# Cybersecurity Cybersecurity is the practice of protecting computers, communications systems, and information from attacks and unauthorized use. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Регистрация на CTF-соревнования, запланированные на GISDAYS 2026, открыта DevFeed: [Регистрация на CTF-соревнования, запланированные на GISDAYS 2026, открыта]() Original publisher: [Read original article]() Author: Gazinformservice (Газинформсервис) Published: 2026-09-18T06:54:27Z Content type: news Language: ru Sources: [Tagir Valeev]() Topics: [ctf](), [Security](), [Cybersecurity](), [Cryptography]() Tags: [2026](), [ctf](), [gis-days](), [information-security](), [security](), [tag-546e7fc04851](), [tag-5a06c087f682](), [tag-62532a8d2a27](), [tag-85443682aea4]() ### AI overview GISDAYS 2026 will host online CTF competitions on October 1 as part of its Student Day. The event will offer more than 20 tasks across web penetration testing, forensics, reverse engineering, cryptography, and combined categories, with participation available online and in person. ### Source excerpt В рамках форума по ИТ и ИБ GISDAYS* 1 октября состоятся онлайн-CTF-соревнования. Их участниками могут стать молодые специалисты, которым интересна тема информационной безопасности. Соревнования пройдут в рамках Студенческого дня форума GISDAYS 2026 онлайн и офлайн, на площадке мероприятия в "МТС Live Холл". Офлайн-участники смогут сразу обменять баллы за решённые задачи на ценные призы, а онлайн-победителям будут отдельно отправлены подарки. Для участия необходимо зарегистрироваться на платформе, а 1 октября с 11:00 мск начать выполнять задания. Читать далее ## Plugin4Shell RCE flaw reportedly affects major AI coding agents DevFeed: [Plugin4Shell RCE flaw reportedly affects major AI coding agents]() Original publisher: [Read original article]() Author: Jessica Lyons Published: 2026-09-17T22:42:29Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [AI-assisted coding](), [Cybersecurity](), [coding]() Tags: [ai-and-ml](), [ai-coding-agents](), [ai-coding-tools](), [coding-agents](), [cybersecurity](), [rce](), [security]() ### AI overview Researchers say the Plugin4Shell attack affects all major AI coding agents and could enable remote code execution without user interaction. ### Source excerpt Plugin4Shell attack affects all the major coding agents, researchers say ## China's Salt Typhoon backdoors Latin American orgs with new snooping malware DevFeed: [China's Salt Typhoon backdoors Latin American orgs with new snooping malware]() Original publisher: [Read original article]() Author: Jessica Lyons Published: 2026-09-17T18:00:17Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [backdoor](), [Malware](), [Cybersecurity](), [infosec]() Tags: [backdoor](), [backdoor-malware](), [china](), [cyber](), [cybersecurity](), [malware](), [salt-typhoon](), [security](), [sparrowocky]() ### AI overview A news report about Salt Typhoon using new snooping backdoors and malware against organizations in Latin America. ### Source excerpt Beware the SparroWocky, my son! The backdoor that bites... ## From guidance to action: Security fundamentals that materially reduce risk DevFeed: [From guidance to action: Security fundamentals that materially reduce risk]() Original publisher: [Read original article]() Author: Ron Pessner Published: 2026-09-17T17:00:00Z Content type: article Language: en Sources: [Microsoft Security Blog]() Topics: [Cybersecurity](), [Exposure Management](), [Artificial Intelligence](), [Vulnerabilities](), [Hacking](), [incident]() Tags: [agentic-security](), [ai](), [exposure-management](), [passwords](), [permissions](), [pypi](), [security](), [speed](), [sql]() ### AI overview Microsoft describes how AI is changing the cybersecurity threat landscape and argues that foundational controls remain essential. The article highlights excessive permissions, weak authentication, unpatched systems, exposed execution paths, and gaps between controls, along with guidance for governing agent identities and tools, isolating execution, restricting connectivity, monitoring behavior, and reducing exposure. ### Source excerpt AI has made fundamental changes to the operating environment for cybersecurity. Explore exposure management guidance on recommended controls and take action and stay ahead of cyberthreats. The post From guidance to action: Security fundamentals that materially reduce risk appeared first on Microsoft Security Blog. ## Linux Foundation Newsletter: September 2026 DevFeed: [Linux Foundation Newsletter: September 2026]() Original publisher: [Read original article]() Author: andrewb@proximabiz.com (The Linux Foundation) Published: 2026-09-17T14:49:43Z Content type: news Language: en Sources: [Linux Foundation - Blog]() Topics: [linux foundation](), [MCP](), [Artificial Intelligence](), [Open Source](), [Xen](), [opensearch](), [Cybersecurity]() Tags: [2026](), [blog](), [careers](), [cybersecurity](), [education](), [lf-europe](), [lf-events](), [lf-research](), [linux](), [linux-blog](), [linux-foundation](), [mcp](), [newsletter](), [open-source](), [open-source-summit](), [opensearch](), [project-news](), [projects](), [september-2026](), [tech-talent]() ### AI overview The September 2026 Linux Foundation Newsletter highlights upcoming AGNTCon and MCPCon North America, developments in agentic AI and AI-agent infrastructure, Xen safety and security work, OpenSearch recognition, and LF Energy research, projects, and community updates. ### Source excerpt Welcome to the September 2026 edition of the Linux Foundation Newsletter The open agentic AI community is coming together in San Jose for AGNTCon + MCPCon North America, October 22-23. More than 3,500 developers, researchers, maintainers and technical leaders will gather for 150 sessions across 11 tracks focused on MCP, agent infrastructure, security, interoperability and production agent systems. Register by October 8 to save. Beyond the event, six developments stand out this month. TheAgentic AI Foundation welcomed the Gates Foundation as its first philanthropic member, bringing the perspectives of underserved communities into the development of agentic AI and supporting broader participation in the firstMCP Dev Summit Nairobi. The Linux Foundation welcomed TRACE, an open specification developed with AMD, Anthropic, Intel, Microsoft, NVIDIA, OPAQUE and TII to provide portable, verifiable runtime and compliance evidence for AI agents and confidential workloads. TheXen Project launched the Xen Safety Committee to develop shared engineering artifacts for functional safety certification and extended security coverage for Xen releases to five years.OpenSearch won the Analytics & Data Intelligence Solutions category in SiliconANGLE's2026 TechForward Awards as the project celebrates five years of community growth. NewLF Energy research found that open source software can deliver two to five times greater net value for grid operators and introduced a standardized framework for evaluating those investments. LF Energy also welcomed three new members and three new projects, advanced Power Grid Model to Early Adoption after more than 10 million downloads, and documented how TenneT achieved a tenfold improvement in grid security analysis performance with PowSyBl. You'll also find new Linux Foundation research, training and certification opportunities, registration for upcoming events, and project news spanning cloud native, AI, energy, cybersecurity, automotive, telecommunicat ## GPT-6 Astra Is the First Model OpenAI Classifies as Critical for Cybersecurity DevFeed: [GPT-6 Astra Is the First Model OpenAI Classifies as Critical for Cybersecurity]() Original publisher: [Read original article]() Author: Steef-Jan Wiggers Published: 2026-09-17T04:59:00Z Content type: news Language: en Sources: [InfoQ]() Topics: [Cybersecurity](), [gpt-6-astra](), [OpenAI](), [Vulnerabilities](), [Exploit](), [browser](), [Kernel](), [Chain-of-thought]() Tags: [agents](), [ai](), [ai-ml-data-engineering](), [architecture](), [architecture-design](), [azure](), [browser](), [chain-of-thought](), [cloud](), [cybersecurity](), [development](), [devops](), [exploit](), [generative-ai](), [governance](), [gpt-6-astra](), [gpt-6-astra-critical-cyber](), [kernel](), [machine-learning](), [ml-data-engineering](), [news](), [openai](), [vulnerabilities](), [zero-day]() ### AI overview OpenAI classified GPT-6 Astra as the first model to reach its Critical cybersecurity threshold. Expert-led evaluations reported previously unknown vulnerabilities in a browser and an operating-system kernel, along with working exploit chains. The system card also reported a substantial decline in chain-of-thought monitorability. ### Source excerpt OpenAI has classified GPT-6 Astra at the Critical cybersecurity threshold under its Preparedness Framework, a first. In expert-led testing the model found previously unknown vulnerabilities in a browser and an OS kernel and built working exploits. The same system card reports a substantial decline in chain-of-thought monitorability. By Steef-Jan Wiggers ## "Regex for Rows": Simplifying Pattern Detection in SQL with MATCH\_RECOGNIZE DevFeed: ["Regex for Rows": Simplifying Pattern Detection in SQL with MATCH\_RECOGNIZE]() Original publisher: [Read original article]() Author: Kent Marten; Sergei Fedorov Published: 2026-09-16T17:14:05Z Content type: tutorial Language: en Sources: [Databricks]() Topics: [SQL](), [databricks](), [Cybersecurity](), [Security & Privacy]() Tags: [count](), [cybersecurity](), [databricks](), [failed](), [false-positives](), [functions](), [login](), [partition](), [product](), [real-time](), [regex](), [sql](), [window-functions]() ### AI overview This tutorial explains how Databricks supports SQL MATCH_RECOGNIZE for detecting ordered event patterns. It shows how the clause can simplify sequence detection, including identifying repeated login failures followed by a successful login, compared with complex SQL queries and window functions. ### Source excerpt Imagine you work in cybersecurity and you have a table that tracks login attempts... ## Spain gets its first taste of AI-aided cyber attack DevFeed: [Spain gets its first taste of AI-aided cyber attack]() Original publisher: [Read original article]() Author: Connor Jones Published: 2026-09-16T11:56:55Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Security Attacks](), [Cybersecurity](), [Artificial Intelligence]() Tags: [ai](), [cyber-crime](), [cybersecurity](), [data-protection](), [security](), [spain]() ### AI overview The article reports that Spain has experienced its first AI-aided cyber attack. It also reports that data protection chiefs are calling for an immediate review of data protection models. ### Source excerpt Data protection chiefs call for 'immediate review' of data protection models ## Iranian spies hit Windows machines with Chosen Brick data-stealing malware DevFeed: [Iranian spies hit Windows machines with Chosen Brick data-stealing malware]() Original publisher: [Read original article]() Author: Jessica Lyons Published: 2026-09-15T18:01:57Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Malware](), [Windows](), [Cybersecurity]() Tags: [cyber-crime](), [cybersecurity](), [iran](), [malware](), [microsoft](), [security](), [windows]() ### AI overview The article reports that Iranian spies targeted Windows machines with Chosen Brick, a data-stealing malware. ### Source excerpt 'Enemies of the regime' on notice ## Critical Cisco email security flaw is being exploited by attackers DevFeed: [Critical Cisco email security flaw is being exploited by attackers]() Original publisher: [Read original article]() Author: Carly Page Published: 2026-09-15T16:01:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cisco](), [Security](), [Cybersecurity]() Tags: [cisco](), [cybersecurity](), [email](), [security]() ### AI overview Attackers are exploiting a critical vulnerability in Cisco email security appliances. Cisco warns that attackers may be able to conceal their activity after gaining access. ### Source excerpt Attackers already exploiting the critical flaw, and Cisco warns they may be able to cover their tracks once they're in ## CenterPoint Energy confirms intruder helped themselves to customer information DevFeed: [CenterPoint Energy confirms intruder helped themselves to customer information]() Original publisher: [Read original article]() Author: Connor Jones Published: 2026-09-15T14:14:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cybersecurity](), [data]() Tags: [breach](), [cyber-crime](), [data]() ### AI overview CenterPoint Energy confirmed that an intruder accessed customer information while the Texas utility investigates a breach. A forum post claims that 7.49 million files may be available. ### Source excerpt Forum post claims 7.49 million files up for grabs as Texas utility investigates breach ## Australia's Essential Eight replacement shifts cybersecurity compliance toward continuous exposure management DevFeed: [Australia's Essential Eight replacement shifts cybersecurity compliance toward continuous exposure management]() Original publisher: [Read original article]() Author: Ben Mudie Published: 2026-09-15T13:32:00Z Content type: article Language: en Sources: [Tenable Blog]() Topics: [Exposure Management](), [Cybersecurity](), [Security](), [Cloud](), [App]() Tags: [australia](), [ciso](), [cloud](), [compliance](), [cybersecurity](), [enterprise](), [essential-eight](), [exposure-management](), [identity](), [operational](), [organization]() ### AI overview The article describes Australia's replacement of the Essential Eight with an outcomes-focused cybersecurity framework covering enterprise IT, cloud, operational technology, and potentially agentic AI. It argues that organizations will need continuous evidence of their security posture, and presents exposure management as a way to identify and prioritize weaknesses and support current posture validation. ### Source excerpt Australia's move from the Essential Eight to an outcomes-based cybersecurity model will push organizations from conducting periodic point-in-time, checklist compliance assessments to having continuous evidence of a solid security posture. Key takeaways The Australian Signals Directorate (ASD) is moving from the Essential Eight cybersecurity framework to a new outcomes-focused Essentials series covering enterprise IT, cloud, operational technology (OT), and potentially agentic AI. The Essential Eight itself only ever covered on-premises enterprise IT, built around eight named technical controls, such as application control and patching. It never extended to the security of cloud, identity, or OT. The shift challenges the traditional checklist approach to cybersecurity, where organizations demonstrate compliance through periodic assessments and point-in-time reports. In dynamic environments spanning IT, cloud, identity, and OT, security posture can change quickly and repeatedly between assessments. Exposure management can help organizations continuously understand where they are exposed, prioritize the most critical weaknesses, and provide evidence of their current security posture. ASD's strategic shift to active security posture validation Can you prove your security posture is solid, right now, on demand? That's the question the Australian Signals Directorate (ASD) has effectively put in front of every Australian organization's board, CISO, and C-suite. ASD's decision to retire the Essential Eight signals a fundamental move away from point-in-time, checklist-based security toward an outcomes-focused model where organizations will need to demonstrate continuous compliance. It's no longer enough to show that your organization had a control in place at the time of the last assessment. In a technology environment that changes continuously across IT, cloud, identity, and operational technology (OT), organizations must be able to answer a much more immediate question: Ho ## Rail Network Modernization: FRMCS, Sovereignty and the AI Edge DevFeed: [Rail Network Modernization: FRMCS, Sovereignty and the AI Edge]() Original publisher: [Read original article]() Author: Steve Payne Published: 2026-09-15T13:31:46Z Content type: article Language: en Sources: [Cisco Blogs]() Topics: [Network](), [Critical Infrastructure](), [digital sovereignty](), [Resilience](), [Availability](), [Cybersecurity](), [Artificial Intelligence]() Tags: [2026](), [availability](), [cisco](), [cisco-industrial-iot-iiot](), [critical-infrastructure](), [digital-sovereignty](), [end-of-life](), [eu](), [europe](), [industries](), [infrastructure](), [internet-of-things-iot](), [latency](), [modernization](), [network](), [networks](), [nis2](), [resilience](), [systems](), [transportation](), [unified-edge]() ### AI overview Cisco's pre-InnoTrans 2026 perspective examines the modernization of European rail communications from GSM-R to FRMCS. It argues that the transition requires changes to the underlying IP network, including high availability, deterministic latency, cybersecurity, and large-scale automation, while operators address resilience, digital sovereignty, investment, and regulatory requirements. ### Source excerpt Join Cisco at InnoTrans 2026 to explore the next generation of rail networks. Discover how FRMCS, AI edge computing, and digital sovereignty are transforming critical infrastructure into secure, automated systems. ## Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice - Part 2: Cisco SNA DevFeed: [Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice - Part 2: Cisco SNA]() Original publisher: [Read original article]() Author: Norman St. Laurent Published: 2026-09-15T13:13:53Z Content type: article Language: en Sources: [Cisco Blogs]() Topics: [Cybersecurity](), [Cisco](), [telemetry](), [Zero Trust](), [vulnerability](), [Network]() Tags: [benchmark](), [cisco](), [cisco-secure-network-analytics-sna](), [cybersecurity](), [department-of-defense-dod](), [government](), [hardening](), [industries](), [nist](), [public-sector](), [stig](), [visibility]() ### AI overview The article explains how the DISA Security Technical Implementation Guide for Cisco Secure Network Analytics turns Zero Trust policy into testable configuration requirements. The STIG provides a shared hardening baseline for the platform and its management functions, with 31 requirements derived from NIST SP 800-53 and related requirements. ### Source excerpt Discover how the new DISA STIG for Cisco Secure Network Analytics helps defense organizations securely configure and harden their analytics platform, ensuring trusted network visibility for Zero Trust operations. ## Safeguarding LLM-Assisted Dev at Guardsquare | Guardsquare DevFeed: [Safeguarding LLM-Assisted Dev at Guardsquare | Guardsquare]() Original publisher: [Read original article]() Author: Noah Fraiture - Backend Engineer Published: 2026-09-15T13:03:38Z Content type: article Language: en Sources: [Guardsquare Blog]() Topics: [Development](), [Large Language Model](), [Cybersecurity](), [Security & Privacy](), [agent observability]() Tags: [ai-agents](), [android](), [containers](), [cybersecurity](), [data](), [dev](), [developer](), [development](), [ios](), [llm](), [llm-gateway](), [thought-leadership]() ### AI overview Guardsquare explains why it adopted LLM-assisted software development despite risks involving sensitive intellectual property, personally identifiable information, and agent access to developer infrastructure. The post describes safeguards including separating sensitive code, isolating agent execution, and controlling model access and outbound data through an LLM gateway and guardrail service. ### Source excerpt This post is not meant to tell you how to use large language models (LLMs) or to claim we've found the right approach. As a cybersecurity company working with particularly sensitive IP, our decision to use LLMs for development was never just about productivity. The broader enthusiasm around LLMs was not itself a reason for us to adopt them quickly. For some time, our position was that the risks outweighed the productivity gains, and incidents involving AI agents elsewhere in the industry reinforced that assessment. ## HBO Max Reddit account compromised to serve ClickFix attacks DevFeed: [HBO Max Reddit account compromised to serve ClickFix attacks]() Original publisher: [Read original article]() Author: Jessica Lyons Published: 2026-09-14T22:43:01Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [ClickFix](), [Malware](), [Reddit](), [Cybersecurity](), [macOS](), [Windows]() Tags: [clickfix](), [cyber-crime](), [cybersecurity](), [hbo-max](), [macos](), [malware](), [reddit](), [security](), [windows]() ### AI overview The article reports that an HBO Max Reddit account was compromised and used to serve ClickFix attacks in a massive 48-hour malvertising campaign targeting macOS and Windows machines with malware. ### Source excerpt Part of a 'massive 48-hour malvertising blitz' targeting macOS and Windows machines with malware ## New hardware device can RAM into encrypted memory, expose your data DevFeed: [New hardware device can RAM into encrypted memory, expose your data]() Original publisher: [Read original article]() Author: Thomas Claburn Published: 2026-09-14T18:31:33Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Hardware](), [Security](), [Server](), [Cybersecurity]() Tags: [amd](), [confidential-computing](), [ddr5](), [ddrop](), [hardware](), [intel](), [memory](), [security](), [server]() ### AI overview A new hardware attack can compromise encrypted DDR5 memory and expose data. The attack requires physical access to the server. ### Source excerpt Attackers would need physical access to the server to pull off the DDR5 trick ## Open Secure AI Alliance Joins the Linux Foundation to Build a Shared, Open Defense Stack for the AI Era DevFeed: [Open Secure AI Alliance Joins the Linux Foundation to Build a Shared, Open Defense Stack for the AI Era]() Original publisher: [Read original article]() Author: andrewb@proximabiz.com (The Linux Foundation) Published: 2026-09-14T16:00:00Z Content type: news Language: en Sources: [Linux Foundation - Blog]() Topics: [Linux](), [Artificial Intelligence](), [Securing AI](), [open-source-security](), [Cybersecurity](), [Security](), [Resilience](), [Inference]() Tags: [ai](), [ai-security](), [collaboration](), [cybersecurity](), [governance](), [infrastructure](), [linux](), [models](), [nvidia](), [open-source](), [open-source-security](), [open-source-software](), [resilience](), [security](), [september-2026](), [standards]() ### AI overview The Open Secure AI Alliance has joined the Linux Foundation under neutral governance. It aims to help organizations collaborate on open AI security tools, research, shared standards, and verifiable defenses spanning models, inference, agents, identity, policy, enforcement, containment, and infrastructure. ### Source excerpt Originally founded by dozens of enterprise leaders and NVIDIA, the Alliance moves to neutral governance to expand industry collaboration on open AI security tools, research and shared defenses ## Cyberattack sends International Meteor Organization crashing back to Earth DevFeed: [Cyberattack sends International Meteor Organization crashing back to Earth]() Original publisher: [Read original article]() Author: Carly Page Published: 2026-09-14T16:00:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cybersecurity](), [Security](), [datacenter]() Tags: [cyber-crime](), [cybersecurity](), [infrastructure](), [security]() ### AI overview A cyberattack dealt a critical blow to the International Meteor Organization's aging infrastructure, with several weeks of disruption expected. ### Source excerpt Attack dealt a 'critical blow' to aging infrastructure, with several weeks of disruption expected ## Perfect-10 GitLab bug under attack days after patch lands DevFeed: [Perfect-10 GitLab bug under attack days after patch lands]() Original publisher: [Read original article]() Author: Carly Page Published: 2026-09-14T14:30:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [GitLab](), [bug](), [Cybersecurity](), [Internet](), [servers]() Tags: [bug](), [cisa](), [cybersecurity](), [cybersecurity-and-infrastructure-security-agency](), [exploit](), [gitlab](), [internet](), [security](), [servers]() ### AI overview CISA confirms active exploitation of a critical GitLab vulnerability shortly after a patch was released. Security researchers observed attackers probing internet-facing servers. ### Source excerpt CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers ## UK.gov begins killing off passwords for 23 million users DevFeed: [UK.gov begins killing off passwords for 23 million users]() Original publisher: [Read original article]() Author: Carly Page Published: 2026-09-14T09:16:11Z Content type: article Language: en Sources: [www.theregister.com - Articles]() Topics: [Passkeys](), [passwords](), [Cybersecurity]() Tags: [government-of-the-united-kingdom](), [password](), [passwords](), [phishing](), [security](), [uk](), [whitehall]() ### AI overview The UK government is beginning to replace passwords with passkeys for 23 million users. The change is intended to reduce phishing problems and save Whitehall approximately GBP 600 per day in SMS costs. ### Source excerpt Passkeys promise fewer phishing headaches - and GBP 600 a day off Whitehall's SMS bill ## A week in security (September 7 - September 13) DevFeed: [A week in security (September 7 - September 13)]() Original publisher: [Read original article]() Author: Malwarebytes Labs Published: 2026-09-14T07:01:00Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Security](), [Cybersecurity]() Tags: [2026](), [bluemoon](), [cybersecurity](), [grindr](), [lg-tvs](), [news](), [security]() ### AI overview A weekly security roundup covering topics discussed from September 7 to September 13, 2026. ### Source excerpt A list of topics we covered in the week of September 7 to September 13 of 2026 ## GitLab Dedicated: Compliance for a new regulatory era DevFeed: [GitLab Dedicated: Compliance for a new regulatory era]() Original publisher: [Read original article]() Author: Aathira Nair Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [GitLab]() Topics: [GitLab](), [Software as a service](), [Amazon Web Services](), [Cybersecurity](), [Security](), [Resilience](), [Deployment](), [Testing](), [Multitenancy]() Tags: [amazon-web-services-aws](), [aws](), [compliance](), [deployment](), [gdpr](), [gitlab](), [infrastructure-as-code](), [nis2](), [product](), [regulatory](), [resilience](), [saas](), [security](), [testing]() ### AI overview The article presents GitLab Dedicated as a fully isolated, single-tenant SaaS platform hosted and managed by GitLab in a preferred Amazon Web Services region. It explains how the service is intended to help European enterprises address compliance, data sovereignty, audit readiness, security, resilience, and operational responsibilities related to DORA, NIS2, and GDPR. ### Source excerpt Enforcements such as NIS2 are no longer a future planning consideration. The European Union Agency for Cybersecurity's (ENISA) NIS360 report confirms that supervisory authorities are actively assessing cybersecurity maturity across critical sectors. The agency is moving from guidance and consultation into active oversight, scrutiny, and accountability. This is the regulatory environment European enterprises now operate in. Multi-tenant cloud platforms remove operational overhead but place source code and pipelines on shared infrastructure regulators now scrutinize. Self-managed solutions provide isolation but transfer responsibility for upgrade cycles, security patches, and disaster recovery (DR) tests to an already stretched platform team. Both deployment options leave gaps in risk management, data sovereignty, and furnishing audit evidence. In this article, you'll discover how GitLab Dedicated, a fully isolated, single-tenant SaaS solution deployed in your preferred Amazon Web Services (AWS) region and hosted and managed by GitLab, addresses these challenges and helps you keep pace with evolving compliance requirements. "NatWest Group is adopting GitLab Dedicated SaaS to enable our engineers to use a common cloud engineering platform; delivering new customer and colleague outcomes rapidly, frequently, and securely with high quality, automated testing, on-demand infrastructure, and straight-through deployment." -- Adam Leggett, Platform Lead for Engineering Platforms, NatWest Group Regulations are driving change In the European Union, key regulations are driving the need for a different platform approach. These regulations converge on a decision most enterprises made before they existed: a platform their developers build on. That decision now carries audit consequences it didn't before. Digital Operational Resilience Act (DORA), which came into force across EU financial services in January 2025, requires financial institutions to keep critical technology resilient, ## Benchmaxxing: When the Benchmark Becomes the Target DevFeed: [Benchmaxxing: When the Benchmark Becomes the Target]() Original publisher: [Read original article]() Author: Nathan Danneman Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [Benchmark](), [Artificial Intelligence](), [Cybersecurity](), [Ground truth / benchmark quality](), [Detection engineering]() Tags: [ai](), [ai-and-cybersecurity](), [benchmark](), [benchmarking](), [benchmarks](), [blog](), [cybersecurity](), [leaderboards](), [securing-ai](), [security](), [validation]() ### AI overview The article explains how public AI and cybersecurity benchmarks can become targets for optimization, a practice it calls "benchmaxxing." It argues that gaming, ceiling effects, data leakage, binary scoring, omitted costs, and aggregate scores can make benchmark results poor proxies for real-world defensive capability. The article proposes task-coupled internal benchmarks intended to evaluate end-to-end cyber agents and support rigorous science rather than visibility-driven score optimization. ### Source excerpt The more attention a benchmark receives, the stronger the incentive to optimize for it. In AI and cybersecurity, this can have significant consequences. [Next page]()