Memory corruption bugs are 6x rarer in weaponized exploits than in what AI is finding, and the AI-discovered ones are moving to exploitation faster anyway. If AI changes what gets found, it can change what gets weaponized next.

Strengthen your security posture with Securin automation, intelligence and expertise.

Securin's annual in-depth report on the state of ransomware in 2025. Published Feb 2026.

Russia’s cyber operations represent one of the most aggressive, expansive, coordinated state-backed campaigns globally. Our research identifies 178 state-sponsored threat groups exploiting 202 unique vulnerabilities across more than 50 countries..

North Korea’s cyber campaigns are accelerating in scale, sophistication and ambition. With more than $6 billion in stolen cryptocurrency since 2017, the trend line is clear: cybercrime has become the DPRK’s most reliable sanctions workaround.

China operates the most expansive and strategically coordinated state cyber ecosystem in the world. With 264 identified groups - 75% of them directly state-sponsored - Beijing has created a distributed-but-synchronized operation...

When GenAI first entered mainstream software development pipelines, conversation quickly centered around novelty: hallucinations, synthetic media, prompt injection. But that framing missed the real shift already underway.

Think like an attacker. Build like an engineer. Not too long ago, software developers didn’t have to give much thought to security. The most important question they needed to get an answer to was, “Does it work?” Followed closely by, “Is it

There’s a scene in the movie Lost in Translation, where the American character Bob is shooting a commercial, and the director gives him lengthy instructions in Japanese, which are then translated to him in just a few words...

What happens when an AI model does something it shouldn’t? A well-crafted prompt – the conversational equivalent of malware - can trick AI assistants into ignoring security guardrails, revealing sensitive data, or generating harmful content

When vendor prioritization data is broken, developers and AppSec teams pay the price.

Original research report into ransomware attacks in 2024, including a special section on emerging AI threats.

The Good, The Bad, and The Ugly The AI genie is out of the bottle. Here’s how to ensure it supports application security.

If you’re an AppSec pro over a certain age, you’ll remember the rules for Mogwai...

There’s a lot of vulnerability in today’s software supply chain. Here’s how CI/CD pipeline security helps to reduce it. In 2024, the National Vulnerability Database (NVD) recorded almost 40,000 Common Vulnerabilities and Exposures (CVEs) - a 39%

Cybersecurity budgets are increasing, albeit modestly. Here’s how to ensure that AppSec teams benefit and can use investments to demonstrate positive software security ROI. It might not always feel like it, but security as a percentage of IT

Frankenstack is real. How do you get the monster back under control without compromising on cybersecurity? Almost 80% of U.S. tech decision-makers report moderate-to-extensive levels of tech sprawl. It feels like a safe bet that security teams are