Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Poison everywhere: No output from your MCP server is safe

The Model Context Protocol (MCP) is an open standard and open-source project from Anthropic that makes it quick and easy for developers to add real-world functionality — like sending emails or querying APIs — directly into large language models (LLMs). Instead of just generating text, LLMs can now interact with tools and services in a seamless, developer-friendly way.

Verifying Bots and Agents with Cryptography in the Age of AI

In this episode, host João Tomé is joined in Cloudflare’s Lisbon office by our Senior Research Engineer Thibault Meunier to explore a new proposal that could reshape how bots interact with the web in the age of AI. Timestamps: We go into Cloudflare’s proposal of using cryptographic signatures for bots, enabling websites to verify their identity. Why is this important? As AI systems rely increasingly on online content, this standard could help build a better relationship between content creators and AI platforms.

AI - More Than a Buzzword?

Lately, the common theme in emerging identity security technology has been… well, you know. AI. It’s all anyone wants to talk about. All of us in the IAM business have been scurrying to find a way to tell our customers and the market that, yes! we have AI! we've had it all along! If that were so obviously true, then why are we having to tell you about it now? As an identity security technologist, I’ve experienced the growing pains of AI in IAM.

Do we need an AI compliance framework?

Compliance isn’t just a checkbox. It’s the frontline of cybersecurity defense. In this episode of the Cybersecurity Defenders podcast, Joshua Hoffman, Chief Revenue Officer at ControlCase, shares critical insights on the evolving role of compliance in cybersecurity. From frameworks like CMMC and SOC 2 to the rising pressure from new SEC regulations, we examine how organizations can move beyond surface-level audits and adopt a scalable security posture.

New in Breach Risk: Threat Monitoring Powered by an AI Analyst #cybersecurity #tprm #ai #security

Peter, Senior Product Marketing Manager at UpGuard, shares how our new Threat Monitoring feature helps security teams detect and triage real threats across the open, deep, and dark web—faster and with more clarity. Now in early access. Talk to your UpGuard rep to get started.

Welcome-to-The New Era of AI-Driven Development

Artificial intelligence is no longer a future consideration. It’s here — and it’s changing how software is built. Fast. Enterprise teams are moving beyond AI pilots and proof-of-concepts. They’re rolling out real-world, high-value use cases and doing it at scale. According to IDC forecasting, AI spend will more than double by 2028. At the center of that surge is AI-assisted software development.

AI Is Reshaping Software. Is Your Security Strategy Keeping Up?

Software development is undergoing its biggest shift since the rise of cloud and DevOps. The difference this time? The shift is being driven by artificial intelligence, and it’s moving fast. AI-powered coding tools have rapidly made their way into developer workflows. Agents and LLMs are helping teams move faster, automate more, and build in entirely new ways. But speed often comes with tradeoffs.

Ensuring ISO/IEC 23894:2023 Compliance for AI Systems with AppTrana WAAP

ISO/IEC 23894:2023 is a relatively new international standard focused on AI risk management. It is designed to help organizations manage risks arising from the development, deployment, and use of Artificial Intelligence (AI) systems. While it’s AI-specific, many of its security-related clauses—especially those concerning web applications, APIs, and external-facing systems—apply broadly to ensure AI systems are secure, trustworthy, and resilient.

Charlotte AI - Agentic Workflows - Impossible Time Travel

Logins from New York and Singapore—two minutes apart? That’s not time travel, that’s trouble. CrowdStrike’s Charlotte AI spots these impossible login anomalies instantly. By correlating RDP activity, calculating travel speeds, and taking risk-based action, Charlotte AI Agentic Workflows deliver real-time response to your SOC. No dashboards. No log diving. Just lightning-fast threat detection and action.

Securing the future of AI Agents: Reflections from the Microsoft Build Stage

Standing on stage at Microsoft Build, surrounded by innovators shaping the future in the era of AI Agents, I felt equal parts inspired and responsible. Inspired by the rapid momentum around AI, and responsible for raising a flag about something we don’t talk about enough - how we secure the very systems that are now acting on our behalf. This post isn’t a recap, rather a continuation, a chance to go deeper into the story I shared (and the one we’re still writing.)

Welcome to Snyk Labs: Charting the Course for AI-Native Security

Software development is in the midst of a monumental shift, powered by the rapid advancements in Artificial Intelligence. AI isn't just changing how we build software; it's transforming the very nature of applications themselves. As AI-native applications become more prevalent, we're also seeing new, complex security threats emerge. Traditional security approaches aren’t designed for the dynamic and often unpredictable nature of Large Language Models (LLMs), agents, and other AI-driven systems.

CrowdStrike Elevates XIoT Security with AI-Powered Insights

As organizations increasingly rely on connected devices to drive efficiency and innovation, the Extended Internet of Things (XIoT) — covering industrial control systems (ICS), operational technology (OT), Internet of Things (IoT), and Internet of Medical Things (IoMT) — has rapidly expanded. This greater connectivity often drives increased vulnerability as critical assets are exposed to sophisticated threats.

How Do You Safeguard AI When Development Outpaces Security? With Ante Gojsalić - SplxAI

Generative AI is moving faster than our defences — can we catch up? In this episode of Razorwire, host James Rees (aka Jim) speaks with Ante Gojsalić, CTO and co-founder of SplxAI, to dissect the growing risks, complexities, and opportunities in securing AI systems before they outpace our ability to protect them.

Now Available: AI-Powered Data Loss Prevention for Microsoft Exchange Online

Organizations investing in Microsoft 365 E5 licensing expect enterprise-grade email protection. Yet despite premium security features, customer feedback reveals persistent challenges with Microsoft Purview DLP across Exchange Online environments. Microsoft deployment specialists report seeing clients deploy Purview on their own, discover a wealth of false positives, and turn off the policies or set them to audit mode. Policies never become useful.

Our AI is scanning the dark web to recover stolen credentials right now. #cybersecurity #ai #vendor

Our AI is scanning the dark web right now — here’s what it’s finding. In this cybersecurity short, we give you a real-time glimpse into how AI-driven tools are monitoring the dark web for stolen credentials, emerging threats, and malicious activity before it reaches your business. From detecting leaked passwords to identifying early signs of cyberattacks, AI is transforming threat intelligence and external attack surface management (EASM).

Accelerating Security Operations with Splunk and Foundation AI's First Open-Source Security Model

Cisco Foundation AI’s Foundation-sec-8b model brings a new wave of innovations and efficiency to security operations. As a purpose-built, open-weight Large Language Model (LLM) designed specifically for cybersecurity, Foundation-sec-8b enables security teams to act faster, reduce fatigue, and scale operations without compromising accuracy.

Securing the Future: Ebikes in the Age of Smart Mobility

As cities get smarter and traffic gets worse, more people are turning to better ways of getting around. One option that's gaining speed fast is the ebike. These electric bikes are changing how we think about daily travel, offering a cleaner, quicker, and more affordable way to move. Whether it's cutting down on gas costs, avoiding traffic jams, or reducing your carbon footprint, ebikes are more than a trend, they're a smart solution for modern mobility.

Is Windsurf's SWE-1 Model a Game Changer? Let's See...

In this episode of my ongoing series testing AI coding tools, I put Windsurf’s latest model, SWE-1, to the test. The challenge? Build a secure note-taking app from scratch. I’m looking at everything from how it handles authentication and encryption to whether the code is clean, usable, and actually secure. If you're curious about how SWE-1 stacks up against other AI dev tools like GPT-4 or Claude, this video is for you.

Introducing Aikido AI Cloud Search

Gain instant visibility into your cloud environment with Aikido Cloud Search. Search your cloud like a database. Whether you want to identify exposed databases, vulnerable virtual machines, or over-permissive IAM roles — Aikido gives you the power to uncover risk in seconds. No query language required, no waiting on devops. Just describe what you’re looking for, like “Give me all VMs with CVE-2025-32433 that have port 22 open.” Scroll down to "How It Works" to get technical.

Charlotte AI - Agentic Workflows - Hunting Fake CAPTCHAs

Adversaries are faking CAPTCHAs to trick users into running malicious commands—and using AI to make it convincing. See how CrowdStrike’s Charlotte AI and Agentic Workflows detect these threats, automate response with context-aware actions, and adapt based on risk. CrowdStrike Charlotte AI: ► Work smarter, not harder. Turn hours of work into minutes, or even seconds, with a conversational AI assistant.

Hi My Name Is...the Not So Shady Side of Long-Term Memory in AI

In our last post, we explored how short-term memory enables agentic AI to hold a conversation that doesn’t reset after every message. That form of memory is all about flow—preserving context, user intent, and logic within a single session, even as interactions stretch across multiple turns. The longer the session, the more memory is required to maintain continuity. But not all memory needs to be verbose. Long-term memory serves a different purpose: persistence across sessions.

From Python to Prompts: Becoming an AI-First Developer

As part of the DevSecNext AI series, Jit hosted Sahar Carmel—Principal AI Engineer at Flare—for an inside look into what it really takes to become an “AI-first” developer. With nearly a decade of experience in AI and machine learning, Sahar has been hands-on with copilots and agents long before they were mainstream. In this session, he walks through his radical shift in workflow: from writing code line-by-line to orchestrating prompts, tokens, and memory banks.

Frameworks for Growth: A Vanta Series on Startups, AI, and Scaling

In Frameworks for Growth, Vanta’s Christina Cacioppo interviews the builders and investors behind today’s most impactful startups—from early-stage GTM to AI strategy, leadership, and everything in between. This founder-first series dives into the real frameworks driving scale at leading companies, not just the highlight reels.

The Blind Spots of Multi-Agent Systems: Why AI Collaboration Needs Caution

Multi-agent systems (MAS) are reshaping industries from IT services to innovative city governance by enabling autonomous AI agents to collaborate, compete, and solve complex problems. This powerful transformation comes with a cost. As multi-agent systems grow, their risks also increase, opening the door to adversarial manipulation, emergent vulnerabilities, and distributed attack surfaces.

The patching paradox: The reality of AI in security

Let’s stop pretending AI is going to save security. Sure, it’s going to help — it already is. But the idea that defenders will somehow “keep up” with attackers just because they both have access to generative AI is a fantasy. I come at this from a red-team mindset. I’ve spent years thinking like an attacker. Now I work at a blue-team company trying to defend real systems. And here’s what’s obvious to me: AI is going to let attackers move faster.

Takeaway from RSAC 2025: Focus on AI Utility

If you are at all involved in cybersecurity, then chances are you attended or talked to someone about the RSA Conference 2025. This year’s theme was “Many Voices, One Community” – a spot on description based on my experience. Yes, there were many voices – mostly talking AI, specifically agentic AI which is driving innovation and demand for security solutions.

Zenity and Microsoft Copilot Studio Extend AI Agent Security from Buildtime to Runtime

As enterprises race to adopt AI Agents to drive productivity and innovation. We are excited to announce that Zenity and Microsoft Copilot Studio are joining efforts to enable full adoption of AI Agents. Together, Zenity and Microsoft Copilot Studio help organizations confidently build, deploy, and use AI Agents with built-in security and governance throughout the development and deployment process so they can accelerate adoption at scale.

5 practical tips to navigate AI, security, and compliance in healthcare

It’s no secret that the healthcare industry has a fraught relationship with cybersecurity. Despite being highly regulated, healthcare companies are hot targets for hackers. The wealth of patient data healthcare companies often possess sells for a premium on the dark web, and hackers have an opportunity to yield high ransom payouts due to the criticality of healthcare systems and services. After all, lives may truly be at stake amid a healthcare breach.

Azure and Grok: Bringing Enterprise-Level AI to the Small and Mid-Market Frontier

In today's hyper-competitive business environment, artificial intelligence is no longer the exclusive playground of Fortune 500 giants. The democratization of AI, especially with developments like Microsoft's Azure platform partnering with Elon Musk-backed Grok, is rewriting the rules of innovation, productivity, and competitive advantage. This convergence represents a significant step forward for small and mid-sized businesses (SMBs), offering access to cutting-edge AI tools previously out of reach due to cost, complexity, and lack of in-house expertise.

Model Context Protocol (MCP): A Primer

In the ever-evolving landscape of AI, a new enabler has emerged that's quietly transforming how language models interact with the digital world: Model Context Protocol, or MCP. It may not be a household name yet, but if your organization is experimenting with AI agents, it's time to get acquainted. MCP is becoming the cornerstone of LLM integration - bridging the gap between isolated AI systems and the interconnected web of enterprise & client applications.

Garry Tan of YC: Why The Next Unicorns Are Built By AI | Frameworks for Growth

Whether you're a founder, operator, or investor, this episode offers actionable startup advice and insight from one of the most influential voices in tech. ‍ Topics covered (timestamps):‍ ‍ Subscribe for more startup strategy and founder stories: YouTube Follow us on all social media platforms: LinkedIn, X, Instagram, and TikTok Follow Frameworks for Growth on Spotify and Apple Podcasts ‍ Read the full transcript‍

CISOs' Unconventional Criteria for Evaluating AI SOC Analysts

Noam Cohen is a serial entrepreneur building seriously cool data and AI companies since 2018. Noam’s insights are informed by a unique combination of data, product, and AI expertise — with a background that includes winning the Israel Defense Prize for his work in leveraging data to predict terror attacks. As the Head of Artificial Intelligence at Torq, Noam is helping build truly next-gen AI capabilities into Torq’s autonomous SOC platform.

Detecting Generative AI Data Leaks from ComfyUI

By now we’re all familiar with the capabilities of generative AI for creating images. For some tasks, like casting an existing image in a recognizable art style, it works well. Much more than that and it encounters limitations: complex prompts often don’t return exactly what you imagined and iterating on a failed prompt can quickly become time-consuming.

Mapping the Future of AI Security

AI security is one of the most pressing challenges facing the world today. Artificial intelligence is extraordinarily powerful, and, especially considering the advent of Agentic AI, growing more so by the day. But it is for this reason that securing it is so important. AI handles massive amounts of data and plays an increasingly important role in operations; should cybercriminals abuse it, the consequences can be dire.

3 CalypsoAI Alternatives Analyzed: Pricing, Key Capabilities, USP, Pros, & Cons

Over the past few years, enterprises have rapidly integrated GenAI into an increasing number of workflows and use cases. Amidst the rush and excitement to adopt a free tool that significantly boosts productivity, business leaders de-prioritized privacy, till it became a compliance issue. As privacy tools offering a quick patch quickly flooded the market, businesses ran into a new problem – which is the best tool?

Cybersecurity Landscape in 2025: All You Need to Know as a Business Owner

When the Digital Revolution started, we knew big changes were bound to come, but who knew just how big? With the rapid development of cyberspace, our world has expanded immensely, and new possibilities have come knocking at our doors. Still, we often forget about the dark side of the Internet and all its dangers.

Meet Egnyte Copilot: Unlock Efficiency With Secure Conversational AI

Egnyte's Copilot leverages conversational AI to drive productivity with secure AI grounded in your company's data. With Egnyte Copilot, AI is natively built into Egnyte, reducing security risks by ensuring accurate, relevant, and traceable data. This allows for quickly surfaced insights by summarizing dense files stored within Egnyte, highlighting key points, offering prompt suggestions, and transcribing audio and video files. With AI built into existing Egnyte workflows, team productivity, efficiency, and collaboration are increased.

Making Generative AI Transparent with Gabrielle Hibbert

• • In this episode of Data Security Decoded, host Caleb Tolin sits down with Gabrielle Hibbert, a social policy expert and researcher, about her innovative work developing a nutrition labeling system for generative AI tools. This framework aims to bridge the gap between complex AI technology and consumer understanding, while addressing critical transparency and data privacy concerns. What You'll Learn.

Outpost24 introduces AI-powered Digital Risk Protection (DRP)

Digital Risk Protection (DRP) helps organizations identify, monitor, and protect against threats across their digital footprint. The goal is to catch risks on the open, deep, and dark web before they can be exploited, by aggregating threat intelligence from diverse external sources (social media, underground forums, code repositories, and paste sites). Organizations scan continuously for exposed credentials, brand impersonations, data leaks, and emerging malware campaigns.

Securing AI and Infrastructure with Teleport + Anthropic's Model Context Protocol (MCP)

Securing AI and Infrastructure with Teleport + Anthropic’s Model Context Protocol (MCP) Speakers: As Large Language Models (LLMs) become everyday tools for developers and knowledge workers, ensuring secure, controlled, and auditable access to infrastructure and data is more critical than ever. Join us to learn how Teleport is integrating with Anthropic’s Model Context Protocol (MCP) to deliver robust zero-trust security for AI workflows.

Four common misconceptions about using AI in security operations

At this stage in AI's evolution, we’ve all heard the big promises - and overpromises - from vendors. But what about the people on the front lines of security operations? How are real practitioners feeling about using AI in their day-to-day work? In a recent webinar with guest speaker Allie Mellen, Principal Analyst at Forrester Research, we dug into how AI is actually being adopted in the SOC - what’s working, what’s not, and what's getting lost in the noise.

Reliable Healthcare Software Development Services: Revolutionizing Modern Medicine

In an era where technology permeates every corner of our lives, healthcare has emerged as one of the most critical areas benefiting from innovative digital solutions. From managing patient records to diagnosing diseases with AI-powered tools, software has transformed how healthcare providers operate. The demand for reliable healthcare software development services has skyrocketed, as institutions seek tailored solutions that enhance efficiency, accuracy, and patient outcomes. But what does it take to develop healthcare software that's not only advanced but also dependable?

How to customize AI-generated logos for different platforms

AI-generated logos offer a quick and affordable way to establish a brand's identity. But to make a real impact, that logo must perform across various platforms - from social media avatars to print packaging. A one-size-fits-all design rarely delivers optimal results everywhere. Adapting your AI-generated logo for each channel ensures clarity, consistency, and professionalism at every point of contact.

KnowBe4 Leads the Charge Against Cybersecurity Threats with Unmatched AI Capabilities

When it comes to artificial intelligence (AI) and human risk management (HRM), not all AI is created equal. You need an approach to AI that demonstrably enhances your security posture, integrates seamlessly with your existing processes and operates as an extension of your team. AI should be in service of a larger goal rather than exist for its own sake.. We’re talking benefits, not just features. An established history of innovation, not capabilities that are too little, too late.

Agentic AI Ransomware Is On Its Way

Agentic AI-enabled ransomware is not here yet, but likely will be very soon. I am talking this year or by 2026. Here is why. What is Agentic AI? First, it helps to define what agentic AI is. To do that, we have to start by defining what Artificial Intelligence (AI) is…and doing that is a bit like trying to nail the proverbial Jello to a wall.

Reducing security review time with AI workflows

In the fast-paced world of modern business, security processes have become a cornerstone of an organization’s risk management strategy. As companies navigate increasingly complex threat landscapes, the pressure mounts to enhance security while keeping pace with business innovation. Integrating artificial intelligence (AI) into security review workflows is emerging as a practical solution to reducing review times, lowering costs, and improving system reliability.

The Dark Side of AI: What Every Business Should Know?

Did you know? AI tools like ChatGPT, Bard, and Copilot are now being used with business platforms like Microsoft 365, Slack, and Zoom — often without your IT team even knowing! ���� �������� ����������, ����’���� ����������: ��������������������: If you're an IT admin, cybersecurity professional, or just someone curious about the intersection of AI and cybersecurity, this video will help you understand the risks and how to stay one step ahead.

From Copilot to Grok: How Microsoft's AI Shift Empowers Small Entrepreneurs

In the fast-evolving world of artificial intelligence, Microsoft is making waves with a potential game-changer: a partnership with xAI to host the Grok AI model on its Azure cloud platform. Announced in discussions reported by The Verge on May 1, 2025, this move signals a shift from Microsoft's heavy reliance on OpenAI, the creators of ChatGPT and Copilot, toward a broader AI ecosystem. For small entrepreneurs, this development could unlock affordable, powerful AI tools to streamline operations, enhance customer engagement, and compete with larger businesses.
Featured Post

Digital Twins: Revolutionizing Network Management and Cybersecurity

Digital Twins, virtual replicas of physical objects, systems, or processes, have been steadily gaining traction in the technology sector, particularly in networking and security. These sophisticated models have the potential to revolutionize network management and cybersecurity by offering a dynamic, real-time, and comprehensive approach to managing, optimizing, and securing complex systems. McKinsey & Company underscores that Digital Twins have become indispensable business tools for leading companies and are poised to become pivotal in optimizing processes and decision-making across every industry.

Top tips: Managing the risks of BYOAI at work

Top tips is a weekly column where we highlight what’s trending in the tech world today and list ways to explore these trends. This week, we’re discussing the rise of AI tools in the workplace—and the growing risks around their unregulated use. It started quietly. A few employees using ChatGPT to rewrite emails. A project manager testing Notion AI to summarize meetings. A developer relying on GitHub Copilot to speed up code. Now?

What Is Generative AI? Business Guide & Security Tips

In today’s rapidly evolving digital landscape, generative AI has emerged as a transformative force. From automating workflows to enhancing creative processes, businesses across industries are leveraging this technology to stay competitive. However, with innovation comes risk. As generative AI becomes more accessible, cybercriminals are also finding ways to exploit it.

Is AI a security asset or a cyber threat multiplier?

AI is transforming business operations, but it is also enabling sophisticated cyberattacks, automated exploits, and data privacy risks. From AI-generated phishing scams to deepfakes, organizations must stay ahead of these evolving threats. In this Netwrix webinar, dive into the complex interplay of AI and data security, with a focus on securing Microsoft 365 environments. Key Insights: Why Watch? Equip your organization with Netwrix’s expert strategies to counter AI-powered cyberattacks and protect sensitive data in an AI-driven world.

The MemcycoFM Show: Episode 1 - Disrupting AI-Powered Phishing, What CISOs Must Do Now

Welcome to the inaugural episode of our sparkling new podcast, The MemcycoFM Show. Your new go-to for everything digital deception, brandjacking, and real-time cybersecurity defense. In our first episode, two of our own Memcycans discuss why AI-powered phishing is changing the threat landscape and what CISOs must do to stay ahead. Powered by Memcyco’s mission to protect trust in the digital world.

AI Just Rewrote the Rules of BEC: Are Your Defenses Ready?

Today, the average phishing email that lands in your CEO's inbox is flawless. It uses perfect grammar, contains an intimate understanding of your organization’s current business landscape, and ends with an urgent, contextually relevant request. This isn't the work of a typical cybercriminal; it's the hallmark of generative AI being weaponized, transforming social engineering from a numbers game into a targeted strike.

Developer Leaks API Key for Private Tesla, SpaceX LLMs

In AI, as with so many advancing technologies, security often lags innovation. The xAI incident, during which a sensitive API key remained exposed for nearly two months, is a stark reminder of this disconnect. Such oversights not only jeopardize proprietary technologies but also highlight systemic vulnerabilities in API management. As more organizations integrate AI into their operations, ensuring robust API security has never been more critical.

SOAR & DSDL: Crossover for Agentic AI Workflow

Recently we released the Splunk App for Data Science and Deep Learning (DSDL) v5.2.0. This update introduced new features for integrating large language models (LLMs) and retrieval-augmented generation (RAG). With DSDL v5.2.0, users can easily perform LLM prompts, vector searches, RAG, and function calling directly from the app's dashboards.

Enabling Safe AI Adoption: Insights from Nightfall AI and Vanta

How should data security teams walk the fine line between enabling AI innovation, safeguarding sensitive data, and ensuring compliance? That question drives everything we build at Nightfall. It’s also an excellent jumping off point for an in-depth discussion among security experts.

Introducing AI-Driven Policy Management for Better Security

Firewall policy management has reached a critical point, characterized by misconfigurations, overly complex rules, and ongoing audits. The burden continues to fall on already-stretched security teams. For CISOs, the question isn’t whether policies are being enforced; it’s whether they’re aligned, effective, and resilient across every location and environment.

80s to AI - Career Talk - Tanium Tech Talks #127

A fire side chat from the heart with Ashley, reviewing 40 years in technology and career advice for uncertain times. What is the meta-narrative of a technology career? How can I differentiate myself in the tech career field? How can I differentiate myself among other job applicants? What is the next fun tech I could tackle? How do you keep a lifelong career fresh and fun? What are my options in a tech career?

Why AI governance is now a CISO imperative

Let’s be real: 2024 is the year AI went from pilot to policy. And in 2025, it’s not slowing down. Every enterprise I talk to, from high-growth SaaS companies to large-scale global platforms, implements AI internally or embeds it into its products. With that momentum comes a wave of questions: Is this secure? Are we exposing customer data? What will our auditors say? CISOs are now expected to balance innovation with protection, fostering progress while staying ahead of risk.

Achieve AI-Driven Policy Hygiene & Eliminate Policy Sprawl

Firewall policies are essential, but over time, they become cluttered, misaligned, and hard to manage. That complexity puts Zero Trust and audit readiness at risk. Cato’s Autonomous Policies for Firewall as a Service (FWaaS) change that. This video shows how Cato applies AI to continuously assess and optimize your firewall policy set, removing outdated rules, identifying gaps, and simplifying ongoing management.

Identity Is the New Root Access: Rethinking Zero Trust in DevOps Environments

Amal Mammadov is a cloud security and detection engineering specialist working at the frontlines of identity-driven threats in modern cloud environments. His work focuses on how attackers exploit permissions, tokens, and machine identities, often without triggering traditional security controls. In this conversation, he breaks down why Zero Trust is no longer about networks but about controlling identity in fast-moving DevOps systems.

Embeddings vs. Generative Models #AI #RAG #AIExplained #MachineLearning #OpenAI #LLMs #AIsecurity

Not all AI models are made to generate. Some are built to understand. Here’s the key difference: Generative models take in text and produce new text (think ChatGPT). Embedding models take in text and translate it into numbers, vectors that capture meaning. Why does that matter? Because embedding models let you turn documents into searchable vectors. That means when someone asks a question, you don’t need to search the whole doc, you just find the most relevant chunks based on meaning. And that’s what makes things like RAG (Retrieval-Augmented Generation) powerful and efficient.

From agentic AI to race cars: RSAC 2025 with 1Password

RSAC 2025 delivered an unforgettable week of cybersecurity insights and innovations. As the industry gathered to tackle the latest threats, one challenge loomed: the security risks posed by unfederated identities, unmanaged devices, applications, and AI-powered tools accessing company data without proper governance controls.

AI Chatbot Security: Understanding Key Risks and Testing Best Practices

Organizations are increasing their reliance on AI chatbots powered by Large Language Models (LLMs) to improve efficiency and reduce costs, creating new challenges for security and development teams. Without well-planned security for integrating AI chatbots into your business operations, you’re leaving the door wide open for bad actors.

Teleport to Protect AI and Grant AI Access

How teams are securing AI systems and providing protected access to sensitive resources. Learn about self-hosted AI solutions, database integrations with full audit capabilities, and centralized MCP server deployment. Discover how Teleport enables secure AI integration with your infrastructure while maintaining comprehensive visibility and control. Perfect for teams looking to balance innovation with security compliance.

CrowdStrike Falcon Next-Gen SIEM: AI-Generated parsing

Tired of writing custom parsers just to make your logs usable? With CrowdStrike Falcon Next-Gen SIEM, you can automate log parsing using AI — cutting setup time from days to minutes. In this demo, see how easily you can onboard network logs, generate a parser with AI, and normalize data to the CrowdStrike Parsing Standard — all within a few clicks. CrowdStrike Falcon Next-Gen SIEM: Consolidate security operations with the world’s most complete AI-native SOC platform.

Top tips: AI is coming for your data...unless you act first!

Top tips is a weekly column where we highlight what’s trending in the tech world and list ways to explore these trends. This week, we’ll explore how to prevent our data from being used by AI. The internet remembers everything. The album you posted on Facebook seven years ago, the silly blog you published when you were in school, the memes you liked, the videos you viewed—everything is etched onto the internet. You may forget, but the internet remembers.

RSAC 2025: The Turning Point for AI in Enterprise Security?

RSA Conference 2025 in San Francisco was a breath of fresh air, literally and figuratively. The city felt more vibrant and welcoming, and the conference buzzed with genuine excitement. Unlike previous years, which were dominated by hype and theoretical discussions, this year’s focus was on tangible (not yet game-changing!) AI applications in cybersecurity. AI extended throughout the conference, from the keynotes through the track sessions and into the exhibition hall.

Where AI meets action: How The Trade Desk enhances security ops with Tines Workbench

While AI represents a fundamental turning point for organizations, many teams are still struggling to realize its full potential. They’re looking for AI to do more, while maintaining crucial security and privacy guardrails. That’s where Tines Workbench comes in, a universal AI copilot. Workbench empowers you to incorporate data from across your stack and take action within a single, secure architecture.

GhostGPT, the new malicious chatbot and its impact on cybersecurity

At this juncture, it is no surprise that cybercriminals are leveraging the potential of generative artificial intelligence to strengthen their attacks. However, the emergence of new models specifically designed to generate threats quickly has made this task even easier for bad actors. At the end of 2024, researchers discovered a new AI chatbot created for cybercriminal purposes.

Understanding AI Maturity: Where Are You Today, and Where Do You Want to Be?

By rating your present AI Maturity level and your desired future state, you can create a focused action plan to move forward confidently and securely. AI adoption doesn’t have to be overwhelming, it just requires a clear, intentional approach.

Shadow AI: A Wake-Up Call for AI Security and Governance

In the ever-evolving landscape of technology, the allure of AI tools and agents is undeniable. They promise enhanced productivity, innovative solutions, and a competitive edge. With more tools and platforms available that democratize the usage and creation of AI systems, there is a surge in AI tools that are being built, customized, and deployed for business operations. However, the gold rush for AI comes with significant risks that cannot be ignored.

Conquering the Chaos of Vulnerability and Exposure Management at RSAC Conference 2025

Recently, industry analyst Jon Oltsik outlined a critical shift underway in cybersecurity: the move toward a threat-informed defense. As Oltsik describes, organizations are beginning to strengthen the intersection of vulnerability scanning and threat intelligence, using AI to bolster asset classification and risk scoring. This evolution is essential as enterprises seek to move beyond fragmented security practices and build a more cohesive exposure management strategy.

How to Use MCP Servers with Claude Desktop | Real-Time AI Integration

In this video, I walk you through the basics of getting started with MCP servers using Claude Desktop as the client. Whether you're new to MCP servers or just looking for a smooth way to connect and explore, this step-by-step guide will help you get up and running in no time!

How We Support Enterprise Adoption of MCP, A2A, and AI Integrations

We’ve been hearing (and using) a lot of acronyms lately. MCP, A2A, ACP… it’s easy to fall behind. Fortunately for our customers, all of these new standards are API based! Since Riscosity is built to discover, monitor, and govern all HTTP-based data flows, it requires no extra integration or setup to handle MCP, A2A, or ACP traffic.

How Businesses Using GPT 4.1 Can Comply With DPDP's Data Residency Bill

Until 2023, India’s data privacy landscape was largely unregulated – businesses didn’t have to worry about how they process and store data. Sensitive customer data like Personally Identifiable Information (PII) could travel around the world in 80 days and land back to its source without violating a single regulation. While the unregulated digital space was a boon for data dependent businesses, it was a bane for customer privacy.

AI Penetration Testing Fundamentals

With the increasing usage of AI systems in critical infrastructure and business operations, there is an inevitable need to secure these systems. AI pentesting is a domain-specific security assessment designed to identify and remediate vulnerabilities unique to AI systems, including machine learning models, training pipelines, and their underlying infrastructure.

AI Models Are Ready to Make a Difference - Sunil Pai on Cloudflare's Developer Tools Ecosystem

Clip of the show/podcast with Sunil Pai. About Cloudflare's ecosystem for developers and how most people don't realize that AI and agents are ready to make a difference. Sunil is the founder of PartyKit (an open source deployment platform for AI agents), acquired by Cloudflare in 2024. And he’s a Principal Systems Engineer that is building AI agents at Cloudflare.

Tips for choosing an AI-driven SIEM

Artificial intelligence is rewriting the rules for cybersecurity on both sides of the battle. Cloud adoption, a broadening attack surface, and AI-fueled cyber threats are driving organizations to rethink their approach to security. Discussions on the best way to adapt to a highly dynamic threat environment will naturally steer toward updating SIEM, as it is core to today’s security operations.

Nightfall's Spring 2025 Product Launch Brings DLP to the AI Era

The rapid adoption of AI, particularly generative AI tools like ChatGPT and Copilot, presents both immense productivity opportunities and significant data security challenges for organizations. While employees increasingly leverage AI for various business functions, this widespread use often occurs outside sanctioned channels, creating what's known as shadow AI.

10 Surprising Tech-Driven Benefits of Choosing a Flexible Workspace

The traditional office is rapidly evolving in our technology-fueled world. As more professionals seek alternatives to rigid 9-to-5 setups, shared coworking spaces are emerging as innovative solutions that blend technology with human-centered design. These spaces aren't just about having a desk away from home, they're powered by cutting-edge tech that can dramatically transform how we work. With hybrid work models becoming the norm rather than the exception, understanding the tech advantages of flexible workspaces has never been more important.

Secure AI-Generated Code at Speed with Snyk and ServiceNow

The rapid adoption of AI coding assistants is transforming software development in ways both good and bad. Developers can produce more code faster than ever with AI, and 96% of developers report using AI coding assistants to streamline their work. AI code generation is becoming mainstream, and in late 2024, Google reported that AI writes more than 25% of its code. While GenAI tools increase productivity, they’re also creating more work for application security teams.

Roger Grimes talks AI Deepfake Threats with theCUBE at RSAC 2025

Roger Grimes, KnowBe4's Data-Driven Defense Evangelist, reveals how autonomous, and AI-powered deepfake malware is transforming the cybersecurity landscape in this eye-opening RSAC 2025 interview with @siliconangle. Discover why organizations must urgently prepare for sophisticated social engineering attacks that leverage AI technology to bypass traditional security measures. KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.

We Asked People If AI Is All Hype... Here's What They Said (CrowdStrike at #RSAC)

Spotted at: Charlotte AI, CrowdStrike’s agentic AI analyst. In a sea of hype, Charlotte AI drives real business outcomes for customers - faster detection, smarter investigation, and real-time protection. In other words: No fiction. Just function. So Charlotte asked people: “What’s real and what’s just hype when it comes to AI in cybersecurity?”