Explore the latest advancements and trends in information security automation. Stay ahead with cutting-edge cybersecurity automation news and insights.
Search across headline titles and summaries.
Background for this topic.
Automation in information security uses software to perform tasks like scanning for vulnerabilities, detecting threats, and enforcing policies without constant human intervention. It enables faster, consistent actions such as blocking malicious IPs or deploying patches based on predefined rules or machine learning models. This reduces manual effort and helps maintain security hygiene at scale.
However, automation can introduce risks if workflows are misconfigured or manipulated. Attackers may exploit automated responses to trigger false positives or disable protections, while errors in automation can propagate rapidly across systems. Security teams must carefully validate and monitor automated processes, balancing efficiency with oversight to prevent unintended consequences and maintain control over security operations.
The attack surface targeted by Iranian-linked hackers in cyberattacks against U.S. critical infrastructure networks includes thousands of Internet-exposed programmable logic controllers (PLCs) manufactured by Rockwell Automation. [...]
Discovery used to be the bottleneck for open source bugs, but with automated discovery, remediation's the bottleneck, which bounties don't fund.
James Foster Points to Agentic Security and Need for Customers to Outsource DefenseCEO James Foster says managed detection and response is evolving into an AI-powered agentic model as enterprises face faster AI-driven threats. He stresses balancing automation with human expertise while positioning eSentire as a vendor-neutral platform integrating best-of-breed security tools.
Who needs MFA when you've got EvilTokens? Hundreds of organizations have been compromised daily by a Microsoft device-code phishing campaign that uses AI and automation at nearly every stage of the attack chain to ultimately snoop through corporate email inboxes and steal financial data.…
Automated pentesting tools deliver strong early results, then quickly plateau. Picus Security explains how the "PoC cliff" leaves major attack surfaces untested and creates a dangerous validation gap. [...]
Internet Intelligence Platform Targets Real-Time Cybethreat DefenseCensys raised $70 million to expand its AI-driven cybersecurity platform, focusing on real-time visibility into internet infrastructure. Co-founder and CEO Zakir Durumeric said faster attacks and evolving tactics require automated defenses powered by high-quality data and global intelligence.
PRT-scan is the second campaign in recent months where a threat actor appears to have leveraged AI for automated targeting of a widespread GitHub misconfiguration.
An emerging threat cluster tracked as UAT-10608 is exploiting vulnerable Web-exposed Next.js apps and using an automated tool to exfiltrate credentials, secrets, and other system data.
Hackers are running a large-scale campaign to steal credentials in an automated way after exploiting React2Shell (CVE-2025-55182) in vulnerable Next.js apps. [...]