Zscaler Targets AI Identity Risk With Symmetry Acquisition

Michael Novinson • May 22, 2026

Zscaler plans to acquire San Francisco-based Symmetry Systems to unify visibility across AI models, identities, applications and datasets, helping enterprises track AI lineage, govern agentic identities and enforce granular zero trust controls across cloud and SaaS environments.

Anti-Money Laundering (AML)

SecurityScorecard Buys Driftnet for More Internet Visibility

Latest

Next-Generation Technologies & Secure Development

$2B US Tech Investments Could Help Hasten Q-Day Timeline

Jennifer Lawinski • May 25, 2026

The U.S. government just committed $2 billion to quantum computing development, including $1 billion to stand up America's first dedicated quantum chip foundry. Experts say the Q-Day timeline is compressing faster than most enterprises have planned for.

Incident & Breach Response

Responding to Breaches With AI? Beware Cross-Contamination

Rashmi Ramesh • May 25, 2026

Cybersecurity investigators who use artificial intelligence tools to draft incident response reports, beware: Information tied to one security incident can contaminate a report into a separate incident, if both get drafted using the same AI tool in the same session, researchers warn.

Demystifying Claude: Signal vs. Speculation

Uma Ramani • May 25, 2026

A researcher's phone buzzed with an email from an AI that wasn't supposed to have internet access. The real story isn't about rogue machines; it's about what happens when AI capability outpaces our ability to interpret, validate and govern it.

Endpoint Security

RondoDox Botnet Exploits 2018 Flaw in Asus Routers

Greg Sirico • May 22, 2026

Operators behind a botnet picked up on a nearly decade-old flaw in Asus routers allowing an unauthenticated attacker to achieve remote code execution as a root user. VulnCheck began observing exploitation of the Asus vulnerability on May 17.

Artificial Intelligence & Machine Learning

HHS Launches AI-Powered Effort to Identify Fraud, Waste

Marianne Kolbasuk McGee • May 22, 2026

Artificial intelligence tools are the centerpiece of a new U.S. Department of Health and Human Services initiative that will enable officials to better analyze audits and ultimately crack down on states and grantees that are potentially wasting, abusing or fraudulently spending federal funding.

Critical Infrastructure Security

New Telecom Espionage Campaign Tied to China

Tiffany Wang • May 22, 2026

Newly discovered malware tied to China-linked actors breached telecom providers across Asia and the Middle East, highlighting growing efforts to gain persistent access into interconnected communications infrastructure.

Cyberwarfare / Nation-State Attacks

Iranian Hackers Using Fake Job Sites to Breach Defense Firms

Chris Riotta • May 22, 2026

Palo Alto Networks' Unit 42 said Iran-linked operators tied to Screening Serpens are using fake recruiting campaigns, cloned aerospace hiring portals and malware-laced job materials to infiltrate defense, satellite communications and government networks.

Agentic AI

ISMG Editors: The Governance Questions Haunting OpenAI

Anna Delaney • May 22, 2026

In this week's panel, four ISMG editors discussed what the Musk vs. Altman trial exposed about OpenAI's governance program, how AI is reshaping the way enterprises think about security and why Cisco, Cloudflare, Arctic Wolf and other firms are redesigning their workforces for the AI era.

Geo-Specific

Europe Again Delays Digital Sovereignty Push

David Meyer • May 22, 2026

Europe for the third time delayed presenting its long-awaited Tech Sovereignty Package, legislation aimed at weaning the continent off American technology - or to at least ensure that it can go without it. It was first supposed to appear in March, then April and then this coming Wednesday.

Cybercrime

23-Year-Old Canadian Charged in KimWolf Botnet Operation

Chris Riotta • May 22, 2026

U.S. prosecutors charged a Canadian man accused of operating the KimWolf botnet, alleging the DDoS-for-hire platform compromised nearly two million IoT devices and powered attacks that reached record traffic volumes worldwide.

Artificial Intelligence & Machine Learning

Everyone Suddenly Wants Claude's Audit Logs

Rashmi Ramesh • May 22, 2026

More than two dozen enterprise security vendors, including Microsoft, CrowdStrike and Palo Alto Networks, have built integrations with Anthropic's Claude Compliance API, an interface the company launched months ago to give corporate security teams access to Claude activity data.

Critical Infrastructure Security

Water, the Soft Underbelly of Critical Infrastructure

Shaun Waterman • May 22, 2026

America's water utilities are the nation's most cyber-vulnerable critical service sector, but their cybersecurity is overseen and supported by an ill-fitting patchwork of government agencies and most lack the resources to meet the threat they face.