Security

AI Bots - a new risk and opportunity for CIOs to manage This article is sponsored by:

Digital leaders are seeing an increasing amount of automated bots crawling their estates and driving up costs, as well as threats

Cloudsmith warns - most teams won't meet the EU Cyber Resilience Act's software supply chain deadline

Most organizations can see their software security risks. Far fewer can act on them fast enough to matter – and with the EU Cyber Resilience Act coming into enforcement in September 2026, the difference between visibility and action is about to become a legal liability. At KubeCon Europe 2026, Cloudsmith made its case for closing it.

Keynote stage at KubeCon Europe 2026 © CNCF Events

PyTorch Foundation adds Helion and Safetensors - and the open AI stack gets a little harder to ignore

Mark Collier briefed me on two updates under embargo at KubeCon Europe 2026 last month: Helion, which opens up GPU kernel programming to a far wider pool of developers, and Safetensors, which fixes a security problem in open source AI that was stubbornly overlooked for too long. The embargo's lifted - here we go.

Mark Collier of PyTorch at KubeCon Europe © CNCF Events

Why Elastic thinks your observability data and your security data are the same problem

Elastic markets itself as a Search AI company. Massimo Merlo, AVP for UK, Ireland, Iberia and Italy, would rather talk about why that label is almost beside the point.

Mean time to innocence - Splunk's case for why your observability data is as much a political problem as a technical one

When a VIP customer calls and the trace has been discarded, you can't prove the issue wasn't yours. Splunk's Stephane Estevez has a name for that problem - and an argument for why fixing it starts long before the incident.

Celonis - Europe's defense reckoning has an execution gap and a sovereignty problem

Celonis argues that Europe's defense spending surge will fail to deliver real capability unless governments address the execution gap — the fragmented, legacy-laden industrial and logistics processes underneath the hardware

OpenSSF's CRob on why open source security is still a people problem - and why AI is making it worse before it makes it better

Four years after Log4Shell, 14% of affected artifacts are still being downloaded in vulnerable versions. OpenSSF's Chief Security Architect explains why AI agents are compounding the maintainer burden, and what enterprises should be doing about it right now.

Christopher Robinson AKA CRob at KubeCon Europe

First blood to Anthropic as US judge slams Trump 2.0's “Orwellian" attempt to cripple the firm as unconstitutional and illegal

Anthropic has been granted temporary relief in the form of an injunction to prevent Trump 2.0 from following through on its threats for now.

Kubernetes puts ingress nginx to rest at KubeCon - 'Nobody can keep it safe'

Kubernetes formally archived one of its most widely deployed components on day one of KubeCon Europe 2026. Steering committee member Kat Cosgrove explains why the project's own flexibility became its fatal flaw - and why anyone still running it should be treating migration as an emergency.

Zero Trust World 2026 – don’t trust AI to secure your business or replace your juniors, warns ThreatLocker CEO

Co-founder and CEO Danny Jenkins sounds off on the hidden risks of placing too much trust in AI’s abilities.

Zero Trust World 2026 – why failure is not an option!

Announcements, predictions, and messaging abound at the ‘default deny’ vendor’s security conference in home city, Orlando.

Back to the negotiating table? Might there be peace in our time between Anthropic and Trump 2.0 or has the war of words gone too far? (Updated 6th March)

An internal memo from Anthropic's CEO will pour fuel on the flames of the dispute...

Zero Trust World 2026 – cybercrime is world’s third largest economy, says ex-White House CIO. Who's to blame?

Cybercrime is booming on the back of AI, while autonomous agents are taking over in business. So, who is responsible when things go wrong? The answer is: not the security team. 