Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

netwrix

Static credentials are still AI's easiest way in

Aug 13, 2026 By Sascha Martens In Netwrix
Netwrix's 2026 research found a 4x gap in breach rates between organizations where AI has significantly grown their identity count and those where it hasn't. Static credentials are AI’s easiest way in: passwords, keys, and tokens that never expire and never get checked. AI didn't invent the over-privileged credential, it just found the fastest way to use one.
Read Post
knowbe4

Shadow AI: The New Frontier of Shadow IT

Aug 13, 2026 By Dr. Kawin Boonyapredee In KnowBe4
As a CISO advisor, I am observing a familiar pattern gaining a new, critical dimension. What we historically identified as "Shadow IT", the use of unapproved SaaS and tools, is rapidly evolving into "Shadow AI." Employees are increasingly leveraging AI bots for drafting, analysis, code generation and strategic decision-making.
Read Post
ionix

We built an AI PR reviewer. The hard part was teaching it to say nothing.

Aug 13, 2026 By Arthur Vinberg In IONIX
Most AI code review tools fail the same way. They work, in the sense that comments appear on the pull request. Then you read the comments and they are 80% “consider extracting this into a helper”, “missing test coverage”, “this variable name could be clearer”, and within a couple of weeks everyone has learned to scroll past anything the bot wrote. These are not false positives. They are true and irrelevant, which costs the same attention and is harder to argue with.
Read Post

AI can think. AI can act. Secure the entire AI workflow.

Aug 13, 2026 By A10 Networks In A10 Networks
Securing AI systems today means securing the whole AI process, from access, to prompt, to action. Explore A10's AI security offering, which ties the capabilities of AI Firewall, MCP discovery/protection, AI gateway, and ThreatX, all together into one cohesive end-to-end AI security solution.
View Video

Ep. 73 - EU AI Act-What Actually Lands on August 2nd, and What Slipped to 2027

Aug 12, 2026 By SafeBreach In SafeBreach
The EU AI Act's August 2nd, 2026 deadline just changed shape. Host Tova Dvorin and offensive security engineer Adrian Cully separate what actually lands—Article 50 transparency duties and GPAI enforcement powers—from the high-risk obligations that slipped to December 2027. Inside: Article 15 writes MITRE ATLAS and the OWASP LLM Top 10 into binding law, the DORA / NIS2 / AI Act overlap that makes one incident reportable three times, penalties up to 7% of global turnover, and the five things a CISO should do this week. Part 1 of 2.
View Video

Is your AI system secure enough? MITRE ATLAS Is Now Law.

Aug 12, 2026 By SafeBreach In SafeBreach
For the first time anywhere, the MITRE ATLAS framework and the OWASP Top 10 for LLM applications are written into binding law. Article 15 names data poisoning, model poisoning, adversarial examples, model evasion and confidentiality attacks as threat classes you must have technical measures against—and must be able to evidence to a regulator. The question is no longer whether you have thought about AI security. It is whether you can prove your AI system holds.
View Video
Zenity

Coding Agent Risk for CISOs: Blast Radius, Governance, and Where to Start

Aug 12, 2026 By Dina Durutlic In Zenity
Claude Code, Cursor, GitHub Copilot, and Gemini CLI are running on developer machines across your enterprise right now. They're browsing the web, writing to your filesystem, committing code to your repositories, and calling external APIs under the identity of your engineers. Most security teams have no visibility into any of it. This isn't a future problem.
Read Post
Zenity

Black Hat Proved AI Agents Are Already the Attack Surface

Aug 12, 2026 By Anna Schibli In Zenity
Enterprise AI agents stopped being a pilot project a while ago. They read email, touch source code, operate browsers, and increasingly make decisions inside production systems, which means the security model built for chatbots and prompts no longer covers what is actually happening inside the enterprise. Black Hat USA 2026 turned out to be the week that gap became impossible to ignore.
Read Post
Snyk

The Agent Baseline: 35 controls, but where should you start?

Aug 12, 2026 By Krysztof Huszcza In Snyk
Two weeks ago, we published the Agent Baseline alongside Docker and Keycard. In it, we describe six security outcomes, 35 controls, and an open reference architecture for running AI agents at the enterprise level. Last week, we stress-tested it: we took it to a panel at Black Hat and spent about one hour being asked hard questions about it. Play Video: Snyk x Docker x Keycard | Agent Baseline Panel @ Black Hat 2026 The most useful question came from someone who had actually already read it.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.