Check out our upcoming events! info.ioactive.com/acton/fs/block…

🌟 11/10 | realigned.online 2026 - secwest.net/realigned

🌟 11/19 | Webinar: How I Learned to Stop Worrying and Love the AI - events.teams.microsoft.com/event/49d56c27…

🌟 11/29 | hack::soho - eventbrite.com/e/hacksoho-nov…

Your face is the password. Here’s how attackers fake it. hack::soho returns 26 Nov at IOActive London with Jose Maldonado on bypassing liveness detection. Register → eventbrite.com/e/hacksoho-nov… #hacksoho

Cybersecurity trends 2027: bounded AI, connected technologies, exposure of critical infrastructure, offensive validation, and supply chain risk. ioactive.com/cybersecurity-…

Microsoft now requires an annual OCP S.A.F.E. security review for third-party UEFI CA and Option ROM CA signing. Ship firmware, option ROMs, or bootloaders? This applies to you. ioactive.com/service/ocp-sa… #OCPSAFE #SecureBoot

🤖 AI can find bugs. But can it prove they're exploitable?

Join IOActive's Robert E. Lee to explore AI-assisted vulnerability discovery, exploit verification & real-world security testing.

📅 Nov. 19 | 11 AM PT
🔗 events.teams.microsoft.com/event/49d56c27…

#AISecurity #Cybersecurity

Most security teams pick providers by price. The smarter approach: compare by cybersecurity assessment methodology, testing depth, and environment fit. Here's the guide. ioactive.com/cybersecurity-…

Is AI reshaping your security program or just the conversation around it? Join IOActive’s Robert Lee for an executive roundtable and dinner in Bellevue.

📅 Thu, Nov. 5 | 6–9 PM 📍 Water Grill

Limited seats. Request your invite: info.ioactive.com/acton/fs/block…

Thank you to everyone who joined #hacksoho last night, in London and on the livestream!

Huge thanks to Dinis Cruz for “The Ultimate Insider,” a sharp look at AI agents as the new insider threat and how to make them earn their autonomy.

Looking for a vendor risk assessment template free of charge? Use this practical guide to evaluate third-party access, controls, dependencies, evidence, and when technical validation is necessary. ioactive.com/vendor-risk-as…

At [un]prompted, Vince Ovando’s talk “The Model Is NOT a Security Control” showed why prompt injection dies at the token sampler.

~6.1M inference calls. Models from 1.7B to 119B params. Only one control blocked malicious output 100% of the time.

unpromptedcon.org/agenda-10-2026/

Learn how to evaluate a cybersecurity provider by comparing technical depth, testing methods, reporting quality, research, and fit for your security goals. ioactive.com/how-to-evaluat…

Check out our upcoming events! ioactive.com/events/

🌟 10/27 – 29 | [un]prompted - unpromptedcon.org

🌟 10/28 | CYSAT Madrid - cysat.eu/cysat-madrid

🌟 10/29 | hack::soho - eventbrite.com/e/hacksoho-oct…

🌟 10/29 – 30 | LASCON - lascon.org

⚡ Britain's small power generators face a cybersecurity gap until 2030.

New regulations are coming, but OT security remains a blind spot.

Cyber threats won't wait. Neither should operators.

Read more. ioactive.com/below-the-thre…

#OTSecurity #Cybersecurity #IOActive

8 eMudhra intermediate TLS certs had private keys of just 3 to 8 bits. Anyone could have used them to mint trusted certs for any site.

Browsers have blocked them. Linux distros, containers, IoT, and embedded devices are another story. arstechnica.com/security/2026/…

🚨 PHP releases emergency patches for two critical RCE vulnerabilities (PHP2Shell), both rated CVSS 9.2.

Even secure application code may be exposed. Prioritize patching.

More via @TheHackersNews 👇
thehackernews.com/2026/10/php-is…

Next Thursday at hack::soho: Dinis Cruz on “The ultimate insider.” AI agents as insider threat, infrastructure built for static code, and risk management stuck in spreadsheets. Live demos included.

📍 London | 29 Oct | 6–9 PM | Livestream ~7 PM
eventbrite.com/e/hacksoho-oct…

A practical framework for building a cyber risk management strategy that aligns security investments with business impact, OT, AI, and third-party risk. ioactive.com/cyber-risk-man…

Check out our upcoming events! info.ioactive.com/acton/fs/block…

🌟 Oct. 24 | BSides Peoria - bsidespeoria.com

🌟 Oct. 28 | CYSAT Madrid - cysat.eu/cysat-madrid

🌟 Oct 29 – 30 | LASCON - lascon.org

🌟 Oct. 29 | hack::soho - eventbrite.com/e/hacksoho-oct…

Signal messenger security research: IOActive tested Signal Desktop’s Windows screen-capture protection and showed how local code execution can undermine a trusted security control. ioactive.com/signal-messeng…

Security execs: join IOActive leadership for an evening of candid peer discussion this November.

🗽 NYC, Nov 4
🌲 Seattle/Bellevue, Nov 5
🌰 Columbus, Nov 5
🇬🇧 London, Nov 12 (breakfast)
Seats are limited. Pick your city: info.ioactive.com/acton/fs/block…