Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

appsentinels

The Agentic Attack Surface Is Growing Faster Than Your API Inventory. Here's How to Catch Up

Jul 17, 2026 By AppSentinels In AppSentinels
Ask any security leader how many APIs their organization runs, and you’ll usually get a confident number. Ask them how many of those APIs are actually being called by an AI agent, a copilot, or an automated workflow right now, and the confidence tends to disappear. That gap is the problem. APIs have always outpaced the inventories built to track them; new services ship every sprint, integrations get added without a ticket, and old endpoints get deprecated without ever being switched off.
Read Post
datadog

Monitor Apigee X API traffic and security with Datadog

Jul 15, 2026 By Datadog In Datadog
Apigee X is Google Cloud’s API management platform. Software and platform teams use it to secure, publish, and govern the APIs that internal services, partners, and external developers depend on. Apigee X sits in the request path for that traffic, so a latency spike or a rise in policy errors reaches API consumers before most other signals do. Watching proxy traffic, latency, and security posture usually means jumping between Apigee analytics and separate infrastructure tools.
Read Post
appsentinels

MCP Data Exfiltration: How AI Agents Leak Sensitive Data Through MCP Tool Calls

Jul 14, 2026 By AppSentinels In AppSentinels
Model Context Protocol (MCP) is what turns an AI assistant into an AI agent. It’s the standardized bridge that lets models call real tools – read files, query databases, send messages, pull emails. That capability is the whole point. It’s also what makes MCP environments a target. Most deployments were scoped for what the agent needed to do. Not for what happens when that access is turned against the organization.
Read Post

Demo Discover Enterprise AI Workloads Running on AWS

Jul 14, 2026 By Wallarm In Wallarm
AI workloads are appearing across AWS environments faster than most teams can inventory them. New APIs, EKS clusters, model integrations, and AI services are showing up across accounts and regions without a clear ownership trail or centralized visibility. By the time security catches up, the environment has already changed again.
View Video
wallarm

AI Control Platform vs. AI Firewall vs. AI Gateway: Clearing Up The Terminology

Jul 13, 2026 By Wallarm In Wallarm
Editor's note: This article was originally published by Tim Erlin on LinkedIn. It has been republished here with the author's permission. It seems like every security vendor now sells "AI security." The WAF companies, the API gateway companies, the cloud platforms, the proxy startups: all of them have an AI story, and most of them have attached one of three labels to it. AI gateway. AI firewall. AI control platform. The terms often get used as if they're interchangeable, but they are not.
Read Post

AI Governance on AWS: Discover, Observe, and Control AI in Production

Jul 13, 2026 By Wallarm In Wallarm
AI adoption within AWS environments is accelerating faster than most security and governance programs. AI agents, APIs, MCP servers, and model integrations are entering production across cloud environments, often without centralized visibility or runtime controls. In this webinar, you’ll see how teams can discover AI workloads across AWS accounts, understand what AI systems are actually doing at runtime, enforce policy in real time, and generate continuous governance evidence without slowing engineering teams down. The session focuses on practical operational capabilities for AI systems already running in production.
View Video
appsentinels

Two Months After PocketOS: What a 9-Second Database Deletion Taught Us About Agentic AI Security

Jul 13, 2026 By AppSentinels In AppSentinels
Nine seconds. One API call. A car rental software company’s production data was gone. That’s the headline from the PocketOS incident, and it’s the reason this story spread across engineering and security circles the way it did in late April. Two months later, the incident is no longer breaking news. But it hasn’t aged out of relevance; it has aged into a pattern.
Read Post
appsentinels

MCP Supply Chain Security: How Malicious MCP Servers Are Infiltrating Enterprise AI Environments

Jul 9, 2026 By AppSentinels In AppSentinels
Every enterprise deploying AI agents is building on a foundation of third-party MCP servers they don’t control, can’t verify, and barely track. The security conversation keeps focusing on the model – prompt injection, jailbreaks, hallucinations. That’s the wrong place to look. We’ve covered why that framing falls short elsewhere too – see System Prompts Are Not Security Boundaries. Business Logic Graphs Are.
Read Post
appsentinels

The Four Attack Patterns Traditional Security Tools Miss at FIFA-Scale Events

Jul 6, 2026 By AppSentinels In AppSentinels
Every major tournament cycle, ticketing platforms brace for a traffic spike. Most security teams plan for volume. The attack data tells a different story: the traffic that does the most damage isn’t the loudest traffic. It’s the traffic that looks like a real fan, on a real device, doing something a real fan would plausibly do, just millions of times, in a pattern no single fan ever would.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.