Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

7 Agentic AI Security Threats in DevOps That Multiply Your Attack Surface

AI adoption in the DevOps field has been extensive. Developers use agents daily to broaden context, automate coding, prototype, etc., saving time and minimizing the footprint of mundane tasks. But it’s not all about gains. Agentic AI enables and introduces security threats that were unknown just a few years ago. With machine speed and scale, these can impact your corporate repos in a number of highly dangerous ways. The trend is on the rise, including at the level of popular DevOps platforms.

Nightfall's integration with Claude's Compliance API is now live

What this milestone means for enterprise AI security - and why we built it. AI adoption inside the enterprise didn't slow down and wait for security to catch up. It accelerated. And nowhere is that more visible than in the rapid deployment of large language models like Claude across enterprise workflows. Customer support teams use it to summarize tickets. Legal teams use it to review contracts. Engineers use it to write and review code. Finance teams use it to draft reports.

Claude's Agents Are Already Running Across Your Enterprise. Now Security Teams Can Catch Up.

We are excited to share that Zenity now integrates with Claude's Compliance API to bring Claude activity into the same AI security and governance platform enterprises already use to govern agents across the business. By combining Claude's Compliance API telemetry with Zenity's native agent security capabilities, security teams gain the visibility, posture controls, and real-time enforcement needed to secure Claude across the full agent lifecycle.

AI-assisted SOC training with Carlo Anez

Join us for this week's Defender Fridays as Carlo Anez, Founder & Lead Instructor at IgniteCyber Academy and DEFCON Training Instructor, breaks down how to build practical blue team skills using open-source labs, MITRE ATTACK, and real-world defender workflows, and where AI fits into the picture without replacing the analyst.

Why Technology Companies Are Investing in Drone App Development

The global drone market is expanding at an impressive pace, driven by advances in automation, artificial intelligence, cloud computing, and connectivity. While drone hardware continues to evolve, software has become the primary factor that determines how effectively organizations can leverage these technologies. Companies working with companies, such as Wezom, on custom drone app development projects are discovering new ways to automate operations, improve data visibility, and create scalable digital ecosystems that support long-term growth.

How to Validate Policy-as-Code Without Breaking Builds (Even When AI Writes the Code)

Picture two realities for the same compliance control reaching production. Reality One: Your AppSec team writes a new rule. An engineer uses Claude Code or Cursor to generate the OPA (Open Policy Agent) Rego policy in minutes. They deploy it. It blocks a legitimate release on a missing context variable, and the on-call engineer routes around the gate to ship the code. The AI gave them fast code — but not code they could trust.

One Identity on Mythos, Fable and what they mean for your identity controls

Mythos changes the speed of attack. Identity controls decide what happens after. The shift underway For the first time in 19 years, vulnerability exploitation now leads the Verizon Data Breach Investigations Report as the breach entry point. It accounts for 31 percent of incidents, ahead of stolen credentials. Threat actors are using AI to exploit known vulnerabilities in hours rather than months. The Verizon data predates the latest frontier AI advancements.

Frontier AI Explained: A Guide to What Mythos, GPT 5.5-Cyber, MDASH, and CodeMender Really Do

The cybersecurity industry is entering a new phase of AI adoption. Frontier AI models are increasingly capable of identifying vulnerabilities, investigating threats, analyzing code, and accelerating security operations at machine speed. At the same time, innovation is moving rapidly. New models, platforms, and security-focused AI initiatives are emerging across the market, each pushing the boundaries of how AI can be applied to real-world cybersecurity workflows.

How CISOs Track Configuration Drift in Real Time | Misconfiguration & Cybersecurity Posture

How do CISOs feel about drift? Misconfigurations rarely look like incidents. A setting shifts, posture weakens, and nothing announces it until it already matters. That is a hard seat for whoever owns posture. Without a clear view of what changed, you are working secondhand, leaning on the team to tell you what moved and whether it hurt.