Customer-installed AI tools can now attack your software
Your customers control which AI tools touch your software. A capability jump in one of those tools can expose you overnight.
How to monetize software in air-gapped environments
Air-gapped environments are designed to maximize security. They shouldn’t come at the expense of customer value or revenue growth.
Text salting exposes a blind spot in AI email security
An old evasion technique is finding new ways to influence modern detection systems.
What ISVs still get wrong about PCI DSS 4.0.1
PCI DSS 4.0.1 requirements are already mandatory, and your next assessment won't forgive gaps left over from the old standard.
Security and compliance news for ISVs: August 2026
From a major supply chain breach to new PCI guidance, here's what's shaping risk for software leaders right now.
Identity is retail’s new security perimeter
As AI and cloud adoption accelerate, protecting identities has become the next growth opportunity for every solution provider.
Ransomware attacks up 20% year-over-year as The Gentlemen and Qilin battle for dominance
Despite the quarterly dip, ransomware activity is elevated, with attacks in the first half of 2026 up 20% compared to the same period last year.
Essential security updates for dev teams: Q2 2026 update
Protect your pipeline from emerging supply chain threats and adapt to new federal secure by design compliance standards.
Protect your development team from advanced phishing
Turnkey phishing kits can easily bypass standard two factor authentication, which means your software company must upgrade its identity security now.
Editor’s notebook for ISVs: AI reality checks and steady leadership
ISV leaders must navigate failing artificial intelligence rollouts, rising application vulnerabilities, and economic stress.
Why your dev team is the next target for AI-driven email attacks
With 34 percent of companies facing monthly account takeovers, software leaders must rethink security. Discover actionable insights to secure your development environment.
AI, Phishing-as-a-Service drive increase in email attacks, Barracuda Reports
2026 Email Threats Report finds attackers adopting stealthier delivery methods, underscoring need for integrated, multilayered email protection.
Safeguard against unattended payment system security risks
ISVs and VARs can help merchants scale unattended payments by providing robust security solutions that protect data and maximize total profitability.
Six mobile app security myths to forget in 2026
Security is situational. What actually works today must be grounded in the “here and now” rather than implicitly clinging to the “tried and true” of yesterday.
Why your software business needs more than just a simple cloud backup
World Backup Day 2026 is a vital reminder for ISV leaders to move beyond simple backups and toward true business continuity to protect intellectual property.
You May Also Like
The payment detour: What it really costs your roadmap
Payment integrations quietly pull ISV and VAR engineers off the roadmap. See what the payment detour really costs and how to keep your team shipping.
An incident response checklist built for smaller ISVs
Smaller independent software vendors (ISVs) can use this checklist to prepare for security incidents and keep customers and partners informed.
Turning testing into context for AI development
Test artifacts and execution evidence give AI the product context it needs to build toward expected behavior and reduce costly rework.
BlueStar enters into an agreement to be acquired by TD SYNNEX
BlueStar's expertise and TD SYNNEX's global reach to create new opportunities for partners.
