Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

SquareX Reveals that Employees are No Longer the Weakest Link, Browser AI Agents Are

PALO ALTO, Calif., June 30, 2025 - Every security practitioner knows that employees are the weakest link in an organization, but what if this is no longer the case? SquareX's research reveals that Browser AI Agents are more likely to fall prey to cyberattacks than employees, making them the new weakest link that enterprise security teams need to look out for.

Eliminate the BOREDOM and Focus on the FUN: How to Use OpenAI Codex Cloud

In this video, I dive into OpenAI's Codex Cloud, showcasing how you can write, edit, and run code with the power of AI—directly in your browser. Whether you're a developer, student, or just curious about what AI can do for coding, this walkthrough gives you a hands-on look at how Codex Cloud makes programming faster, smarter, and easier.

The SOC of Tomorrow Delivered Today: MDR and AI for MSPs

Think building a SOC is out of reach? Think again. With MDR and AI working together, MSPs can now deliver 24/7 protection through what’s becoming an autonomous SOC – one that scales without increasing overhead or alert fatigue. This webinar will show how the modern SOC is already within reach, and how to start offering it. You’ll learn.

Why AI Security is Suddenly a Big Deal

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

AI Hackers Are Dumber Than You Think (Here's Proof)

Everyone's panicking about AI-powered cyber attacks, but here's what's ACTUALLY happening... Perfect grammar in phishing emails (bye-bye typos!) AI helping write basic malware code NOT some sci-fi hacking revolution The funniest part? Researchers found hackers literally leaving AI tool COMMENTS in their malware code It's like leaving a sticky note that says "ChatGPT helped me write this virus".

Trustwave DbProtect Expands to Secure Snowflake: Strengthening AI Repository Protection

Trustwave's database protection solution, DbProtect, now supports Snowflake, which is a popular, cloud-based data warehousing platform used by organizations to power AI models and data-driven workflows. Snowflake's cloud-based architecture separates storage and compute functions, allowing organizations to scale each independently. The platform's ability to handle both structured and semi-structured data makes it a preferred choice for a broad range of AI and analytics applications.

AI in Endpoint Security

It’s no revelation to say that the world of connectivity has fundamentally changed since the pandemic. What may be more eye-opening, however, is how this shift has created a cybersecurity landscape more complex than ever before. Why? As companies increasingly embrace cloud computing, remote work, and BYOD (Bring Your Device) policies, endpoint security has become a critical pillar in defending against cyber threats. However, there is a challenge.

Fixing Fix Fatigue: Building Developer Trust for Secure AI Code

AI coding assistants are transforming the way developers work. With a prompt and a click, entire blocks of logic appear, boilerplate fades into the background, and velocity shoots up. But as anyone who’s integrated these tools into their daily routine can tell you, increased speed can come with increased risk. Vulnerabilities sneak in. Fixes pile up. And somewhere in the blur, developer trust begins to erode.

Automation and AI in Cybersecurity: $2.22 Million in Savings

Over 2024, the average global cost of a data breach reached $4.88 million. This is 10% up from the previous year and the highest amount to date. These figures, published in the Cost of Data Breach Report 2024, also reveal that companies implementing artificial intelligence and automation in their cybersecurity strategies saved an average of $2.22 million compared to businesses that did not adopt them.

Securing the Future of Generative AI: Why Security Can't Keep Pace with Innovation

By James Rees, MD, Razorthorn Security The artificial intelligence revolution isn’t coming. It’s here and it’s moving faster than anyone predicted. Children now trust ChatGPT more than their parents for information. AI-generated content is becoming indistinguishable from human work. Entire industries are being reshaped by technology that seemed like science fiction just a few years ago.

How agentic AI could transform enterprise workflows: Insights from MIT GenAI Lab

The line between human and machine is blurring—and it’s not a question of whether machines can do more, but how far we’re willing to let them go. The frontier lies in tackling the chaos and solving the fragmented processes that slow enterprises: siloed rulebooks, scattered pricing spreadsheets, and manual approvals.

Why RBAC Doesn't Work with AI Agents [And How to Fix It]

Role-Based Access Control (RBAC) is a fundamental, critical part of security architecture that prevents data from falling into the wrong hands. In regular data-based environments (deployed on the cloud or on-premise), RBAC is an effective measure in preventing unauthorized access, with a few exceptions, like successful hacking attempts or breaches. However, this system breaks down once AI comes into the picture. Let’s understand why – and what you can do about it.

Generative AI Security: Why Protection Can't Keep Pace with Innovation

The artificial intelligence revolution isn’t coming. It’s here and it’s moving faster than anyone predicted. Children now trust ChatGPT more than their parents for information. AI-generated content is becoming indistinguishable from human work. Entire industries are being reshaped by technology that seemed like science fiction just a few years ago.

Securing AI code at the source: Mend.io now integrates with Cursor AI Code Editor

AI is reshaping software development quickly. From boilerplate generation to test automation and refactoring, LLMs like the one behind Cursor are transforming how developers build. But with great power comes a new generation of vulnerabilities. At Mend.io, we’re excited to announce a native integration with Cursor, the IDE taking the dev world by storm.

Beyond Traditional Threats: The Rise of AI-Driven API Vulnerabilities

AI has had dramatic impacts on almost every facet of every industry. API security is no exception. Up until recently, defending APIs meant guarding against well-understood threats. But as AI proliferates, automated adversaries, AI-crafted exploits, and business logic abuse have complicated matters. It’s no longer enough to merely patch known flaws; security teams must now contend with intelligent, adaptive attacks that evolve as fast as the technology they target.

EP 10 - A new identity crisis: governance in the AI age

In this episode of Security Matters, host David Puner sits down with Deepak Taneja, co-founder of Zilla Security and General Manager of Identity Governance at CyberArk, to explore why 2025 marks a pivotal moment for identity security. From the explosion of machine identities—now outnumbering human identities 80 to 1—to the convergence of IGA, PAM, and AI-driven automation, Deepak shares insights from his decades-long career at the forefront of identity innovation. Listeners will learn.

Smarter API Security Demo: See How Wallarm Protects Modern APIs and Agentic AI

Modern APIs are under constant attack—from botnets to logic abuse to threats targeting Agentic AI. Most security tools lag behind. Wallarm doesn’t. Join us for a live walkthrough of Wallarm’s advanced API security platform. In this session you will see how to instantly discover vulnerable endpoints, protect business-critical flows, and stop API abuse—without slowing down your teams. What you'll learn.

Trustwave SpiderLabs Goes Inside the AI Cyber Arms Race

While all manner of legitimate organizations are attempting to understand how to best and safely use artificial intelligence to improve productivity, the Trustwave SpiderLabs' Technology Deep Dive: AI Cyber Arms Race takes a forward-looking view at how adversaries are gaining experience and capability in their ability to turn AI against us.

EP 10 - A new identity crisis: governance in the AI age

In this episode of Security Matters, host David Puner sits down with Deepak Taneja, co-founder of Zilla Security and General Manager of Identity Governance at CyberArk, to explore why 2025 marks a pivotal moment for identity security. From the explosion of machine identities—now outnumbering human identities 80 to 1—to the convergence of IGA, PAM, and AI-driven automation, Deepak shares insights from his decades-long career at the forefront of identity innovation.

A Real Example of Copilot Exposing Sensitive Data

Is Microsoft Copilot putting your sensitive data at risk? AI tools like Copilot can unintentionally expose sensitive information through indirect queries leading to data leaks, insider threats, and compliance risks. In this webinar, we break down real-world examples of how over-permissioned access and prompt manipulation can bypass security controls and what you can do to prevent it. Stay ahead of AI-driven threats.

Introducing the AI Agent action

Today, we’re announcing a way to build and deploy agents in Tines through our AI Agent action. In the AI market, AI agents suddenly seem to be everywhere – software that can autonomously think and perform tasks on behalf of the user. But we’re still very early in the adoption curve of agents. One thing we’ve noticed is that most solutions can’t handle the varying complexities of mission-critical workflows.

AI Agent action - Task or Chat?

AI Agents give you the power to do so much, reducing friction between your team and other departments without adding to your team’s workload. So where do you start? The first thing to decide is whether you want to use a task or chat. This video explains when you should use a task, and when chat is better suited to your story. New to Tines? Sign up for our always-free Community Edition and start building right away.

Falcon Exposure Management's AI-Powered Risk Prioritization Shows Organizations What to Fix First

As the attack surface expands and the number of vulnerabilities grows, organizations face a new crisis: how to prioritize which vulnerabilities to fix first based on their level of risk. CrowdStrike Falcon Exposure Management addresses this challenge with new AI-powered capabilities to help defenders identify what matters most and take action with precision. New innovations include AI-powered Asset Criticality, Client-Side Attack Path Analysis, and a CrowdStrike Falcon Next-Gen SIEM integration.

Why AI scam protection is more important than ever

Online scams are getting smarter—and harder to detect. Learn why AI-powered protection is essential in 2025, and how Avast Scam Guardian helps keep you safe from phishing, fake sites, and fraud—free for everyone. In a world where technology keeps us connected, informed, and entertained, it also creates new opportunities for scammers to sneak into our digital lives.

How AI-Powered Tools Are Revolutionizing Online Education security

Let's face it: the digital shift in education is permanent. Virtual classrooms, remote assignments, cloud-based exams-these are no longer futuristic concepts; they're the present-day norm. But while the benefits of flexibility and accessibility are undeniable, the vulnerabilities lurking beneath the surface are equally real. Imagine a scenario: a student logs into a popular education app from a public Wi-Fi network. That very act, innocent on the outside, can be a digital goldmine for cyber intruders if the platform lacks proper safeguards.

Why AI Trust Will Shape Your Next Decade of Software Development

AI is often compared to electricity, but without trust, it’s just a live wire. As organizations adopt AI to move faster, reduce manual effort, and push the boundaries of what’s possible, one truth is becoming clear: trust in AI isn’t optional. It’s foundational. And for software development teams, AI Trust is now the north star that guides safe, scalable innovation.

The privacy illusion: when deleting your data doesn't actually delete your data

Let’s talk about privacy—specifically, the kind you thought you had when you hit “delete.” OpenAI received a court order to retain every single ChatGPT conversation, even the ones you erased. Yep. Even the awkward ones. Even the ones that start with, “Hypothetically, if I were to…” Why? Because The New York Times is suing them over copyright, and now everyone’s deleted chats are potential evidence.

Defending at Machine Speed: Guiding LLMs with Security Context

Large Language Models (LLMs) provide strong reasoning and data summarization capabilities, making them valuable proxies for a variety of cybersecurity operations tasks. However, their performance can decline when applied to highly specific or enterprise-contextual tasks, particularly if the models rely solely on public internet data.

CISOs Brace for a Wave of AI-Powered, Domain-Based Cyber Threats

Domain-name system (DNS)- based cyber attacks are becoming increasingly complex, and AI will only make managing them even more challenging. According to a recent report, Chief Information Security Officers (CISOs) anticipate a tumultuous season of cyber threats, with low confidence in their abilities to defend against them effectively.

First Look, Then Leap: Why Observability is the First Step in Securing your AI Agents

AI Agents aren’t coming - they’re already here! reshaping industries, enhancing productivity, and unlocking new possibilities. Embedded in tools like Microsoft 365 Copilot, Salesforce Einstein, and custom-built assistants, they’re making decisions, automating workflows, and interacting with sensitive business data in real time. This wave of innovation is moving fast, but for once, security doesn’t have to play catch-up.

The future of identity security Is AI-driven but human-led

Cyber threats continue to move faster, operate smarter and hit harder than ever before. Against this backdrop, one truth has emerged: identity is the new perimeter – your people’s digital identities are the new front line of defense. And that brings identity into focus for every attacker. To truly protect your business, you need an AI-enabled, dynamic, intelligent, unified Identity Fabric to deliver next generation protection and control without impacting productivity.

Building AI Trust with Snyk Code and Snyk Agent Fix

Many businesses are using AI to innovate and boost productivity. But to truly benefit from AI, you need to trust it. That's where the Snyk AI Trust Platform comes in. As we announced at the 2025 Snyk Launch, the Snyk AI Trust Platform is designed to unleash innovation, reduce business risk, and accelerate software delivery in the age of AI.

Scan your AI-generated code from Cursor using Model Context Protocol (MCP)

We’re happy to announce that Cursor has validated Snyk’s CLI MCP server and added Snyk to their curated set of MCP tools from official providers. At Snyk, we recognized early on that although AI assistants accelerate development, they can inadvertently introduce vulnerable patterns, leverage outdated libraries, or even code with known security flaws. In order to maintain the rapid iteration cycles that AI enables, developers need security to be as agile as AI itself.

Falcon Exposure Management ExPRT.AI: Demo Drill Down

Most vulnerability tools flood teams with static scores and long lists but ExPRT.AI changes the game by predicting what adversaries are most likely to exploit. This demo drill down shows how ExPRT.AI dynamically scores risk across asset types, network exposures, and third-party findings. You’ll see how it re-prioritizes vulnerabilities based on real-world telemetry, attacker behavior, and environmental context including a Tenable example.

Why Hosting LLMs On-Prem Doesn't Eliminate AI Risks [And What to do About It]

As AI steadily percolated into a growing number of use cases, adopting it has been a rollercoaster of confusion, chaos, and conundrums. One of the key concerns around AI adoption are the added risks. Issues like sensitive data leakage, AI hallucinations, inability to implement access control, and data breaches lurk the the cloud where LLMs are deployed.

AI, out-of-the-box!

Elastic's GenAI capabilities are now available by default in Elastic Cloud Elastic AI features in Elastic Security, Observability, and Search are now enabled by default in Elastic Cloud. Getting started with generative AI (GenAI) shouldn’t be a project in itself. Too often teams encounter organizational friction that slows adoption of AI-based features, from third-party contracts and external API keys, to additional terms of service and billing management.

Why OCM Is Integral to AI Governance and Compliance

As organizations race to adopt artificial intelligence, many overlook a key success factor: Organizational Change Management (OCM). While AI governance and compliance frameworks provide the structure—policies, controls, and oversight, OCM addresses the human factors that brings these frameworks to life. AI governance requires more than technical controls; it demands cultural alignment, ethical awareness, and behavioral change across the enterprise. That’s where OCM becomes critical.

Cursor's One-click Install MCP in Action

In this video, I’m checking out the brand new Cursor 1.0 release and testing one of its most exciting new features — the one-click MCP install. Setting up MCP servers has never been this easy! Join me as I walk through the process, share my first impressions, and see how smooth (or not) the setup really is. If you’ve been curious about Cursor or want to simplify your MCP workflows, this one’s for you.

AI Agents Take DC: Inside Washington's Developing Agentic Security Agenda

AI Agents have become one of the most discussed emerging technologies in enterprise environments, and now, they’ve captured the attention of policymakers in Washington, DC. Over the past several weeks, a series of developments have brought AI Agents into the national spotlight, particularly through the lens of cybersecurity and regulatory preparedness.

Can AI Prevent Fraud Without Interfering with Your Privacy?

Fraudsters are getting craftier, but fortunately, the technology against them is becoming more intelligent as well. The question on everyone's mind is, how can we apprehend the bad guys without becoming Big Brother? You may be surprised at the answer. The idea of fraud detection has been synonymous with gathering as much information as possible about all people. It was as though there was a security camera in every room just in case. However, AI is turning the tables, and it is, in fact, turning things more private rather than less.

How AI Can Reduce Alert Fatigue in Your SOC

Alert fatigue is a common phenomenon in Security Operations Centers (SOCs). It’s the digital equivalent of crying wolf. As SOCs are flooded with a relentless stream of alerts—many of which are low priority or false positives—it becomes increasingly difficult to identify truly critical security threats. Analysts are stuck spending countless hours verifying, contextualizing, analyzing, and acting on information, often at the cost of missing out on critical alerts.

Reclaiming analyst time: Smarter investigations with AI in defence

How the MOD can reduce investigation fatigue and boost operational efficiency Security analysts at the UK Ministry of Defence (MOD) — and everywhere — face an overwhelming challenge: They can receive thousands of alerts daily, and distinguishing genuine threats from false positives in a timely fashion has become nearly impossible without technological intervention.

Kenton Varda on Safe AI-Assisted Coding and the Power of Cloudflare Workers

In this episode, host João Tomé is joined by Kenton Varda, Principal Engineer at Cloudflare, for a wide-ranging conversation about AI, code, and the evolution of Internet development. Timestamps: Kenton shares how a real-world project shifted his view from AI skepticism to seeing the promise of AI-assisted coding, while emphasizing the need for strong human review, especially for security. The episode also goes into the architecture of Cloudflare Workers and its first months, Durable Objects, and the vision of the Internet as one programmable computer: “the network is the computer”.

Securing the Model Context Protocol (MCP): A Deep Dive into Emerging AI Risks

In 2025, the rise of autonomous agents and developer-integrated copilots has introduced an exciting new interface paradigm: the Model Context Protocol (MCP). Originally proposed by Anthropic, MCP has quickly become the de facto open standard for allowing language models to securely interact with external tools, APIs, databases, and services. But as enterprise adoption surges, so do the risks - both novel and unanticipated.

CMMC readiness: How AI-powered platforms accelerate DoD compliance

Defense contractors and organizations involved in Department of Defense (DoD) projects are facing growing pressure to comply with stringent cybersecurity standards. The Cybersecurity Maturity Model Certification (CMMC) represents a transformative initiative aimed at enhancing the security posture across the defense industrial base. As organizations embark on this compliance journey, AI-powered platforms are emerging as critical enablers to accelerate CMMC readiness.

How AI is Revolutionizing Shopping Preferences: The Future of Retail

In recent years, Artificial Intelligence (AI) has significantly altered how we interact with technology, and one of the most profound areas of change is in the world of shopping. Far from being just a trend, AI has become an indispensable part of the modern shopping journey, reshaping everything from how we discover products to how we make purchasing decisions. As AI continues to evolve, it's clear that it's fundamentally transforming consumer behavior and the entire retail industry. Let's take a closer look at how AI is altering shopping habits and redefining the retail experience.

AI Security Guide: Protecting models, data, and systems from emerging threats

AI security is where traditional cybersecurity meets the chaotic brilliance of machine learning. It’s the discipline focused on protecting AI systems—not just the code, but the training data, model logic, and output—from manipulation, theft, and misuse. Because these systems learn from data, not just logic, they open up fresh attack surfaces like data poisoning, model inversion, and prompt injection.

Five Uncomfortable Truths About LLMs in Production

Many tech professionals see integrating large language models (LLMs) as a simple process -just connect an API and let it run. At Wallarm, our experience has proved otherwise. Through rigorous testing and iteration, our engineering team uncovered several critical insights about deploying LLMs securely and effectively. This blog shares our journey of integrating cutting-edge AI into a security product.

From Code to Conversations: How Modern AI Creates New Classes of Data Risk

The rise of generative AI has fundamentally changed how we work, create, and collaborate. But as organizations rush to integrate AI tools into their workflows, they're inadvertently creating entirely new categories of data risk that traditional security measures weren't designed to handle.

How to use Sysdig Sage AI vulnerability remediation for images

Sysdig empowers security to move beyond basic prioritization of individual vulnerabilities and take meaningful action by fixing the sources of those issues. By combining intelligent remediation with real-time context and integrated workflows, we’re helping organizations save time and take control of their risk.

3 CalypsoAI Alternates Analysed: Pricing, Key Capabilities, USP, Pros, & Cons

Over the past few years, enterprises have rapidly integrated GenAI into an increasing number of workflows and use cases. Amidst the rush and excitement to adopt a free tool that significantly boosts productivity, business leaders de-prioritized privacy, till it became a compliance issue. As privacy tools offering a quick patch quickly flooded the market, businesses ran into a new problem – which is the best tool?

How AI Is Changing the Automotive Industry

Artificial intelligence is no longer science fiction - it is currently ruling (sometimes literally) the automotive industry. It helps design cars, assemble them, check for bugs, make smart driver assistance systems, and even communicate with you in the car. The Indy Auto Man Indianapolis used car auto dealer offers to figure out how exactly AI is transforming the automotive industry and what cool technologies already exist.

2025 Gartner SRM Summit: From Gatekeeper to Enabler. How Security Leaders Can Embrace AI Agents with Confidence

The 2025 Gartner Security & Risk Management Summit was a wake-up call, and an opportunity, for anyone responsible for securing the future of AI. With over 1,700 AI use cases now reported across federal agencies and enterprise adoption growing at a breakneck pace, the message was clear: AI is no longer on the horizon. It’s here, it’s active, and it needs securing.

The New Threat Landscape: AI-Native Apps and Agentic Workflows

Businesses are moving beyond AI experiments and proofs of concept. As we approach what IDC is predicting will be the “AI pivot years” of 2025-2026, organizations are prioritizing, planning, and building for scale. This shift includes AI agents — self-directed tools that automate tasks — as technology providers strive to simplify development workflows. Under the surface, AI systems expose an expanded threat landscape that spans the software development lifecycle (SDLC).

Catch Bugs Faster: Cursor's BugBot for AI Code Review

In this video we dive into Cursor's 1.0 release, focusing on their new BugBot feature. This AI-powered tool integrates with your GitHub workflow to automatically review pull requests and identify potential bugs. We'll show you how to set up BugBot, trigger it on a pull request, and analyze the issues it finds, including a real-world example of it catching errors in AI-generated code from Google's Jules tool.

Your Code Might Be Using Risky AI Models

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Common pitfalls when evaluating AI agents for the SOC

When evaluating AI agents for your SOC, it's not just about capabilities—it’s about control, oversight, and integration. In this clip, Philippe Tchakovski breaks down the most common mistakes security teams make when adopting AI: from fragile API integrations to missing guardrails and a lack of audit trails. Don’t deploy blindly—understand the risks before automation goes live.

The Hidden Cyber Threats Lurking on Job Boards

If you've ever job-hunted online-or run a hiring campaign-you already know how much the process has changed. Everything is digital now. Resumes are uploaded, interviews are scheduled through apps, and entire careers begin with a single click on a job board. But here's the part we don't talk about enough: cyber threats have evolved right alongside the recruitment process.

#220 - AI & automation for security operations w/ Filip Stojkovski, Staff Security Engineer at Snyk

On this episode of the Cybersecurity Defenders Podcast we speak with Filip Stojkovski, Staff Security Engineer at Snyk. Filip is a cybersecurity professional with over 15 years of experience. He began his career as a SOC analyst and now leads SecOps engineering at Snyk. Filip also advises organizations on SOAR, AI for SOC, and threat intelligence strategies.

Stopping Cloud Breaches at Machine Speed: How CrowdStrike Uses Agentic AI to Power Cloud Detection and Response

Cloud is the new battleground, and more adversaries are joining the fight: New and unattributed cloud intrusions were up 26% in 2024, according to the CrowdStrike 2025 Global Threat Report. As adversaries accelerate cloud attacks, CrowdStrike delivers full-cycle agentic AI — from detection triage to threat response — giving defenders the edge to act at machine speed before adversaries can break through.

From Cloud to AI: Innovation, Risk & Business Strategy #ai #podcast

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Alpha AI: The Apex of SOC Intelligence

Arctic Wolf is redefining cybersecurity with AI-powered innovations that help businesses stay ahead of evolving threats. By combining human expertise, the power of the Aurora Platform, and one of the industry’s largest security data sets, Alpha AI makes security simpler, faster, and more effective. Watch Dan Schiappa, President of Technology and Services, and Ian McShane, Vice President of Product, as they share how Arctic Wolf’s latest AI advancements are helping more than 10,000 organizations make security work.

Generative AI Is Moving Fast. Are Your Security Practices Keeping Up?

We are in the middle of an AI gold rush. Generative AI (Gen AI) has exploded from research labs into everyday business workflows at breakneck speed. Marketing, software development, customer support, HR, companies across industries deploy Gen AI tools to boost efficiency, automate tasks, and gain an edge. But security trails behind. In the rush to innovate, organizations chase speed and visibility, leaving risk management behind.

Is your AI safe? Threat analysis of MCP (Model Context Protocol)

Unless you lived under a rock for the past several months or started a digital detox, you have probably encountered the MCP initials (Model Context Protocol). But what is MCP? Is this just a glorified API call, or is there really something there? This post thoroughly explains what MCP is and why it makes LLMs more powerful. It also provides a comprehensive threat model analysis and reviews the fundamental security vulnerabilities.

Why ANZ Technology Leaders Are Rethinking How AI, Speed, and Security Intersect

The pace of technological change is always fast, but with AI everywhere, things have gone into overdrive. In Australia and New Zealand, businesses plan to spend heavily on generative AI—about $15 million on average, more than the global average. This puts immense pressure on technology, security, and engineering leaders. They must innovate quickly, but they also face complex risks from AI. This is forcing them to rethink how speed and security can work together.

AI Photography: Reshaping Visual Creation Through Intelligent Technology

The emergence of artificial intelligence in photography has fundamentally transformed how we capture, create, and manipulate visual content in the digital age. These sophisticated AI systems can generate photorealistic images from textual descriptions, enhance existing photographs, and even create entirely synthetic visual content that rivals traditional photography methods. Understanding both the revolutionary potential and serious implications of AI photography technology becomes crucial as these tools become increasingly accessible and sophisticated..

Arsen Launches AI-Powered Vishing Simulation to Help Organizations Combat Voice Phishing at Scale

Arsen, the cybersecurity startup known for defending organizations against social engineering threats, has announced the release of its new Vishing Simulation module, a cutting-edge tool designed to train employees against one of the fastest-growing attack vectors: voice phishing (vishing). This new module uses AI-generated voices and adaptive dialogue systems to simulate live phone-based social engineering attacks - such as those impersonating IT support desks - in a realistic and scalable way.

What Is AI?

What is AI really? Throughout this article, I will remove the hype and get to the most honest answer ever. Artificial Intelligence, or AI, or at least the first version of how we think of it today, was “invented” in the 1950s…a long time ago. Since then, various computer scientists and groups have worked on different iterations, often using different names, including machine learning and neural networks.

Shadow AI: Examples, Risks, and 8 Ways to Mitigate Them

Shadow AI refers to the unauthorized or unmanaged use of AI tools, models, frameworks, APIs or platforms within an organization, operating outside established governance frameworks. While employees may adopt these AI tools with good intentions, seeking to enhance productivity or solve problems more efficiently, the lack of oversight creates significant security, compliance, and operational risks.

Meet the Founders of Protecto: Securing Data for Agentic AI

In this video, we introduce the visionary founders behind Protecto — a company on a mission to make AI safe and compliant for the enterprise era. Amar Kanagaraj, Founder & CEO A second-time entrepreneur, Amar previously led a startup to a successful exit. He began his career as a developer at Sun Microsystems, then went on to lead product management for Microsoft Search & AI. With an MBA from Carnegie Mellon and an MS in Computer Science from LSU, Amar brings a powerful blend of business and technical insight to Protecto.

How AI Is Redefining Fraud Detection

Card fraud is escalating at an alarming rate, with no signs of slowing down. In a world where digital payments have become the norm, almost everyone, consumers, businesses, and financial institutions, finds themselves at risk. The convenience of card payments has made them an essential part of daily life, but it has also paved the way for sophisticated fraud schemes. For businesses, the stakes are even higher.

Charlotte AI - Agentic Workflows: Data Egress Pattern Analysis

Sensitive data moves in and out of your organization every day. But how do you know when routine becomes risky? With Charlotte AI Agentic Workflows, CrowdStrike helps you fast-track the hunt for suspicious file activity—so you don’t have to. From after-hours uploads to unsanctioned cloud storage, Charlotte AI helps you analyze file movement across your environment. By reviewing Falcon Data Protection events, applying a foundational model, and generating a structured, actionable report, this demo shows how agentic automation brings clarity to chaos—no log diving required.

We're Building Cars While Driving Them" - AI's Wild West Problem

Is anyone setting standards for AI? Researcher Gabriele Hibbert delivers the perfect metaphor for our current AI moment: "We're building the cars while driving them." Her solution? Creating standardized "nutrition labels" for AI tools that can evolve with the technology. The first step toward taming the AI Wild West.

Falcon Exposure Management AI Asset Criticality: Demo Drill Down

Security teams are overwhelmed by thousands of assets and alerts, with no clear path to prioritize what matters most. Falcon Exposure Management’s AI Asset Criticality feature delivers scalable, intelligent asset classification powered by human insight and machine learning. This demo shows how teams can move from manual tagging to AI-driven prioritization, helping them focus on critical risks, sharpen attack path analysis, and stay ahead of threats.

Bitsight AI Empowers Microsoft's New Threat Intelligence Briefing Agent

Threat Intelligence (TI) has become the secret weapon of modern security teams—essential for identifying possible emerging threats before they escalate. But TI is only as valuable as its accuracy, relevancy, and timeliness. Unfortunately, many traditional TI approaches can no longer keep up, as security teams are plagued with information overload: too many signals, too little context, and limited resources to process everything. This is why the coupling of GenAI and TI is a game changer.

AI is already embedded in our everyday tools, often without us realizing it. | UpGuard #ai

“AI is already embedded in our everyday tools, often without us realizing it. That changes how security teams need to adapt.” Hear from Randy Vickers, Deputy CISO at the National Student Clearinghouse, in this fireside chat from UpGuard Summit 20, as he shares how his team is staying ahead of AI’s evolving role in cybersecurity.

The Real AI Agent Risk Isn't Data Loss. It's Unauthorized Action.

Your AI Agent just updated a vendor’s payment details in your Enterprise Resource Planning (ERP) system based on a seemingly harmless prompt. No data was exfiltrated. No access policy was violated. But now, a $250,000 payment is sitting in a fraudulent bank account. This is the new face of AI risk. As enterprises adopt AI Agents - either off the shelf or custom built, security teams are facing a fast-moving shift.

Force multiply your team and monitor your entire program with Vanta's AI-powered Trust Management Platform

As your security and compliance program matures, so does your need for visibility and control. Internally, teams need a centralized view—a single place to monitor progress, align on priorities, and collaborate across functions. But during an audit, not everything needs to be shared with your auditor. ‍ Yet, most GRC tools aren’t built to make that distinction.

Build Fast, Stay Secure: Guardrails for AI Coding Assistants

AI coding assistants like GitHub Copilot and Google Gemini Code Assist are changing how developers work — accelerating delivery, removing repetition, and giving teams back time to build. But speed isn’t free. Studies show that around 27% of AI-generated code contains vulnerabilities, not because the tools are broken, but because they generate code faster than most teams can review it. The result? A growing wave of insecure code is making it into production.

How Safe is the ChatGPT Android App? An Appknox Study

Brilliant AI, broken defenses? AI-powered apps are revolutionizing how we search, learn, and communicate, but the rapid pace of innovation has come at a cost: security is often an afterthought. As part of our AI App Security Analysis Series, we’ve been scrutinizing some of the most popular AI tools on Android for hidden vulnerabilities that could put millions of users at risk.

Open Chroma Databases: A New Attack Surface for AI Apps

Chroma is an open-source vector store–a database designed to allow LLM chatbots to search for relevant information when answering a user’s question–and one of many technologies that have seen adoption grow with the recent AI boom. Like many databases, Chroma can be configured by end users to lack authentication and authorization mechanisms.

OpenAI Report Describes AI-Assisted Social Engineering Attacks

OpenAI has published a report looking at AI-enabled malicious activity, noting that threat actors are increasingly using AI tools to assist in social engineering attacks and influence operations. In one case, the company banned ChatGPT accounts that were likely being used in North Korean attempts to fraudulently obtain jobs at US companies. “Similar to the threat actors we disrupted and wrote about in February, the latest campaigns attempted to use AI at each step of the employment process.

Beyond Plain Text: Egnyte's Journey to Structured Data Extraction in RAG Systems

When we first launched Egnyte’s AI features built on retrieval-augmented generation (RAG), customer response was overwhelmingly positive. Users could quickly find and synthesize information from vast document repositories with accuracy and context. But success breeds ambition. As customers grew comfortable with the system, they began exploring new use cases that revealed a limitation: while our RAG excelled with plain text, it struggled with tables, charts, and other structured formats.

CISO Spotlight: Rick Bohm on Building Bridges, Taming AI, and the Future of API Security

Nestled in a log cabin high in the Rocky Mountains, Rick Bohm starts his day the same way he’s approached his career: intentionally, with a quiet commitment to learning and action. Boasting more than three decades of cybersecurity experience, Rick has watched tech evolve from dial-up ISPs to advanced AI-driven security architectures – and through it all, he’s focused on one enduring mission: protecting data, organizations, and people.

Exposing the Blind Spots: CrowdStrike Research on Feedback-Guided Fuzzing for Comprehensive LLM Testing

The increasing deployment of large language models (LLMs) in enterprise environments has created a pressing need for effective security testing methods. Traditional approaches, relying heavily on predefined templates, are limited in comparison to adaptive attacks — particularly those related to prompt injection attacks. This limitation becomes especially critical in high-performance computing environments where LLMs process thousands of requests per second.

Microsoft Copilot: Balancing Power and Privacy Risks

Microsoft Copilot’s integration with MS Graph opens powerful doors, letting AI access emails, docs, and your entire MS365 data ecosystem. But with great convenience comes significant risk: your sensitive data could become more vulnerable to attacks. In this video, we explore the privacy and security concerns this integration introduces—and offer actionable insights on how you can mitigate these risks effectively.

What No One Tells You About Scaling Enterprise AI | Ep: 1 | AI On The Edge

Watch this exclusive LinkedIn Live conversation at the frontier of privacy, security, and GenAI. Learn how to successfully scale AI initiatives in your enterprise with proven strategies that prioritize business value over technology complexity, featuring insights from Rakuten India's VP of AI & Data. Guest: Anirban Nandi – Vice President AI & Data @ Rakuten India Host: Amar Kanagaraj – Founder & CEO @ Protecto.

Cato CTRL Threat Research: Uncovering Nytheon AI - A New Platform of Uncensored LLMs

With the introduction of WormGPT in 2023, threat actors have been using uncensored large language models (LLMs) for malicious activities. Following the shutdown of WormGPT in the same year, numerous alternatives have emerged—including BlackHatGPT, FraudGPT, and GhostGPT, among others—primarily accessible through Telegram channels.

AI-automated Fuzzing Uncovers Two More Vulnerabilities in wolfSSL

Daniel Pouzzner from wolfSSL has challenged us to find 3 more vulnerabilities in the wolfSSL library, after we found the first one in October 2024. We weren't quite able to find three, but here are the additional two that we found: Both vulnerabilities were fixed in wolfSSL version 5.8.0, released on 24 April 2025. The fuzz tests that found these vulnerabilities were generated by our AI Test Agent.

The EU AI Act: What MSPs Need to Know ?

The EU AI Act is the most comprehensive law in the world to regulate artificial intelligence. This law doesn’t just apply to organizations inside the European Union, it also affects anyone doing business with the EU or offering AI-powered services in that market. If you use AI tools like ChatGPT, Copilot, Jasper, or Bard for automation, reporting, or client communication, yes, then definitely this applies to you.
Featured Post

Arctic Wolf 2025 Cybersecurity Trends: Xalient's Expert Take

The latest release from Arctic Wolf Labs is now out, summarizing responses from 1200 IT and security decision makers worldwide, into The Arctic Wolf State of Cybersecurity: 2025 Trends Report. The research looks at the major trends in threats, mitigation and readiness and as ever, has some interesting findings.

To Grok or Not To Grok: For 29% of Enterprises...There Is No Question

Grok is a chatbot developed by Elon Musk’s xAI. It was initially released to select individuals in November 2023 and became generally available to all X (formerly Twitter) users in December 2024. With the release of Grok-3 in February, Grok’s popularity rose rapidly. However, that rise was short-lived, and its user base in the enterprise has plateaued. At the same time, many organizations took a defensive stance to block the new app pending their own security and AI governance reviews.

How Hacker Groups Exploited AI to Develop Malware and Spread Disinformation-What It Means for Digital Security

In a bold move aimed at safeguarding its AI ecosystem, OpenAI recently disabled several ChatGPT accounts linked to Russian, Chinese, and Iranian threat actors. These malicious entities exploited the chatbot’s capabilities to aid malware development, launch social media influence campaigns, and probe U.S. satellite communications infrastructure.

New Cybersecurity Executive Order Redraws Priorities: What It Means for AI, Digital IDs, and Supply Chain Security

As the global cyber threat landscape continues to evolve, the latest cybersecurity executive order from the Trump administration is making waves—setting new priorities while reversing some of the cornerstone initiatives from previous administrations. The new directive pivots away from centralized federal control and compliance-heavy practices, placing a sharper focus on AI innovation, post-quantum cryptography, and software security by design.

The Growing Challenge of Shadow MCP: Unauthorized AI Connectivity in Your Codebase

MCP adoption is surging across industries, fundamentally reshaping how systems connect to AI models. By establishing a universal protocol for data exchange, MCP simplifies integration complexity, empowering developers to build sophisticated AI capabilities in a fraction of the traditional development time. However, this streamlined connectivity to AI tools introduces significant security risks.

Introducing the all-new Vanta AI Agent to supercharge GRC teams

We’re excited to introduce the Vanta AI Agent—built to supercharge GRC teams. With a deep understanding of your program, the Vanta AI Agent proactively guides you through key workflows and takes action on your behalf, all while keeping you firmly in control. It continuously scans your program for inconsistencies and issues that are easy to overlook and handles the most tedious, repetitive tasks to enhance the overall quality of your program, and maximize your impact.

Shadow AI leak exposes data from 571 Canva Creators #ai #cybersecurity #dataleak #vendor #vendorrisk

571 Canva Creators had their personal data exposed by an unsecured Chroma database. The database, used by Russian AI startup My Jedai, contained 341 document collections. One of these collections included survey responses with emails, countries of residence, and detailed feedback on the Canva Creators program. This isn’t your typical breach. It’s the result of unsecured AI infrastructure.

Built for the agentic era: Meet the Vanta MCP Server

The way developers interact with tools is changing fast. Language models like Claude and ChatGPT, and IDEs like Cursor and Windsurf are much more than assistants and environments—they’re powerful interfaces for interacting with enterprise data. ‍ At Vanta, we envision a world where compliance workflows can shift left to meet GRC teams and developers where they already are. By launching the Vanta MCP Server, we’re making that vision real.

How to Secure AI in Your App: Mend AI for AppSec Teams

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Meet Cato's MCP Server: A Smarter Way to Integrate AI Into Your IT & Security Processes

Sometimes preparing dinner can be a complicated task. You’re juggling a stir-fry, boiling pasta, prepping a salad, and all you want is to say “Chop the onions” and have it done. No switching between tasks, no looking up steps. Just state the intent, and it’s executed. We wanted that same level of simplicity when interacting with our environment, including sites, users, topology, and real-time data. That led us to build Cato’s Model Context Protocol (MCP) Server.

DBIR 2024: AI Fuels more Cyber Threats though its Impact Remains Limited

The use of artificial intelligence in cyberattacks is now a growing concern. From the automated creation of malware to more sophisticated phishing campaigns, AI’s ability to enhance the scale and effectiveness of threats has become a cause for alarm. However, Version’s 2024 Data Breach Investigations Report (DBIR) states that only 2% of analyzed data breaches directly involved the use of this technology.

What is AI Red Teaming?

AI red teaming is the process of simulating adversarial behavior to test the safety, security, and robustness of artificial intelligence systems. It draws inspiration from traditional cybersecurity red teaming (where ethical hackers emulate real attackers to expose flaws) but applies that mindset to machine learning models, data pipelines, and the broader AI stack.

Protect AI-power apps with Cloudflare Firewall for AI

As organizations refactor applications and adopt AI and Large Language Models (LLMs) to power new applications and enhance existing services, a new class of security vulnerabilities has emerged. Traditional web application firewalls (WAFs) are only partially equipped to defend against threats unique to AI. In this video, we provide an overview of Cloudflare's Firewall for AI product, how it works, and how you can use it to protect AI models and safeguard user interactions with those models.

Humans at the Center: Redefining the Role of Developers in an AI-Powered Future

In a previous blog, we discussed how AI is reshaping software development at every level. This shift means developers need new skills to stay effective. In fact, Gartner predicts that generative AI will require 80% of the engineering workforce to upskill through 2027. So what can today’s developers do to stay ahead? Here are a few steps to consider.

AI-Driven Cyber Defense in Action: How AI Agents Are Saving SOC Analysts From Burnout

AI-powered SOC platforms are revolutionizing cybersecurity by dramatically reducing false positives and enabling analysts to focus on high-value security work. In this episode of Data Security Decoded, join Caleb Tolin as he sits down with Grant Oviatt, Head of Security Operations at Prophet Security, to explore how AI agents are transforming security operations centers (SOCs) and reshaping the future of cyber defense.

Snyk for Government Achieves FedRAMP Moderate Authorization: A Milestone for Secure Government Software

Today marks a significant milestone for Snyk and, more importantly, for the security posture of the U.S. government. I'm thrilled to introduce Snyk for Government, our FedRAMP Moderate authorized solution for the public sector. This authorization underscores our unwavering commitment to providing secure development solutions that meet the rigorous standards of the Federal Risk and Authorization Management Program (FedRAMP). It means that U.S.

Validating the Mission: Zenity Labs Research Cited in Gartner's AI Platform Analysis

Research is what turns cybersecurity from a reactive scramble into a proactive discipline. It’s how security teams uncover new threats, pressure-test defenses, and understand the unintended consequences of innovation (especially as AI Agents reshape the attack surface).At Zenity, research isn’t a side effort. It’s how we build, challenge, and ultimately secure what’s next.

Shadow AI: Managing the Security Risks of Unsanctioned AI Tools

The explosion of generative artificial intelligence tools is sparking a wave of enthusiasm in workplaces, with employees eagerly embracing new applications to boost productivity and innovation. However, this adoption often leads to a new phenomenon known as shadow AI—the use of artificial intelligence tools within an organization without explicit approval or oversight from IT and security teams. Unsanctioned use of AI creates significant (and often invisible) security blind spots.

AI and Cybersecurity: Trends That Prove the Fundamentals Matter More Than Ever

AI is not just reshaping cybersecurity. It is exposing where many organizations remain vulnerable. While attackers are racing ahead with AI-powered tools, too many defenders are still relying on outdated strategies, siloed data, and manual processes. In conversations with security leaders, I hear the same concern repeatedly. The anxiety is not just about AI-enhanced threats. It is about the growing sense that defenders are falling behind.

AI Agents Never Sleep. The Future of Cybersecurity SOC Operations

AI agents are revolutionizing cybersecurity by handling the tedious false positive alerts that drain SOC analysts. As our security perimeter expands to the cloud, we're drowning in red blinking lights - but AI agents never tire and never sleep! Grant Oviatt from Prophet Security explains how AI is solving the alert fatigue problem that's plaguing security teams worldwide. Key Points: AI agents handle repetitive security tasks False positive alerts are overwhelming analysts Cloud expansion = more security alerts AI works 24/7 without fatigue.

Don't Be a Statistic: Proactive API Security in the Age of AI

Your business depends on APIs, which are essential for contemporary digital experiences, encompassing everything from mobile applications and IoT devices to the rapidly evolving AI landscape. With more than 80% of internet traffic now routed through APIs—a number projected to rise significantly due to AI developments—their security is crucial. Unfortunately, this vital infrastructure faces growing attacks, with these threats being a real and current danger to many.

The Future of Developer Upskilling Is Human-Led, AI-Supported

In the last year, generative AI has dramatically accelerated how software is written. Developers can generate entire functions with a prompt, automate repetitive logic, and offload everything from boilerplate code to documentation. But with this newfound speed comes a deeper, more complex challenge: ensuring that what’s being created is secure, trustworthy, and production-ready.

The Growing Threat: Cybersecurity Challenges for SMBs in 2025

Hackers no longer target only the large players. In fact, cyberattacks on small to medium-sized businesses (SMBs) are becoming increasingly prevalent, with greater accuracy, frequency, and impact. Whether you operate an e-boutique or an offshore-first marketing firm, cyber threats are pounding at your virtual door-and they're not knocking, they're demanding entry. So, what's new? And why are SMBs now such tempting targets? Let's get to the bottom of it.

AI Applications in Cybersecurity with Adam Winston - The 443 Podcast - Episode 331

This week on the podcast, recent guest Adam Winston hops back on to continue our discussion on Artificial Intelligence in cybersecurity. This week, we focus on how attackers are using AI, what to worry about and what not to lose sleep over, and guidance for evaluating AI for use within your own organization. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

New Unrestricted AI Tool Can Assist in Cybercrime

Researchers at Certo warn that a new AI chatbot called “Veniceai” can allow cybercriminals to easily generate phishing messages or malware code. The tool, which only costs $18 per month, is growing in popularity on criminal forums. “One of the starkest contrasts between Veniceai and more mainstream AI systems like ChatGPT is how each responds to harmful or malicious requests,” Certo says.

DeepSight by Protecto: AI-Native Sensitive Data Detection for Developers

Thanks to a wide range of use cases that automate manual activities, enterprises are rushing to integrate GenAI into their IT stack, only to realize they’ve hit a privacy wall. A concerning number of use cases involve the use of sensitive data like PII and PHI, risking data privacy and compliance. Enterprises today are becoming increasingly aware of these multifaceted risks associated with unfiltered AI usage and turning to the common solution available in the market – AI privacy tools.

The AI SOC Analyst That Offloads 90%+ of Tier-1 Cases - Meet Socrates

Security Operations Centers (SOCs) continue to struggle in 2025. The perfect storm of growing alert volume, consistent talent shortage, and the well-documented limitations of legacy SOAR solutions have brought many SOC teams to a breaking point. At the same time, bad actors continue to innovate, and cybercriminals have become more sophisticated in their tactics and techniques, including using AI to launch attacks at scale.

AI Trust in Action: How Snyk Agent Redefines Secure Development

One word defines success or failure in the race to adopt AI in security workflows: trust. While the industry moves fast toward automation and autonomy, adoption often stalls when developers and the teams supporting them can’t trust what the AI delivers. It’s not enough for a tool to explain what it did. Developers want to know: Did it actually fix the problem? Will this change break something else? Can I rely on it again next time? Nowhere is that skepticism more justified than in security.

AI and Human Expertise: A Key Alliance in Cybersecurity

While many cybersecurity tasks - like log monitoring, event correlation, or alert classification - are repetitive and operational, they can be exhausting for professionals in the field. Artificial intelligence (AI) has become a key enabler for automating processes, reducing false positives, and optimizing incident prioritization. However, this does not mean cybersecurity can do without essential human abilities such as creativity and critical thinking.

Can Google Jules Build a SECURE Note Taking App?

In this video, I test out Google Jules, Google’s brand new AI developer assistant, to see if it can build a secure note-taking app from scratch. With a focus on privacy, authentication, and data protection, I challenge Jules to create something functional and secure. This is part of an ongoing series where I test different AI models and tools to see how well they handle real-world development tasks. Check out our playlist where we're putting these various models to the test!

How to Secure MCP Servers | A Walkthrough

While the hype continues to build around MCP, or model context protocol, a growing number of engineers and organizations are becoming concerned about the potential security risks that MCP invites. In this video, I'll give a demo of how Teleport provides secure access to your MCP servers and how the new Teleport Secure MCP integration gives you a robust solution for protecting your LLM endpoints and data sources.