Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What an AI Agent Registry Should Record

Seven fields carry an agent registry, and they split into two kinds. Some a person has to state, because the answer exists only in somebody's intention. The rest can be read from systems that already hold them. ‍ Which kind each field belongs to decides whether the registry drifts. Typing an observable value creates a record that was accurate on the day somebody typed it, and recording a declared value is the only way to capture it at all. ‍

Data Lineage for AI Agents: Takeaways From MIT Technology Review

Security teams built their controls around people, applications, devices, and networks. AI agents operate across all four at once. An agent can pull records from Salesforce, combine them with financial data, summarize the result with a language model, and post it to Slack, with no person touching any step. Each action may look permitted on its own, which means the risk sits in the sequence, and most tools can’t see the sequence.

Behind the graph: The art of target selection for AI pentesting

When planning a pentest, the list usually starts with the crown jewels: the applications and data stores you’ve classified as most critical. But a large external attack surface can contain thousands of assets. Some can expose sensitive data or provide access to critical systems, even if they’ve never made it onto your pentest shortlist. AI makes it possible to investigate more of that surface, but each investigation consumes compute and tokens.

How AI Is Changing Portfolio Analysis and Financial Decision-Making

Want to make smarter money decisions without spending hours buried in spreadsheets? Wealth management has always been about number crunching. For decades, that crunching was done by humans armed with calculators, whiteboards and caffeine. Fast forward to today, AI can help you.

Best AI Development Companies for Business Process Automation in 2027: 7 Companies Compared, Founded Between 1989 and 2016

We compared seven companies that build AI into business processes such as documents, customer support and operations: Azumo, Hicron Software, Simform, Master of Code Global, ScienceSoft, Netguru and SumatoSoft. They were founded between 1989 and 2016, and their sites describe everything from AI agents to document processing. The companies appear in no particular order, since each one fits a different kind of project, and every detail below comes from the company's own website.

RevStealer Malware: A Hidden Data Heist Behind the Promise of Free AI

RevStealer is an infostealer first observed in September 2026 that targets Windows systems, with reported 64-bit execution and JavaScript-based components. It is built to steal authentication credentials and other sensitive user data while emphasizing stealth through anti-debugging, anti-sandbox, anti-VM, and evasion features. Its threat significance comes from a short, theft-focused execution model that pairs broad data collection with concealed command-and-control and exfiltration behavior.

MCP Database Security: Seven Boundaries Every AI Agent Needs

Connecting an AI agent to a production database can turn a slow investigation into a short conversation. The agent can inspect a schema, generate a query, and help explain a failed migration or an unexpected metric. The same connection can also expose sensitive records or modify production data if the access path is treated as a single trusted pipe.

AI guardrails aren't security controls

AI guardrails are sold as a solution to keep models behaving as intended - but it can be hard to figure out what you’re getting. The problem starts with the word itself. "Guardrails" means different things depending on who's selling them. Some vendors use it for simple prompt filtering, others bundle in entirely different controls and call it "guardrails" because the word sounds reassuring. Without a shared definition, buyers can't easily tell what they're actually getting.

Harden CrowdStrike Security Controls

CrowdStrike Falcon provides powerful endpoint detection and response capabilities. But as environments scale and changes are made, CrowdStrike security controls can change and drift away from security baselines. This can create open doors in your defenses that fast-moving AI-powered adversaries can find and exploit. Reach analyzes your CrowdStrike Falcon security controls and takes rapid action to close these doors to attackers. Reach finds and fixes control misconfigurations, activates unused capabilities, and detects and remediates configuration drift.

AW Chief Revenue Officer Will May on AI, Security Operations and Cyber Resilience | MTS Live

Everything is accelerating, and so simply put, if your technologies and your teams aren’t accelerating at the same rate that the threat landscape is, you’re in trouble.” Live from the 2026 Security Operations Summit, Arctic Wolf Chief Revenue Officer Will May joined Monitor the Situation to discuss how security operations are evolving in the age of AI.