Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Governing Microsoft 365 Copilot in the Enterprise

Microsoft states the position plainly. Copilot only surfaces organizational data to which individual users have at least view permissions, so it grants nobody access to anything they could not already open. What changes is that material somebody had permission to reach and never would have found now arrives in a summary. ‍ The governance work is therefore permissions work that predates the deployment.

Cloudflare & Ping Identity: Identity Security in the Era of AI

As AI rapidly advances, identity security is undergoing a massive shift. Gavin Chen, Global Alliances at Cloudflare, shares how Cloudflare and Ping Identity are partnering to help organizations secure human users, non-human agents, and autonomous AI workflows—all while empowering businesses to innovate without friction.

You only need AI tokens to become a hacker

AI has removed the skill, personalization, and speed barriers that once limited cyberattacks. Attackers use language models at every stage of the kill chain, from recon to persistence, and underground tools sell pre-jailbroken access to mainstream models for as little as $50 a week. But because every attack still has to change a file, a configuration, or a script on a real system, detecting unplanned change works no matter which model wrote the payload.

Vibe Coding Has a Security Problem (And How to Fix)

I vibe coded a working app in 10 minutes without writing a single line of code. It ran fine. It also had a hardcoded API key, a database password sitting in a Model Context Protocol (MCP) config file, and an npm package I never checked. In episode one of Secure Vibe Coding, we look at what AI-assisted coding means for secrets security, using data from GitGuardian's State of Secrets Sprawl 2026 report.

AI Agents in Bank Accounts: From "Who Logged In" to "Who Decided"

The banks aren’t being hacked, at least not in the way the headlines imply. They’re being out-authenticated. No breach of JPMorgan’s, Morgan Stanley’s, Bank of America’s, Citi’s, or Wells Fargo’s core systems has been publicly reported. Instead, Axios reported on October 22—and Reuters corroborated—that AI agents in bank accounts (major U.S. banks) are being detected and blocked.

Why Organizations Secure AI Agents with Falcon Guardian

AI is changing from a tool that generates content into agents that reason, decide, and take autonomous action. Employees now use AI assistants in their browsers and desktop apps. Developers run coding agents that read files and execute commands on their machines. Business teams build agents and connect them to enterprise data through Model Context Protocol (MCP) servers. This shift from asking AI to tasking AI creates hard questions for security teams: Which AI agents are operating in the environment?