can no longer keep pace. Organizations must transition from blocking technology to making its use visible, monitored and data-controlled.

Cybercrime

FortiBleed Hacks Tied to INC Ransom and Lynx Operation

Tiffany Wang • July 2, 2026

SOCRadar linked the FortiBleed credential-harvesting operation to ransomware groups INC Ransom and Lynx, citing evidence that a sophisticated initial access broker compromised more than 430,000 FortiGate firewalls, prioritized high-value organizations and enabled ransomware attacks against governments, critical...

Cybercrime

Breach Roundup: DeepSeek Sparks Browser Ransomware

Anviksha More • July 2, 2026

This week: a DeepSeek browser-only ransomware path, AI pen testing trust dropped, Mustang Panda targeted India, Tata breach exposed iPhone 18 data, CISA flagged BlueHammer in ransomware attacks, 950 Oracle EBS systems exposed, Amazon to pay U.S. Federal Trade Commission penalty over fraud records.

FCC Router Ban Risks Freezing Home Security Updates

Chris Riotta • July 2, 2026

The FCC granted Verizon a one-year waiver from its foreign-router ban, the latest carve-out in a rule that critics say would strip millions of home routers of the security patches that keep them safe once temporary exemptions lapse.

Cybercrime

Scattered Spider Suspect Extradited From Finland to US

Anviksha More , Mathew J. Schwartz • July 2, 2026

A suspected member of the notorious Scattered Spider cybercrime group has been extradited from Finland to stand trial in the United States. Peter Stokes, 19, a dual U.S.-Estonian citizen, faces a six-count indictment, including an attempted $8 million shakedown of a jewelry retailer.

Agentic AI

Governance in the Age of AI: Navigating the Mirror Maze

Moona Ederveen-Schneider • July 2, 2026

In Barrie's Peter Pan, Wendy sewed Peter's mischievous shadow back on his feet. Wendy saw what was incomplete and chose to act. We, as security practitioners in the age of emerging AI, also must choose whether to act - and how to act - to both govern AI and seize new opportunities.

Next-Generation Technologies & Secure Development

Quantum Breakthroughs Compress Post-Quantum Computing Timeline

Tiffany Wang • July 1, 2026

Rapid advances in quantum hardware, AI-assisted error correction and fault-tolerant architectures from Microsoft, Google and Amazon are accelerating expectations for practical quantum computing, increasing pressure on organizations to adopt crypto-agility and prepare for post-quantum encryption.

Critical Infrastructure Security

DHS Launches ANCHOR-CI Critical Infrastructure Councils

Chris Riotta • July 1, 2026

The U.S. Department of Homeland Security is establishing ANCHOR-CI, a network of regional and industry councils that will coordinate on critical infrastructure security with the government, although it is unclear what liability protections industry will have.

Agentic AI

The Shadow AI Problem Starts in the C-Suite

Jennifer Lawinski • July 1, 2026

Shadow AI may look like a rank-and-file problem, but new data suggests the biggest users of unauthorized tools are senior leaders and C-suite executives. The findings point to a governance challenge rooted in speed, surveillance fears and uneven AI training.