Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Corelight data and LLMs

Corelight has been an innovator and leader in AI and Large Language Model (LLM) adoption for almost 2 years. We introduced our first use of LLMs in our Open NDR platform Investigator in November of 2023. Since then, we have continued to push the boundaries of the possible by working with AI model builders on cybersecurity-specific training and expanding LLM use within Investigator to include data analysis and summaries.

Corelight announces industry's first MCP server exposing detailed network data and alerts

Corelight’s GenAI Accelerator Pack features the industry's first Model Context Protocol (MCP) server, specifically designed to facilitate easier access to detailed network data and alerts for cybersecurity AI agents and enhance the analysis of network security information. The announcement comes at a pivotal moment for cybersecurity.

Evaluating AI Security: Performance vs. Safety

Evaluating AI Security: Performance vs. Safety In this video, A10 Networks' security leaders Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar discuss the crucial considerations for evaluating AI security within an organization. Madhav Aggarwal emphasizes the following points: AI companies operating in this evolving frontier. It is often difficult to attain both through the same AI model. This segment delves into why achieving both can be a complex task through the same model.

Will AI replace human pen testers?

It’s become pretty standard to expect the help of AI with automating tasks, with penetration testing being no exception. As AI-driven tools grow more sophisticated, some have posed the question: could these systems render the traditional human pen tester obsolete entirely? We’ll explore the strengths and limitations of AI when it comes to offensive security and predict the role human red team expertise still has to play in an increasingly automated world.

Why Omdia recommends Extended Access Management to secure agentic AI

Omdia, a global analyst and advisory leader, recently released a report called “How Extended Access Management (XAM) closes the gaps in security.” In it, they describe how existing tools have failed to address the most serious security challenges: application sprawl, device sprawl, and identity sprawl.

The unopinionated AI advantage: Building AI-powered SecOps on your terms

After years of hype, hesitation, and false starts, the age of AI in cybersecurity is finally here, and it is moving fast. Security teams are no longer wondering if they should be using AI, but how to harness it without getting trapped by vendor lock-in or rigid solutions that can't adapt to their needs. In this webinar, LimaCharlie founders Maxime Lamothe-Brassard (CEO) and Christopher Luft (CCO) reveal how we are integrating AI into cybersecurity using the same principles that define everything we build: massively scalable, unopinionated, and flexible by design.

Falcon Cloud Security AI Security Posture Management (AI-SPM): Demo Drill Down

Unify AI visibility with AI-SPM, Detect AI package vulnerabilities, Expose AI packages in the cloud, Fix AI model risks fast. Find threats faster and stop breaches in your AI pipeline with Falcon Cloud Security. Subscribe and Stay Updated: ► Don't miss out on more exciting content! Subscribe to our channel for the latest updates, case studies, and more from the world of cybersecurity. Hit the bell icon to receive notifications whenever we post new videos.

How Startups Are Outsourcing Sales to AI Bots

Startups are often very disorganized. They've got big dreams but small wallets. Building a sales team eats up their cash and time. That's where AI bots come in. These tools can close deals, find leads, and work around the clock. Today, startups using AI for sales are outpacing everyone else. This blog breaks down how it works, why it's a game-changer, and how you can jump in.

We Asked 100+ AI Models to Write Code. Here's How Many Failed Security Tests.

If you think AI-generated code is saving time and boosting productivity, you’re right. But here’s the problem: it’s also introducing security vulnerabilities… a lot of them. In our new 2025 GenAI Code Security Report, we tested over 100 large language models across Java, Python, C#, and JavaScript. The goal? To see if today’s most advanced AI systems can write secure code. Unfortunately, the state of AI-generated code security in 2025 is worse than you think.

Undercover Investigations: How AI is Supercharging Romance Scams

As someone that’s been in the industry for over 20 years, I’ve seen my fair share of online scams. But this is the kind of story you hear and can’t quite believe. At the last RSA cybersecurity conference, a colleague of mine–someone who lives and breathes digital security, a CISO–admitted he’d been taken in by an online romance scam. My first thought was, how?

New research uncovers four security challenges caused by unmanaged AI access

At this point, it’s almost cliché to say “AI is here, and it is changing everything.” Whether it’s accelerating productivity or reshaping employee workflows, AI is ushering in a new era of operational possibilities. But as we all know, beneath this transformation lies a complex and evolving security challenge.

What is AI system prompt hardening?

As generative AI tools like ChatGPT, Claude, and others become increasingly integrated into enterprise workflows, a new security imperative has emerged: system prompt hardening. A system prompt is a set of instructions given to an AI model that defines its role, behavior, tone, and constraints for a session. It sets the foundation for how the model responds to user input and remains active throughout the conversation.

The Ultimate Guide to Using Text to Speech AI in Videos

In today's world, creating engaging videos is easier than ever, thanks to modern technology. One tool that has become very popular is text to speech AI. This powerful technology helps turn written text into spoken words, making it perfect for adding voiceovers to videos. Whether you're creating educational videos, tutorials, or social media content, text to speech AI can save you time and effort, while still providing a professional sound.

Fend Off AI Fatigue with the Snyk AI Trust Platform

Generative AI has transformed software development almost overnight. From coding assistants to AI-native applications, tools are evolving faster than most teams can keep up with. But the rapid evolution of AI comes with its own cost: mental fatigue. Even among AI developers, most don’t consider themselves experts in generative AI. Between shifting tools, growing security risks, and a flood of hype, it’s no surprise that developers and security teams feel overwhelmed.

AI Voice Mimicry: How to Protect Yourself From Scams #appsec #cybersecurity

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Better Prompts for Better Results with Egnyte's Prompt Wizard

Content is core to business operations, and AI is reshaping how teams engage with it. From intelligent summarization and advanced analysis to automated organization, AI streamlines workflows and accelerates decision-making across the enterprise. However, the value of AI-driven capabilities depends on one critical factor: the quality of the input prompt. Well-crafted prompts guide AI to deliver accurate, relevant, and actionable responses.

Where AI Meets Design: Why the Role of the Human UI/UX Designer Isn't Going Anywhere

AI is changing how we build digital products - and it's doing it fast. From generating interface layouts in seconds to crafting functional microcopy with a prompt, the tools we use as designers are evolving at breakneck speed. It's tempting to assume we're heading toward a future where much of UI/UX design becomes automated - where tools take over the craft. But here's the truth: tools don't replace thinking. They don't replace creativity, empathy, or the nuance required to shape truly great user experiences.

Beyond Management: The Shift to Continuous Vulnerability Mitigation

In the fast-paced world of cybersecurity, threats evolve continuously, and so should your response. Traditional vulnerability management approaches-while useful-are no longer sufficient to address the dynamic nature of modern cyber risks. Organizations must move beyond management and embrace continuous vulnerability mitigation to ensure real-time protection and long-term resilience.

Identify common security risks in MCP servers

AI adoption is rapidly increasing, and with that comes a steady influx of useful but potentially vulnerable tools and services still maturing in the AI space. The Model Context Protocol (MCP) is one example of new AI tooling, providing a framework for how applications integrate with and supply context to large language models (LLMs). MCP servers are central to developing AI assistants and workflows that are deeply integrated with your environment.

Ep 2: Hacked together: fast, safe prototyping with AI

Join security experts Adam White, Chas Clawson, and Seth Williams as they explore how AI-first development is reshaping the way cybersecurity teams build, test, and deploy solutions. Traditional development cycles often leave critical ideas trapped in backlogs, but with Gen-AI and language models, security teams can now move from concept to prototype in hours, not months.

What We Found with OpenAI's Codex CLI Tool

In this video, I explore OpenAI’s Codex CLI tool to see how powerful it really is for coding with AI. But things quickly go off the rails… what started as a simple test ended with a surprise identity verification request. Apparently, to continue using the tool, I need to submit a government-issued ID and a photo of myself—something I didn’t expect at all. I talk through the process, show the error I ran into, and share my honest thoughts on this level of access and how invasive it feels for a developer tool.

Securing the Next Era: Why Agentic AI Demands a New Approach to API Security

I’ve spent my career building solutions to protect the API fabric that powers modern businesses. I founded Salt because I saw that traditional security tools such as WAFs, gateways, and CDNs weren’t designed to see or secure APIs. That gap led to breaches, blind spots, and billions in risk. Today, we’re facing a new wave of risk that’s even bigger than the last. The rise of Agentic AI has brought us to a true inflection point. Agentic AI isn’t just another software layer.

How Securonix is Reinventing MSSPs with AI and Scale - Mark Osmond Interview

Dive into how Securonix is revolutionizing the Managed Security Service Provider (MSSP) landscape with scalable partnerships, Unified Defense SIEM platforms, and advanced AI technologies. In this session, cybersecurity expert Mark Osmond, with 25+ years of industry experience, explores key MSSP challenges like cost management, scalability, and multi-tenancy—and how Securonix's Gartner-recognized, AWS-hosted SaaS platform is the solution.

LLMs Are Not Goldfish: Why AI Memory Poses a Risk to Your Sensitive Data

We’ve all heard the myth: goldfish have a memory span of just a few seconds. While that’s debatable in marine biology circles, it’s useful as a metaphor in tech, especially when talking about memory, risk, and AI. The problem is, large language models (LLMs) are not goldfish. In fact, they have incredible memory. And increasingly, that memory isn’t just session-based. It’s persistent, long-term, and system-connected. That changes everything.

Why AI Infrastructure Growth Demands Next-Gen Cybersecurity and PAM

Global Artificial Intelligence (AI) infrastructure spending is projected to surpass $200 billion by 2028, according to research from the International Data Corporation (IDC). As organizations rapidly deploy more complex AI systems, the demand for high-performance infrastructure, like Graphics Processing Units (GPUs) and AI accelerators, is surging. This growth exponentially increases computing power, energy consumption and data exchange across hybrid and cloud environments.

Security is a Critical Factor in AI Adoption

Security is a Critical Factor in AI Adoption Jamison Utter joins A10's GenAI experts Madhav Aggarwal and Diptanshu Purwar to discuss the critical importance of security for AI adoption. They cover how AI fundamentally shifts the attack surface, requiring a move from traditional rule-based pattern matching to understanding natural language semantics. The team emphasizes the need for alignment in AI to ensure models are "helpful, harmless, and honest" (the 3H philosophy) and highlights the role of red teaming and guardrails in preventing vulnerabilities, such as prompt injection.

Securing AI-Generated Code: Why It Matters

Securing AI-Generated Code: Why It Matters In this video, A10's Madhav Aggarwal explains how using AI for coding is an excellent use case, but the code generated by AI must be safe and secure. As AI and large language models (LLMs) become central to enterprise strategy, securing these powerful workloads is no longer optional—it's essential. A10 Networks' security leaders, Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar, explore the growing security risks associated with AI/LLM adoption and what organizations must do to stay protected.

What Is AI Penetration Testing? A Guide to Autonomous Security Testing

AI penetration testing is changing how organizations identify and exploit vulnerabilities. Instead of relying on traditional manual tests or basic automated scans, autonomous systems now simulate attacker behavior continuously and at scale. These systems use agentic AI to execute real-world exploits, reduce noise, and shift security left, all while keeping human experts focused on the creative flaws machines can’t yet catch.

Illusion of control: Why securing AI agents challenges traditional cybersecurity models

Enterprise security teams commonly focus on controlling AI agent conversations through prompt filters and testing edge cases to prevent unauthorized information access. While these measures matter, they miss the bigger picture: the real challenge is granting AI agents necessary permissions while minimizing risk exposure. This isn’t a new problem—it’s the same fundamental challenge we’ve faced with human users for years.

A New Chapter in Mobile Security: Tackling Human Risk with AI-Powered Social Engineering Protection

This week marks a milestone in the evolution of mobile endpoint security. At a time when attackers are moving faster and targeting smarter, Lookout is proud to unveil a breakthrough initiative: AI-powered social engineering protection—the first solution of its kind built to detect and disrupt human-targeted attacks at the mobile edge.

The Nightfall Approach: 5 Ways Our Shadow AI Coverage Differs from Generic DLP

Shadow AI refers to the unauthorized or unmonitored use of AI tools (like ChatGPT, Copilot, Claude, and Gemini) by employees in the workplace. It’s now one of the fastest-growing data exfiltration vectors. Employees are pasting source code, customer or patient data, contract terms, and even M&A info into gen AI tools, often without realizing the risk. And many legacy DLP tools are still catching up.

Riscosity Launches The DFPM Trust Center

For a AI software company like Riscosity, which helps organizations secure and govern data flows to third parties, compliance is not just a regulatory requirement—it is central to the value proposition. Recognizing this, Riscosity has launched a dedicated Trust Center at trust.riscosity.com, powered by industry leader Vanta, to streamline how it communicates its compliance posture with current and prospective customers.

What is Data Poisoning? Types, Impact, & Best Practices

Data poisoning is a type of cyberattack where malicious actors deliberately manipulate or corrupt datasets meant for training machine learning models, especially large language models (LLMs). Tampering parts of a raw data set with an incorrect, often duplicitous one can negatively impact the result in various ways. Fundamentally, it aims to alter how AI models learn information so that the output is flawed.

Shifting from Vulnerability Management to Security Risk Prioritization with AI

The adage ‘an ounce of prevention is better than a pound of cure’ applies to AppSec vulnerability management. Traditionally, AppSec has focused on a reactive ‘curing flaws’ paradigm, identifying and fixing vulnerabilities after they have occurred. However, the never-ending escalation between threats and security leads to alert fatigue and security debt.

America's AI Action plan has arrived: 3 key takeaways that data security leaders need to know

On July 23rd, the White House released America’s AI Action Plan, a sweeping federal strategy to drive U.S. leadership in artificial intelligence. The message was loud and clear: AI is a national imperative. The plan calls for removing regulatory barriers, investing in infrastructure, and accelerating AI adoption across commercial and government sectors. For data security leaders, this signals a pivotal shift.

Top Financial Cyber Threats Facing Businesses in 2025

The world of business is facing a growing wave of cyber threats, especially when it comes to financial security. Cybercriminals are getting smarter, and their tactics are more sophisticated than ever. This isn't just a concern for big corporations; businesses of all sizes need to stay alert. A cyberattack could lead to major financial losses, damage to your reputation, or even legal headaches. In this article, we'll break down some of the top financial cyber threats businesses will likely face in 2025.

AI and the 2025 SIEM landscape: A guide for SOC leaders

Security teams often find themselves having to put out the immediate fires in front of them, but this comes at the expense of implementing a more methodical risk reduction strategy. Attack surfaces are expanding, and new risks emerge with new tech. Modern security operations center (SOC) teams are drowning in alerts, stretched thin by talent shortages, and racing to stay ahead of increasingly sophisticated adversaries.

Leveraging AI to reduce cybersecurity costs and risks: A CISO's guide

In this article Chief Information Security Officers (CISOs) face a dual imperative in the digital landscape of today: safeguarding their organizations from an ever-evolving threat landscape while managing escalating security costs. Artificial Intelligence (AI) offers transformative potential in meeting these challenges by automating threat detection, streamlining compliance, and optimizing resource allocation.

How CISOs are using AI to automate risk assessments in 2025

In this article In 2025, the role of the Chief Information Security Officer (CISO) and compliance leadership has become even more critical in ensuring that risk assessments are not only comprehensive but also agile and adaptive. Artificial Intelligence (AI) has emerged as a transformative force in cybersecurity, enabling risk assessments to be automated, more accurate, and proactive.

Bits AI Security Analyst: Automate Cloud SIEM investigations

Datadog's Bits AI Security Analyst transforms the way security teams handle investigations by autonomously triaging Datadog Cloud SIEM signals. Built natively in Datadog, it conducts in-depth investigations of potential threats and delivers clear, actionable recommendations. With context-rich guidance for mitigation, security teams can stay ahead of evolving threats with greater efficiency and precision.

AI is cybersecurity's biggest threat

It’s also its greatest defense The biggest threat in our rapidly evolving cybersecurity landscape is artificial intelligence (AI).1 It’s also our greatest defense. Cybersecurity is a high-stakes game where everything is on the line and decisions have to be made fast. For years, cybersecurity strategy has been about increasing visibility to make informed decisions from vast amounts of data.

Stolen by the Scrapers: How to Protect and Profit from Your Content in the Age of AI

What is LLM Scraping? We’re entering a new phase of the Internet, one that is increasingly shaped by generative AI. These systems need data, and lots of it. To meet this hunger, they scrape the web, pulling in everything from news articles and academic journals to product listings, metadata, and user-generated content. This practice, known as large language model (LLM) scraping, has moved far beyond traditional bots indexing public sites.

Should You Still Get a Cybersecurity Degree in the Age of AI? Here's What to Know

Artificial intelligence is reshaping cybersecurity in rapid fashion. From automated threat detection to AI-assisted incident response, tools once handled manually by analysts are increasingly run by algorithms. That has many people wondering: is it still worth investing in a cybersecurity degree?

Seemplicity Launches AI-Driven Features to Eliminate Remediation Bottlenecks

Seemplicity unveiled a major product release packed with AI-powered capabilities to cut through noise, facilitate fixing teams, and reduce time to remediation. This latest release introduces AI Insights, Detailed Remediation Steps, and Smart Tagging and Scoping, three new capabilities that use AI to solve some of the most painful and time-consuming cybersecurity tasks.

Inside Qubit Conference Prague 2025: Hacking Social Platforms and Securing AI

Qubit Conference Prague 2025 brought together some of the sharpest minds in cybersecurity—and Cato CTRL made sure to leave a mark. Not only did we share insights on AI-powered security, but we also marked a major milestone: the opening of our new R&D office in Prague. This expansion strengthens our global footprint and taps the best in the local engineering and development talent to help with the kinds of projects we present at Qubit.

Nucleus MCP Integration: Scaling Risk Reduction with AI-Driven Insights

Today, we’re excited to announce a preview of the Model Context Protocol (MCP) Server for Nucleus. This marks an important step towards AI-native workflows for vulnerability and exposure management. Model Context Protocol (MCP) is an emerging industry standard enabling seamless integration between enterprise applications and AI models. Backed by leading organizations like OpenAI, Microsoft, and Google, MCP servers are quickly becoming the foundation for AI-enablement across the enterprise.

Model Context Protocol (MCP) vs Model Control Plane (MoCoP): Why your AI security is screwed if you only have one

If you’re building AI systems with agents, plugins, and orchestration layers and you’re only thinking about how to route traffic, you’re halfway to being pwned. Everyone’s rushing to build a Model Context Protocol (MCP) — and that’s great. But almost no one’s talking about MoCoP — the Model Control Plane, which is just as important and arguably where the riskiest stuff happens. (Also, side note, who the hell keeps making these damn acronyms so confusing?

Navigating Enterprise AI Implementation: Risks, Rewards, and Where to Start

At Snyk, we believe that AI innovation starts with trust, which must be earned through clear governance, sound security practices, and proven value delivery. As we scale our AI initiatives across the business, we’re continually refining how to implement AI in a way that is not just fast and functional, but also secure and responsible.

From Hype to Trust: Building the Foundations of Secure AI Development

Generative AI and Agentic AI are changing everything from who writes software to how we define secure architecture. At Snyk’s recent Lighthouse event in NYC, leaders from cloud, security, and development teams came together to answer one essential question: how do we move fast with AI without breaking trust? The answer? Start with visibility, bake in security by design, and never lose sight of the humans behind the code.

Why Agentic Security Doesn't Mean Letting Go of Control

Autonomous agents are changing the way we think about security. Not in the distant future, right now. These systems (intelligent, self-directed, and capable of making decisions) are starting to play an active role in the SOC. They’re not only collecting data; they’re analyzing it, correlating alerts, prioritizing risks, and even initiating response actions. This is Agentic AI, and it makes people nervous. In security, autonomy often gets mistaken for loss of control.

Falcon Cloud Security - Accelerate Cloud investigations powered by Charlotte AI

Charlotte AI automatically triages detections with supporting evidence, autonomously generates and answers prioritized questions, and embeds AI reasoning directly into workflow automation to drive scalable action across cloud environments. Subscribe and Stay Updated:► Don't miss out on more exciting content! Subscribe to our channel for the latest updates, case studies, and more from the world of cybersecurity. Hit the bell icon to receive notifications whenever we post new videos. Thank you for watching!

The extended Q+A: continuing the AI agents conversation

Last week, we hosted the Product Spotlight: Build agents in Tines, and it was a hit. We had so many questions that we couldn’t answer them all live, so we’re continuing the conversation here. Before we jump into the Q+A, here’s a quick recap of the webinar in case you missed it: In this session, Head of Product Stephen O'Brien introduced the AI Agent action and shared how it builds on our ongoing evolution of workflows.

Vanta Acquires Riskey to Transform Vendor Risk with Continuous, AI-Powered Monitoring

Vanta announces the acquisition of Riskey, a pioneer in real-time third- and fourth-party risk monitoring. The addition of Riskey's technology into Vanta Vendor Risk Management (VRM) significantly advances Vanta's capabilities in supporting security teams with an automated approach to VRM - replacing static point-in-time assessments with continuous, AI-driven risk intelligence.

Why AI Usage Monitoring Is Now Mission-Critical

Shadow AI refers to the use of unapproved AI tools in the workplace without IT’s knowledge or oversight. Cisco’s 2025 Data Privacy Benchmark Study found that 81% of organizations lack full visibility into which AI tools their employees are using (Cisco, 2025). If you’re not monitoring AI use, you’re not managing AI risk. And in 2025, ignorance is expensive.

Why You Should Care About Vendors Using AI Products, and How Bitsight Helps You Find Out

Artificial intelligence—it’s a term you’ve likely encountered more than once today, and this won’t be the last. And while it reshapes how businesses operate, it’s also introducing new risks. As organizations embrace AI-powered tools for efficiency and innovation, it becomes essential to understand what technologies your vendors rely on, and what those choices mean for your cybersecurity posture.

The Attack On Browser-Based AI Agents Is Coming

We are working tirelessly on our AI First strategy to better protect both humans and their AI tools. KnowBe4 and its advocates spend a lot of time talking to audiences about AI-enabled threats, and rightly so, as recently covered in dozens of previous posts, including this recent one. This year and next promise to be an explosion of cyber threats better enabled by AI. After years of saying AI attacks would be coming, they are here and will be the way that most cybercrime is committed forevermore.

Why Remote Devs Are AI's Next Big Bet?

The tech world is buzzing about something that's reshaping how we think about software development. Remote developers aren't just convenient anymore; they're becoming the secret weapon for companies diving into AI. Recent data shows that 79% of managers feel like their team is more productive working remotely or hybrid environment. This isn't just about flexibility; it's about tapping into a global brain trust that's perfectly positioned to handle AI's demands. Companies are discovering that the best AI talent doesn't always live in Silicon Valley, and that's changing everything.

Understanding AI compliance and its importance for organizations

As AI capabilities grow, organizations are adopting it for compliance monitoring, risk analysis, and data processing. However, increased use also introduces new risks, making strict regulation essential, especially in sectors where sensitive data is involved—like finance, insurance, and healthcare. Mishandling this information can lead to reputational damage, legal action, or hefty fines.

When AI Agents Go Rogue: What You're Missing in Your MCP Security

We’re at a major inflection point in how software operates. And I don’t say that lightly. For the past decade, we’ve seen a steady evolution toward microservices, APIs, and cloud-native architectures. But Agentic AI is something different. We’re no longer talking about static services. We’re now dealing with autonomous agents that reason, remember, and act in real-time across live environments.

Securing the agentic future: Where MCP fits and where it doesn't

AI agents are rapidly transforming how software is accessed, operated, and integrated, such as automating workflows, calling APIs, and interacting with tools and SaaS platforms on behalf of users. This paradigm unlocks powerful new capabilities, but it also raises urgent questions about how sensitive data, especially credentials and secrets, should be managed.

Now on AWS Marketplace: MCP Server for Trelica by 1Password

SaaS sprawl and shadow IT create significant security vulnerabilities, exposing organizations to unmanaged apps, unauthorized access, and compliance risks. It’s simply not enough to secure access to the applications you’re actively managing. You also need to secure everything else. That’s one of the reasons we acquired Trelica earlier this year. Organizations must be capable of identifying and managing applications that are used outside of IT and security’s purview.

Developers fly the plane: AI guardrails for secure cloud innovation

Developers now chart courses through environments as dynamic and unpredictable as open skies, plotting efficient courses through shifting clouds of technology to reach ambitious goals. Increasingly, AI assistants are copilots on these journeys—streamlining workflows, reducing repetitive tasks, and enabling teams to navigate more complex terrain with speed.

GitGuardian Launches MCP Server to Bring Secrets Security into Developer Workflows

GitGuardian, the leader in automated secrets detection and remediation, today announced the launch of its Model Context Protocol (MCP) Server, a powerful new infrastructure designed to bring AI-assisted secrets security directly into developer environments. As intelligent agents begin to reshape the software development landscape, GitGuardian's MCP server marks a pivotal shift in aligning security practices with an environment where code is shipped faster than ever.

EP 11 - The calm CISO: Strength under pressure

What does it take to stay calm in the face of constant cyber pressure—and why does that mindset matter more than ever? In this episode of Security Matters, host David Puner speaks with Den Jones, founder and CEO of 909Cyber, about his transition from enterprise chief security officer (CSO) to cybersecurity consultant.

EP 11 - The calm CISO: Strength under pressure

What does it take to stay calm in the face of constant cyber pressure—and why does that mindset matter more than ever? In this episode of Security Matters, host David Puner speaks with Den Jones, founder and CEO of 909Cyber, about his transition from enterprise chief security officer (CSO) to cybersecurity consultant.

Microsoft Launches Azure DevOps MCP Server in Public Preview

Microsoft has now launched the public preview of the Azure DevOps Model Context Provider (MCP) Server in a brave attempt to change developer productivity. With this newly introduced capability, GitHub Copilot in Agent Mode can directly access a developer’s Azure DevOps project data and allow the developer to interact with its data and functions via the natural language commands provided by the Copilot, within the developer’s coding environment, such as Visual Studio Code or Visual Studio.

The Future of Generative AI in Application Security

As generative AI revolutionizes how we write software, it’s also reshaping how we secure it. Tools like GitHub Copilot and ChatGPT now allow developers to write functional applications with just a few prompts. This growing trend, dubbed “vibe coding,” represents a fundamental shift in development philosophy: developers rely on AI-generated code and focus more on ideas than implementation. This unlocks speed and creativity, but it also exposes new and serious security risks.

Actionable Content Ideas: Meeting Audience Needs Effectively

Want to create content that connects with your audience? Creating content that resonates isn't just about throwing words at a screen and hoping something sticks. Your audience has specific needs, problems, and desires - and if you're not addressing them directly, you're wasting your time. The content game has changed dramatically. With 90% of content marketers planning to use AI in their 2025 strategies, the competition for attention is fiercer than ever. But here's the thing...

Shadow AI Is Everywhere. Cato Puts You Back in Control

Generative AI boosts productivity—but also introduces serious risks: data leakage, compliance violations, and flawed outputs. Most enterprises lack visibility into how GenAI tools are being used across their environment. Cato changes that. In this video, we introduce Cato’s GenAI Security Controls—a native part of the Cato SASE Cloud Platform. No extra consoles. No new licenses. Just immediate visibility and control.

Boosting Efficiency with AI for Small Business Owners

Managing a small business means wearing many hats, often all at once. Time is a limited resource, and most owners find themselves buried in repetitive tasks that slow down growth. But as technology evolves, so do the solutions available to entrepreneurs. One of the most promising solutions is the growing ecosystem of AI tools designed specifically to help small businesses operate more efficiently. These tools can take care of time-consuming tasks, streamline communication, and offer powerful insights, all without the need for a large team or tech expertise.

The Invisible Colleague: Understanding Shadow AI in the Workplace

The rise of AI tools like ChatGPT, Gemini, Midjourney, and Copilot is reshaping workplaces, with employees adopting these tools to boost productivity and innovation. However, this rapid adoption often occurs without IT oversight, creating Shadow AI - a growing challenge for businesses.

AI-Generated Summaries Mistakenly Suggest Phishing Sites

Researchers at Netcraft warn that AI-generated search engine summaries are suggesting phishing sites when users ask them to find legitimate login pages. The researchers tested popular AI models, asking them for the login pages of fifty major brands, and found that the models provided the wrong sites 34% of the time. "In many cases, users see AI-generated content before (or instead of) traditional search results—and often without even needing to log in," the researchers explain.

AI-Powered Email Threat Detection and Response with Next-Gen SIEM

Email remains the top attack vector, and speed is critical when every second counts. Falcon Next-Gen SIEM and Fusion SOAR streamline detection by ingesting email telemetry and automating investigation with Charlotte AI. By analyzing sender behavior and message content, Charlotte AI delivers real-time, human-readable verdicts with confidence scoring. Teams can quickly isolate threats, block senders, or escalate suspicious activity. With AI-powered workflows and automation, email triage becomes faster, more precise, and scalable.

AI Attacks Are Coming in a Big Way Now!

AI is going to allow better, faster, and more pervasive attacks. For a few years, if you attended one of my presentations involving AI, I would tell you all about AI and AI threats…perhaps even scare you a bit…and then tell you this, “AI attacks are coming, but how you are likely to be attacked this year doesn’t involve AI. It will be the same old attacks that have worked for decades.” I always got lots of comforted smiles from those ending lines. But this year is different.

Navigating Identity and Security in the Age of Agentic AI

As AI agents rapidly improve, becoming more autonomous and interconnected, they unlock new ways to assist us. But as they perform actions for us and delegate tasks to other AI agents, we need to reexamine our understanding of “identity.” How do we ensure these powerful AI interactions are authentic, authorized, and permissioned, while differentiating between legitimate actions and potential misuse?Join Datadog co-founder and CTO Alexis Lê-Quôc and Okta CTO Bhawna Singh as they explore the convergence of AI, security, and observability.

The Future of Content and AI: Pay per Crawl and What's Next

In this episode, host João Tomé is joined by Will Allen, Cloudflare’s VP of Product Management, to discuss Pay-Per-Crawl and our new permission-based model for AI bots. These updates, launched on Content Independence Day, aim to reshape how AI models access and reward content, shifting from opt-out to opt-in. They explore how AI Overviews are changing the old “traffic for content” model, and how Cloudflare is helping creators take control through tools like AI Audit. Plus: the future of trustworthy content, bot authentication, and the rise of a fairer content economy.

Microsoft Copilot and Data Security: Tracing AI's Role in the Enterprise

Artificial intelligence is no longer a distant vision—it’s a present-day force reshaping how enterprises manage, process, and secure their data. Among the most influential innovations driving this transformation is Microsoft Copilot. Marketed as an AI-powered productivity enhancer, Copilot integrates seamlessly with Microsoft 365 applications, unlocking new levels of efficiency across industries.

Data is the key to building modern AI workflows

In this guest post, Eric Newcomer, Principal Analyst at Intellyx, explains why data is essential for building and running effective AI workflows. In the current phase of AI transformation, everyone is discovering many applications for gen AI, especially chats with LLM trained data, public as well as private. One interesting application of AI is building modern workflows to automate operational processes.

The Next Security Frontier: AI Agents, MCP, and the Coming API Wave

I’ve seen this story before, and I’m seeing it again. When we founded Salt Security in 2016, APIs already powered the digital economy, Kubernetes started to accelerate the growth of APIs, yet almost nobody was monitoring them. Visibility was near zero, context was missing, and protection was an afterthought. Fast-forward to 2025, and the same blind spot is forming, only bigger. AI agents are no longer just generating content; they are also creating it.

Charlotte AI - Agentic Workflows: Vulnerability Impact Translation

Vulnerabilities pile up fast, but which ones truly matter to your business? With Charlotte AI Agentic Workflows, CrowdStrike turns overwhelming technical data into business-ready intelligence so you can prioritize what really counts. By pulling real-time vulnerability insights from Falcon Exposure Management, Charlotte AI evaluates what systems are at risk, how many users could be impacted, and what services or revenue streams are on the line. In this demo, you’ll see how AI-driven reasoning translates CVEs and severity scores into clear business impact, no manual analysis required.

How LLMs Are Changing DLP, And Why That's a Good Thing

For years, data loss prevention has been synonymous with pain: These legacy approaches treat every potential incident the same, forcing teams to waste time deciphering what really happened and why it matters. Meanwhile, real risks slip through the cracks because no team can manually keep up.

Understanding AI governance: Why most organizations feel overwhelmed by regulations

As AI adoption accelerates across industries, the pressure to ensure responsible and compliant use is growing just as fast. Conversations around AI governance, once niche, are now central to boardroom strategy, legal risk assessments, and day-to-day operations. ‍ While organizations widely acknowledge the need for clear oversight, many of them are struggling to keep up. In our latest survey of industry leaders, half of the respondents said they feel overwhelmed by AI regulations.

When AI Agents and Automated Workflows Can Finally Be Trusted: How Tanium AEM for ServiceNow Transforms the Enterprise

In every corner of today’s enterprise, teams are under pressure to do more—faster. IT must deliver exceptional service, Security must contain threats in real time, and Risk teams must keep up with a constantly shifting regulatory landscape. These responsibilities are only growing, while the complexity and sprawl of endpoints, tools, and data sources continue to challenge even the most mature organizations.

Don't Let Your AI Be the Next Log4j

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

AI adoption in security: Top use cases and mistakes to avoid

Widespread implementation of artificial intelligence (AI) in security presents a paradox. On one hand, it helps security experts combat advanced threats at scale. On the other hand, AI is also contributing to the scale of sophistication of adversaries' threat campaigns. To fight fire with fire, organizations are increasingly automating security processes to make up for the uneven playing field on which they find themselves.

Beyond the Hype: Why Adaptive AI is Essential for Modern SOCs

Artificial Intelligence (AI) has revolutionized Security Operations Centers (SOCs), automating threat triage and response. But not every AI is equipped to handle today’s evolving cyber threats. Many SOC platforms still rely on static, pre-trained models designed for yesterday’s attack patterns, leaving modern organizations vulnerable.

Rewind: Microsoft Kernel Shift, GPT-4o Threats, and Scattered Spider - The 443 Podcast - Episode 334

First, we look back at Microsoft’s major shift to remove endpoint protection from the Windows kernel. When we first covered it, it was a proposed change—now it's happening, and the implications are big. Next, we revisit a segment on GPT-4o and how generative AI is fueling the next wave of social engineering attacks. It's smarter, faster, and more convincing than ever. And finally, a refresher on the arrest of a Scattered Spider leader. While that made headlines, the group's activity hasn’t slowed down, they're still very much on the radar, as we discussed just last week.

Inside the AI Threat Landscape: From Jailbreaks to Prompt Injections and Agentic AI Risks

AI has officially moved out of the novelty phase. What began with people messing around with LLM-powered GenAI tools for content creation has rapidly evolved into a complex web of agentic AI systems that form a critical part of the modern corporate landscape. However, this transformation has given new life to old threats, transforming the API security landscape all over again.

Agent-Based AI and the Machine Identity Revolution Are Reshaping Security

Is agentic AI the productivity revolution we've been waiting for, or a security nightmare in the making? With AI agents now outnumbering humans and secrets proliferating across enterprise systems, the answer isn't simple. Read our insights from SecDays {France} 2025.

Scaling Without Losing the Human Touch: Delivering AI Customer Service at Enterprise Volume

AI has become the default answer to rising ticket volumes. It's fast, tireless, and cheaper than adding headcount. But somewhere along the way - usually when support crosses into the tens of thousands of interactions a month - teams start hearing the same thing: "It feels like I'm talking to a script." Speed goes up, but the warmth fades.

Introducing the Jit MCP Server: Security Context and Automation at Your Fingertips

Meshi Yona is the Software Development Team Lead at Jit, where she brings together a strong foundation in cyber systems, analytical thinking, and leadership. Today, we're thrilled to announce the launch of the Model Context Protocol (MCP) Server for Jit, now available in preview for our customers. MCP is an innovative new standard rapidly gaining traction across the AI ecosystem — designed to bridge the gap between applications and large language models (LLMs).

How Zenity Helps Enterprises Apply AI TRiSM to AI Agents

The future isn’t human vs machine, it’s human trying to govern machines. As AI agents grow more autonomous (like replying to emails, writing code, granting access, making decisions, etc.) the real threat isn’t a malicious model. It’s the absence of controls. AI Agents don’t come with built-in security policies. They don’t ask for permission. They simply do what they’re told (sometimes correctly, sometimes dangerously) because no guardrails told them otherwise.

The quantum-AI collision: What CISOs must do now to stay ahead

Technology is moving at the speed of light, and two forces—quantum computing and AI agents—are poised to shake up cybersecurity. We’re not talking about some far-off future; this is happening now. The message for CISOs and security leaders is simple: If you’re not preparing now, you’re already behind. As we say in Brazil, “Melhor prevenir do que remediar” or “better to prevent than remediate.”

Empowering your LLMs: Unlocking cybersecurity queries with Open WebUI knowledge bases

In the rapidly evolving landscape of large language models (LLMs), the ability to access and synthesize vast amounts of information is paramount. While LLMs excel at generating creative text and understanding complex prompts, their knowledge is often limited to the data used during their training. This is where knowledge bases (a.k.a.

Stop writing dumb AI security policies: use threat models, not fear

Every time someone asks me about building their AI policy, I die a little inside. Not because it’s a bad question, but because my answer is always the same: “Can we not build it off pure fear for once?” Most people don’t understand how AI architecture works, so their first instinct is to panic. And, we’ve seen this movie before: cloud, mobile, bring your own device (BYOD).

The AI advantage in first-party risk management

Risk management is evolving at a pace that compels organizations to adopt more advanced technologies. Among these, artificial intelligence is emerging as a leading force in transforming internal oversight practices, particularly in the realm of first-party risk management. The need to manage risks that originate within the organization has prompted leaders to reevaluate and innovate traditional strategies, making AI an indispensable component of modern risk frameworks.