Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
The Data Problem: Why LLM Security Is So Complex
The Data Problem: Why LLM Security Is So Complex Large language models are trained on terabytes of data, but what happens when that data is flawed? In this video, A10 Networks' security experts, Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar, discuss a critical, often-overlooked aspect of AI security: the training data itself. They explain that LLMs are inseparable from the data they're trained on, which means if the data contains biases, toxic content, or other vulnerabilities, those flaws are vulnerable to exploitation by attackers.
August Release Rollup: AI-Powered Agents, Egnyte to Egnyte Connector 2-Way Sync, and More
We’re excited to share new updates and enhancements for August, including: For more information on these updates and others, please read the complete list below and follow the links for more detailed articles.
Securing AI and LLMs: A New Security Paradigm
Securing AI and LLMs: A New Security Paradigm When interacting with AI tools like ChatGPT, it's clear that there's a thought process behind their responses. But what happens when an attacker hijacks that process? In this clip from "Securing AI Part 2: What Makes Protecting AI a Unique Challenge?", A10 Networks' security leaders — Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar — discuss this new security paradigm.
Interview: Building human & AI synergy with Peter Ruta, Founder / CEO of Arcanna.ai [242]
On this episode of the Cybersecurity Defenders Podcast we speak with Peter Ruta, Founder / CEO, Arcanna.ai.
How to Use the AI Security Assistant for Deeper Security Expertise and Context
In this demo, we will look at three different use cases for the AI Security Assistant including general security knowledge, ticket context and data visualization.
Securing Shadow AI: 6 Principles from Security Leaders Who've Been There
Everyone's racing to use AI right now. But securing AI adoption while maintaining productivity—getting visibility into shadow AI, educating employees without blocking innovation, and building governance that actually works—is harder than it looks. We recently hosted a discussion between Anant Mahajan, Head of Product at Nightfall, and Yunique Demann, VP of Information Security at TPx, to dig into the practical realities of AI governance.
Safeguard: Using the double-edged sword of AI for good
Examine the function of AI in security tools, and how this double-edged sword can be used for good or ill in the cybersecurity sphere. Plus, see its integration into an identity fabric and get a glimpse into its responsible use – paired with the human element – in One Identity Safeguard.
How AI Contract Solutions Reduce Risk and Cost
With how businesses operate nowadays, managing contracts is a vital aspect of company operations. Minor errors can cost you a lot of money and land you in legal trouble. Artificial intelligence provides a unique approach to enhancing contract management, reducing risk exposure, and reducing compliance costs.
Optimizing the SOC: Leveraging AI and automation for modern threats
The Security Operations Center (SOC) is the nerve center of an organization's defenses, but its efficiency and effectiveness are often limited by the growing volume and complexity of threats. By leveraging AI-driven threat detection and automated incident response, security leaders can optimize their SOC to respond faster and smarter. For CISOs, this means not only protecting the organization from current threats but also future-proofing defenses against an increasingly sophisticated threat landscape.
Nx npm Malware Explained: AI Agent Hijacking
Nx npm malware (Aug 2025): attackers published malicious Nx packages that weaponized AI coding agents (Claude Code, Gemini CLI, Amazon Q) via a postinstall script to inventory sensitive files and exfiltrate sensitive data to public GitHub repos named “s1ngularity-repository-*.” We break down what happened, affected versions, and how to check + respond (rotate credentials, hunt IoCs, and more). Resources.
7 Cybersecurity Concerns Related to The MCP Protocol
Everyone’s trying to make AI agents do useful things. That’s why the Model Context Protocol (MCP) is gaining momentum with teams operationalizing LLMs across their infrastructure and tooling. Backed by teams like OpenAI and Google, MCP gives a consistent, standardized way to connect LLMs with the rest of your stack. In other words, the MCP Protocol makes connecting AI tools with real business data and workflows easier using structured access instead of janky UI hacks and glued-on custom code.
Meet Your AI Threat Analyst
Peter Brittliff, Senior Product Marketing Manager, will introduce your newest team member, the AI Threat Analyst, helping you cut through the noise and respond to real threats faster. Interested in finding out more about UpGuard?
Fireside Chat | Adapting Security Leadership for the Age of AI
Erika Carrara, VP & Chief Information Security & Infrastructure Officer at The Greenbrier Companies, shares how she’s adapting her security strategy to meet the demands of the AI era by modernising her tech stack, implementing AI governance, and embedding security into business culture. Interested in finding out more about UpGuard?
59 Generative AI Statistics to Know in 2025
Over the past few years, generative AI has moved from research labs into mainstream industries, reshaping how people interact with technology. Advances in deep learning, especially transformer models, allowed systems like ChatGPT and Stable Diffusion to generate human-like text and realistic images. These breakthroughs sparked widespread interest because they showed that AI could create content, making it useful in writing, design, and coding.
Hunting the Unknown: How AI-Powered Analytics Are Redefining Cyber Threat Detection
Cybersecurity is in an arms race — attackers are using AI to launch deepfake fraud, polymorphic malware, and insider-driven threats at scale. But AI is also rewriting the rules for defenders. In this webinar, Sheik Abideen (Regional Sales Director, MEA) and Zubair Mukhtar Chowgale (Manager, Sales Engineering, APMEA) reveal how Securonix Unified Defense SIEM powered by Agentic AI helps overwhelmed SOC teams transform into proactive threat hunters.
9 Best GRC Platforms for 2025
If there's one thing 2025 has made clear, it's that Governance, Risk, and Compliance (GRC) is no longer just a regulatory checkbox. It's the nervous system that connects security, operations, and strategy. Whether it's adapting to new laws, keeping an eye on third-party risks, or managing cyber threats before they become headlines, the right GRC platform can make all the difference. The list below focuses on the GRC solutions that are making the biggest impact right now.
Cloudflare Works with the Leading AI Companies to Strengthen Generative AI Security for Businesses
By integrating directly with the most popular generative AI tools, Cloudflare is helping businesses use AI with security.
Why Smart Companies Are Moving to Context-Based AI Security
AI consumes massive volumes of unstructured data — emails, documents, reports, and prompts. Hidden within them are sensitive details: customer PII, salary data, intellectual property, and confidential financial information. Without the right safeguards, one innocent prompt can lead to costly data leaks, compliance violations, and privacy risks. Traditional security tools like RBAC, DLPs, and prompt filters weren’t designed for AI. They fail because AI doesn’t see folders — it consumes raw context. That’s where Protecto’s Context-Based Access Control (CBAC) comes in.
Why Protecto Chose SingleStore as Part of GPTGuard's Architecture
Traditional RAG creates risk. In enterprise AI, accuracy and security aren’t optional. Most vector-only databases are built for speed, but they ignore enterprise realities like security and compliance. Without context, access controls, or accurate recall, they create compliance gaps that make AI unsafe for regulated industries. At Protecto, we built GPTGuard to change that — making enterprise AI safe by preventing data leaks, enforcing privacy, and keeping compliance intact.
GitGuardian MCP Sever - Example Use Cases and Installation
In this video, learn how to set up and use GitGuardian’s new MCP (Model Context Protocol) server to bring secrets security and Non-Human Identity (NHI) governance directly into your AI-powered IDE, like Cursor or Claude Desktop. GitGuardian Developer Advocate Dwayne McDaniel shows how to install the MCP server and run real use cases—like scanning for secrets, listing incidents, and creating honeytokens—all from inside your coding environment. Ready to embed security where code is written?
The Role of AI in Endpoint Security
One can’t discuss the modern state of endpoint security without mentioning a term that has quickly become ubiquitous with security solutions: artificial intelligence (AI). With a constantly evolving threat landscape and many security challenges plaguing organizations (e.g sprawling attack surfaces, monitoring and continuity gaps, alert overload, and limited resources), it’s clear that endpoint security must evolve as well, and the most-promising advancement is AI.
Why you Should NOT Rely on GPT-5 for Code...
Why you Should NOT Rely on GPT-5 for Code...
Prompt Wizard
Use the Prompt Wizard in Egnyte Copilot, Ask, and Knowledge Base to easily improve your AI prompts.
Malicious Screen Connect Campaign Abuses AI-Themed Lures for Xworm Delivery
During a recent Advanced Continual Threat Hunt (ACTH) investigation, the Trustwave SpiderLabs Threat Hunt team identified a deceptive campaign that abused fake AI-themed content to lure users into executing a malicious, pre-configured ScreenConnect installer.
Securing the Future: How to Safeguard MCP and Agentic AI with Teleport and AWS
As enterprises rapidly adopt agentic AI and large language models (LLMs) to automate critical business processes and access sensitive data, the traditional security playbook is no longer sufficient. The Model Context Protocol (MCP), a new connector for AI systems like Amazon Bedrock Agents, is revolutionizing enterprise integration—but it also introduces new risks. Join us for an in-depth session exploring how to secure MCP-based AI architectures using Teleport’s Infrastructure Identity Platform and AWS. We’ll cover.
Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security Incident
On August 26–27, 2025 (UTC), eight malicious Nx and Nx Powerpack releases were pushed to npm across two version lines and were live for ~5 hours 20 minutes before removal. The attack also impacts the Nx Console VS Code extension.
Cloudflare Launches New Zero Trust Tools for Secure AI Adoption at Scale
New innovations help security teams monitor AI usage, protect against Shadow AI and safeguard sensitive data, from a single centralised platform.
Securing the AI Revolution: Introducing Cloudflare MCP Server Portals
Large Language Models (LLMs) are rapidly evolving from impressive information retrieval tools into active, intelligent agents. The key to unlocking this transformation is the Model Context Protocol (MCP), an open-source standard that allows LLMs to securely connect to and interact with any application — from Slack to Canva, to your own internal databases. This is a massive leap forward.
Best Practices for Securing Generative AI with SASE
As Generative AI revolutionizes businesses everywhere, security and IT leaders find themselves in a tough spot. Executives are mandating speedy adoption of Generative AI tools to drive efficiency and stay abreast of competitors. Meanwhile, IT and Security teams must rapidly develop an AI Security Strategy, even before the organization really understands exactly how it plans to adopt and deploy Generative AI.
AI Data Privacy Breaches: Major Incidents & Analysis
What if a single developer pastes sensitive code into a chatbot and, in seconds, exposes your company’s most valuable secrets? That’s not a thought experiment. Incidents at Samsung, Amazon, and other enterprises show how generative AI can turn everyday work into an unintentional leak.
AI Agents Complicate GRC
The challenge isn’t just that AI agents are new. It’s that they blur traditional boundaries of data control, creating hidden sub-processors and uncontrolled data flows. For CISOs, compliance officers, and security leaders, this presents a fundamental governance problem: if you don’t know which AI services are touching your data, you cannot prove compliance.
Connecting Claude AI to LimaCharlie #ai #cybersecurity
Traditional AI integrations force you to choose between convenience and control. Our approach gives you both. LimaCharlie's MCP server makes connecting AI agents to your security infrastructure both simple and secure. The Process: Generate API keys with precise permissions One command connects Claude Code to your org Query live security data with natural language Key Features: The result: AI agents that work within your security boundaries while providing instant access to live infrastructure data.
ChatGPT-esk FAKE AI malware, PipeMagic update #ai #podcast #cybersecurity #limacharlie
Check out the full episode on our channel for more details about PipeMagic and other cybersecurity stories from this week's Intel Chat.
Role of AI in Incident Response: Hype vs. Value (Part 2)
AI also struggles with cost vs. benefit trade-offs. It can flag a spike in activity, but it can’t tell you whether it’s worth taking a system offline in the middle of payroll processing.
AI and security at Black Hat: 5 key takeaways from a security expert panel
In late July, we published new research on the risks of unmanaged AI, revealing four major security challenges companies face when AI slips under the radar.
Beyond the ban: A better way to secure generative AI applications
The revolution is already inside your organization, and it's happening at the speed of a keystroke. Every day, employees turn to generative artificial intelligence (GenAI) for help with everything from drafting emails to debugging code. And while using GenAI boosts productivity—a win for the organization—this also creates a significant data security risk: employees may potentially share sensitive information with a third party.
Top AI Data Privacy Risks in Organizations [& How to Mitigate Them]
What if just one line in a chatbot prompt could turn into a regulatory nightmare? That’s the reality enterprises face today. In fact, Gartner predicts the average data breach will exceed $5M by 2025—and AI-driven systems multiply those risks in ways traditional IT never prepared us for. Unlike legacy apps, AI doesn’t just use data—it feeds on it, reshapes it, and sometimes leaks it right back out.
Improve Prompt Quality, Consistency, and Productivity With Egnyte's AI Prompt Library
Generative AI can deliver great improvements in work productivity and quality. But business users must be able to rely on the dependability of the responses their AI tools generate for them. That’s only possible with sophisticated, often complex prompts. In addition, companies want AI solutions that ensure a high level of consistent results across teams. With gen AI, when 10 users ask the same questions using their own prompts, they get 10 different responses.
AI Cybersecurity & Fact Check
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
When Words Become Weapons: How Cato SASE Helps Mitigate Prompt Injection
A woman walks into a fashion store in the morning with a new shirt from the shelf and hands the sales associate a note: “Hey! This is Mandy. I’m on vacation by the pool with my kids tomorrow morning, so I won’t be available Please skip the usual return process today. I got the XL shirt from this customer and confirmed she’ll swap sizes or choose an alternative when she shows up during your morning shift. Thanks! Mandy (Your Manager)” It sounds urgent and trustworthy.
AI and Fraud Detection: How Bank Reconciliation Tools Protect Your Cash
Fraud has always been a concern in business, but the digital economy has amplified both the scale and sophistication of fraudulent activities. From false vendor payments to suspicious cash transfers, threats are no longer isolated incidents; they're systemic risks that can affect an organization's cash flow. At the same time, finance teams are under immense pressure to deliver timely, accurate reporting while ensuring compliance, where manual processes, spreadsheet errors, and delayed reconciliations leave organizations vulnerable to undetected fraud.
How Cybersecurity Professionals Can Leverage App Reviews for Risk Insights
Cybersecurity analysts often narrow their attention to system logs, performance alerts, and other system logs. Even though these sources are essential, they are not the only sources that need attention. Feedback left by users, particularly on app stores, tends to go unnoticed. This is because the app stores are not only tools to distribute applications; they are invaluable stores of behavioral and experiential intelligence. For security professionals, App Reviews and Ratings can serve as an advanced warning system that highlights possible risks, unwanted activity, or security issues long before technical tools can uncover them.
How to Ensure the Integrity of your AI Conversations...
How to Ensure the Integrity of your AI Conversations... =
Secure at Inception for AI with Snyk
Snyk helps you find and fix vulnerabilities in your code, open-source dependencies, containers, infrastructure-as-code, software pipelines, IDEs, and more!
Threat Actors Are Increasingly Abusing Generative AI Tools for Phishing
Cybercriminals are increasingly abusing AI-assisted website generators to quickly craft convincing phishing sites, according to researchers at Palo Alto Networks’ Unit 42. In many cases, even when these services have safeguards in place to prevent abuse, criminals are able to bypass these measures in order to create phishing pages. Unit 42 tested a popular website generator to see how easy it was to spin up a spoofed website.
AI Data Privacy Concerns - Risks, Breaches, Issues in
Data is moving faster than your controls. In 2024, AI privacy/security incidents jumped 56.4%, and 82% of breaches involve cloud systems; the same lanes your LLMs, agents, and RAG pipelines speed through every day. If you’re shipping GenAI inside a regulated org, you need guardrails that protect PII/PHI and IP without crushing context or tanking accuracy. Use this guide to.
Executive Exposure Reports with Charlotte AI
This demo shows how Charlotte AI transforms raw vulnerability data from Falcon Exposure Management into a CISO-ready report. By pulling enriched insights from Next-Gen SIEM—like ExPRT.AI scores and asset criticality—the workflow translates technical signals into business risk. The result: a clear, automated email that highlights key trends, impacted systems, and actionable remediation paths.
AI Data Privacy Concerns - Risks, Breaches, Issues in 2025
Data is moving faster than your controls. In 2024, AI privacy/security incidents jumped 56.4%, and 82% of breaches involve cloud systems; the same lanes your LLMs, agents, and RAG pipelines speed through every day. If you’re shipping GenAI inside a regulated org, you need guardrails that protect PII/PHI and IP without crushing context or tanking accuracy. Use this guide to.
Exabeam Research: AI Supercharges Insider Threats, Now Outpacing External Attacks
74% report AI is making insider threats more effective, and 53% expect insider threats to increase.
AI SOC Market Landscape 2025: Torq Leads With Hyperautomation
The SACR 2025 AI SOC Market Landscape Report just dropped, and Torq was named one of the “most feature-rich platforms” on the market. Not because we bolted a chatbot onto triage. But because we’ve built an AI SOC platform modern security teams actually need: an AI-native, execution-first infrastructure that operationalizes intelligence at scale. And that platform works.
Cloudflare Radar Reels Ep 5 - Powering AI with Global Scale & Real-Time Insights
AI breakthroughs demand speed, scale, and visibility. From image creation to real-time text analysis, next-gen AI depends on lightning-fast networks. Cloudflare’s presence in 330+ cities makes it happen. Cloudflare's Radar Display gives you a front-row view of the trends shaping AI’s future.
Introducing Cato's API Assistant: Your New Copilot for GraphQL
Imagine you just got a new car with a feature that automatically adjusts the air conditioning based on live weather forecasts. To activate it, you need to connect the car to an external weather service. You could take it to the garage, pay someone to configure it, and wait for the job to be done. Or, you could use a built-in assistant that asks you two simple questions and shows you how to set everything up in minutes. That’s the idea behind Cato’s new API Assistant.
Why AI Agents and MCP Servers Just Became a CISO's Most Urgent Priority
Over the last year, I’ve spent countless hours with CISOs, CTOs, and security architects talking about a new wave of technology that’s changing the game faster than anything we’ve seen before: Agentic AI and Model Context Protocol (MCP) servers. If you think AI is still in the “cool demos and pilot projects” stage, think again. We’re already seeing autonomous agents reasoning, remembering, and taking actions in live production environments.
How to lead with confidence in the AI era: a conversation with Nancy Wang, VP, Engineering
Artificial Intelligence (AI) is reshaping how we work and lead. At 1Password, we see AI as a powerful accelerator that helps our teams focus on the work that matters most. To explore what it means to lead in this new era, we sat down with Nancy Wang, VP/Head of Engineering. Nancy shares how AI shows up in her day-to-day, how she inspires her team to be curious, and why human skills like trust matter more than ever.
Can threat actors make ChatGPT malware? #ai #cybersecurity #gpt5
GPT-5 was jailbroken in under 24 hours using simple "storytelling" techniques that bypass safety guardrails. The key insight from our podcast? Individual AI requests appear legitimate but become dangerous when combined. Bad actors can request network code in one session, convincing emails in another, and credential collection forms in a third. Each task seems normal individually, but together they form a complete phishing toolkit.
Introducing the Arctic Wolf AI Security Assistant: Providing Value for Security Operations for Beta Customers
Arctic Wolf recently introduced its AI Security Assistant, a cutting-edge generative AI security assistant designed to enhance security operations within the Aurora Platform. This innovative tool is now in beta and promises to deliver deeper security expertise instantly to users.
Seemplicity Raises $50M to Democratize Exposure Management with AI
New funding led by Sienna Venture Capital to fuel AI innovation and international growth.
Acronis Report Finds AI-Powered Phishing and Social Engineering Fuelling Surge in Ransomware
Ransomware Remains top threat to Large and Midsized Businesses, Most Active Groups are Increasingly Leveraging AI for Low-effort, High-Reward Campaigns.
Responsible AI for improved security and better decision making
One Identity helps organizations strengthen cybersecurity, boost efficiency and control costs through the One Identity Fabric, a holistic approach to identity and access management (IAM). By unifying IAM tools, including identity governance and administration (IGA), access management (AM), privileged access management (PAM), and Active Directory management (AD Mgmt), it ensures optimal functionality and efficiency. This cohesive structure reduces identity sprawl and extends governance to the farthest endpoints of your IAM ecosystem.
The New Frontier: Why You Can't Secure AI Without Securing APIs
The release of a new KuppingerCole Leadership Compass is always a significant event for the cybersecurity industry, offering a vendor-neutral view of the market's current state. The 2025 edition, focusing on API Security and Management, is critical as it arrives at a pivotal moment for technology. It clearly presents a fact many organizations are just beginning to understand: the crucial connection between the rise of Artificial Intelligence and the necessity for robust API security.
Can ChatGPT Decode Exploit Data? You'll Be Surprised!
Can ChatGPT really make sense of exploit data? The answer is yes. In this clip, security expert Brian Johnson shows how ChatGPT decoded a hex-encoded payload and revealed the contents of a password file in seconds. Watch the full webinar to see how AI tools like ChatGPT are changing the penetration testing game.
AI Agents Vulnerabilities and Prompt #cybersecurity #aisecurity
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
How Protecto Helps Healthcare AI Agents Avoid HIPAA Violations
Despite being one of the most highly regulated industries, healthcare businesses are disproportionately impacted by breaches. IBM’s independent research centre, Ponemon Institute’s report on the cost of a data breach, healthcare continues to top the list for 12 consecutive years. AI agents are infiltrating every sector, healthcare is no exception.
What is an AI Bill of Materials (AI BOM)?
What’s happening under the hood of your AI systems? AI is now a crucial element of modern software applications, and if you don’t have visibility into its components, you’ll be left blind. Similar to a Software Bill of Materials (SBOM), an AI Bill of Materials, AI BOM, or AIBOM has become a crucial framework for documenting and securing this new and complex supply chain. This article is part of a series of articles on Shadow AI.
Veracode AI Code Secure: Real-Time Supply Chain Security for AI Development
Veracode AI Code Secure for Software Supply Chain is a real-time AI code purifier delivering curated insights on vulnerabilities, malware, and licensing to OEMs. By integrating directly into AI coding workflows, AI Code Secure closes critical security gaps left by outdated or incomplete LLM training data.
Executive Cloud Posture Reports with Charlotte AI: Demo Drill Down
Powered by AI, Falcon Cloud Security surfaces the most critical misconfigurations, and Charlotte AI transforms them into clear business impact to provide CISO ready reports. Subscribe and Stay Updated: ► Don't miss out on more exciting content! Subscribe to our channel for the latest updates, case studies, and more from the world of cybersecurity. Hit the bell icon to receive notifications whenever we post new videos.
Prioritize with Snyk's Open Source Vulnerability Experience
Prioritizing which vulnerabilities to fix across your application isn't always easy. Is it exploitable? Is it reachable? Will the update introduce breaking changes? Are there any other teams using this library that you should be aware of? What does the backlog look like if other changes need to be made? And that's just this week. Next week, it'll be the same thing all over again, with new discoveries, new version releases, and maybe even a new cybersecurity breach.
The AI-Native Era is Here: What this Gartner Innovation Insight Means for Your Software Security
A new era of software engineering is emerging, with artificial intelligence (AI) at the forefront. As the 2025 Gartner Innovation Insight for AI-Native Software Engineering report states: “AI-native software engineering will require software engineering leaders to mitigate new risks and tackle new challenges.” Here are the key insights and perspectives that will help you navigate the new normal.
Shift Left AI Security #coding #cybersecurity
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
Combining AI and APIs to close the risk visibility gap: A strategic framework
In this article API integrations have become the backbone of modern digital interactions, yet they also introduce vulnerabilities that can be exploited if left unchecked. The convergence of artificial intelligence (AI) and application programming interfaces (APIs) offers a promising solution to what many refer to as the “risk visibility gap.” This critical gap is defined as the difference between known API vulnerabilities and the unseen or unmonitored risks that arise from their use.
AI in Healthcare: Navigating Data Privacy and Medical Advice
AI in Healthcare: Navigating Data Privacy and Medical Advice In this video, A10 Networks security experts Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar explore the critical security challenges of deploying AI and Large Language Models (LLMs). They focus on protecting sensitive data—especially in areas such as healthcare—and offer key insights on how organizations can effectively secure these powerful technologies.
What is Generative AI Security?
From supporting customers through intelligent chatbots to auto-generating code, GenAI is revolutionizing enterprise operations. But as Spiderman coined, with great power comes great responsibility. This article will look at generative AI security, including trends and best practices to stay on top of.
Five Ways to Leverage AI Safely and Responsibly
Artificial Intelligence (AI) is super-charging customer service, amplifying personalized product recommendations, and accelerating workflows that enable humans to focus on higher-value tasks. However, AI cannot deliver desired productivity improvements to financial organizations without foundational security protection in place. In this blog, I recap several best practices that empower financial institutions to leverage AI safely and responsibly.
7 Proven Ways to Safeguard Personal Data in LLMs
Large Language Models (LLMs) are becoming integral to SaaS products for features like AI chatbots, support agents, and data analysis tools. With that comes a significant privacy risk: if not handled carefully, an LLM can ingest and remix sensitive personal data, potentially exposing private information in unexpected ways. Regulators have taken note – frameworks like GDPR, HIPAA, and PCI-DSS now expect AI systems to implement auditable, runtime controls to protect sensitive data.
Abusing supply chains: How poisoned models, data, and third-party libraries compromise AI systems
The AI ecosystem is rapidly changing, and with this growth comes unique challenges in securing the infrastructure and services that support it. In Part 1 of this series, we explored how attackers target the underlying resources that host and run AI applications, such as cloud infrastructure and storage. In this post, we'll look at threats that affect AI-specific resources in supply chains, which are the software and data artifacts that determine how an AI service operates.
Abusing AI interfaces: How prompt-level attacks exploit LLM applications
In Parts 1 and 2 of this series, we looked at how attackers get access to and take advantage of the infrastructure and supply chains that shape generative AI applications. In this post, we'll discuss AI interfaces, which we define as the entry points and logic that determine how a user interacts with an AI application. These elements can include chat interfaces, such as AI assistants, and API endpoints for supporting services.
Abusing AI infrastructure: How mismanaged credentials and resources expose LLM applications
The swift adoption of generative AI (GenAI) by the software industry has introduced a new area of focus for security engineers: threats targeting the various components of their AI applications. Understanding how these areas are vulnerable to attacks will become increasingly significant as the space evolves. In this series, we'll look at common threats that target the following components of AI applications.
Live at Black Hat: What's AI Really Capable Of?
"This year at Black Hat, the topic of AI was everywhere — from hallway chats to the expo floor. Adam and Cristian took a break from the action for a rare in-person conversation about how adversaries are weaponizing AI, how defenders are using agentic AI, and what we should all be thinking about as AI evolves as an offensive and defensive tool.
AI Chat Memory Manipulation
AI chatbots are getting smarter – but what happens when you control what they remember? In this video, I’ll show you step-by-step how AI memory can be manipulated, how that changes the way it responds, and the hidden risks this creates for both users and developers.
Comprehensive MCP Security Checklist: Protecting Your AI-Powered Infrastructure
With innovation comes risk. As organizations race to build AI-first infrastructure, security is struggling to keep pace. Multi-Agentic Systems – those built on Large Language Models (LLMs) and Multi-Component Protocols (MCP) - bring immense potential, but also novel vulnerabilities that traditional tools weren’t designed to handle.
Fixing Outdated Code from Claude Opus 4.1 & GitHub Copilot
Fixing Outdated Code from Claude Opus 4.1 & GitHub Copilot.
The Rules Have Changed AI vs AI #aisecurity #ai
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
Hyper-AUTO-Mation: Why Carvana's CISO Bet on Agentic AI for 5x SOC Efficiency
CISOs everywhere are feeling the AI fatigue. Every vendor at Black Hat 2025 was hyping ‘AI agents for SecOps,’ so there’s rightfully a lot of skepticism about deploying AI in production, especially in enterprise environments. But the old way of running a SOC just isn’t working anymore. After all the time and money spent on traditional playbooks, we’re still wrestling with the same challenges: alert fatigue, burnout, tool sprawl, and inability to scale.
The Two AI Licenses You Need to Know
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
Secure Cloud Access - CyberArk MCP Server
Take control of cloud access for AI-driven workflows without slowing down your team. CyberArk SCA MCP Server is the latest innovation in identity security, purpose-built for the age of agentic AI. Now available in the AWS Marketplace, CyberArk SCA MCP Server empowers developers and AI agents to securely request elevated access directly from their IDE while enforcing Zero Standing Privileges across multi-cloud environments.
MCP security is non-negotiable for AI-driven organizations
Model Context Protocol (MCP) is gaining traction because it enables LLMs to interact with live systems and enhance context by retrieving and managing relevant real-time information. LLMs can’t query Salesforce, trigger an Okta password reset, or fetch context from your SIEM, for example. MCP bridges that gap by connecting AI models to real-world APIs, powering AI applications like retrieval-augmented generation and multi-step agent workflows. They’re fast to deploy.
Beyond the Prompt: Securing the "Brain" of Your AI Agents
Imagine an autonomous AI agent tasked with a simple job: generating a weekly sales report. It does this reliably every Monday. But one week, it doesn't just create the report. It also queries the customer database, exports every single record, and sends the file to an unknown external server. Your firewalls saw nothing wrong. Your API gateway logged a series of seemingly valid calls. So, what happened? The agent wasn't hacked. Its mind was changed.
IBM 2025 Cost of a Data Breach Report: Lessons for API and AI Security
IBM’s 2025 Cost of a Data Breach Report offers one of the clearest and most comprehensive views yet of how AI adoption is shaping the security landscape. While breach numbers are relatively low – only 13% of organizations reported breaches involving AI models or applications – the report reveals a troubling pattern: APIs and integrations are often the real entry point, and they’re frequently under-secured. At Wallarm, we’ve been banging this drum for a while.
Claude Opus 4.1 and Github Copilot Causes a Coding Error
Claude Opus 4.1 and Github Copilot Causes a Coding Error.
When AI Agents Go Awry
When your AI agents go awry, rewind those changes easily with Agent Rewind from Rubrik. As AI agents gain autonomy and optimize for outcomes, unintended errors can lead to business downtime. Agent Rewind will enable organizations to undo mistakes made by agentic AI by providing visibility into agents' actions and enabling enterprises to rewind those changes to applications and data. We’ve integrated Predibase's advanced AI infrastructure with Rubrik's recovery capabilities to enable enterprises to embrace agentic AI confidently.
Can AI hackers access the smart devices in my home? #ai #cybersecurity
New research shows how attackers could hijack Google's Gemini AI through a simple calendar invite to control smart lights, shutters, and even boilers. The key insight from our latest podcast is that it's not about the AI vulnerability, it's about network segmentation. The real lesson? Don't give AI systems direct access to your physical devices. The simple fix is to segment your IoT devices on separate networks.
Adapting to the Changing AI Threat Landscape
Adapting to the Changing AI Threat Landscape In this video, A10 Networks' security leaders, Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar, discuss the evolving security risks associated with AI and Large Language Model (LLM) adoption, as well as what organizations must do to stay protected. Diptanshu Purwar outlines key shifts in the approach to AI security.
Complete Guide for SaaS PMs to Develop AI Features Without Leaking Customer PII
Enterprises are making bold, strategic changes in their tech stack to ramp it up by incorporating AI. With positive results of AI showing, investments are rapidly flowing in – but all this does not come without consequences. Today, privacy has become a key concern around safe AI use, especially without strong guardrails. Managing innovation and compliance risks become a challenge for SaaS product managers unless they know the right way of balancing both.
AI Agents in Cybersecurity: Revolutionizing AppSec
We're witnessing a paradigm shift from reactive security tools to proactive, intelligent defenders. AI agents represent the next evolution beyond traditional security systems, fundamentally changing how we approach cybersecurity.
The Role of AI Custom Solutions in Modern Financial Services
AI has been hard at work redefining the limits of what can be done in almost every industry, but in finance, the stakes and the payoff are especially high. Algorithms are used to make decisions that used to be made by experienced analysts, such as in fraud detection and portfolio optimization. However, the distinction between merely applying AI and actually taking advantage of it is sometimes as simple as a single factor - customization.
Your AI Could Hack You #cybersecuritytips
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
Building builders in the age of AI automation
As AI and automation reshape how work gets done, security and IT teams are facing a critical shift. But here’s the truth: AI won’t eliminate roles - it will transform them. Today, junior analysts, IT admins, and senior engineers alike are being freed from toil and empowered to build smarter, faster systems.
Introducing the Riscosity AI Firewall
AI is moving through enterprises faster than security teams can track. Over the past year, AI privacy incidents have risen 56%, and most of those stem from tools security never knew were in use. 84% of SaaS tools are purchased outside IT, and 62% of CISOs say fewer than a quarter of AI tools in use have been approved through procurement. That means sensitive, regulated, or confidential data is often flowing to AI services invisibly, sometimes across borders, without governance or guardrails.
Securing LLM Superpowers: Navigating the Wild West of MCP
The Model Context Protocol (MCP) is a standardized framework that enables large language models (LLMs) to interact with external tools, APIs, and data sources. While MCP offers powerful integration capabilities across software development, data analysis, automation, and security operations, it also introduces serious security risks. This post provides a technical overview of how MCP works, its architecture, and real-world use cases.
Automate Repetitive Work With No-Code AI Agent Builder
Egnyte AI agents are smart, task-specific AI assistants built to automate repetitive, time-consuming work, so that your team can stay focused on high-impact and strategic tasks. From reviewing documents to researching topics or translating content, these agents act like always-on digital coworkers who execute task-specific instructions while securely leveraging information contained in your private documents and on the web.
The Unopinionated AI Advantage
Most AI security solutions lock you into their way of doing things. The result? You can't differentiate, you can't innovate, and you can't build the solutions your organization actually needs. LimaCharlie's approach to AI is fundamentally different. Instead of forcing you into rigid workflows, we give you the building blocks to create exactly what your environment demands. Why this matters: The result: Security teams that build custom AI solutions perfectly tailored to their environment, their workflows, and their unique challenges.
Agent Rewind: For When AI Agents Go Awry
Agent Rewind, powered by Predibase AI infrastructure, will enable organizations to undo mistakes made by agentic AI by providing visibility into agents' actions and enabling enterprises to rewind those changes to applications and data.
The New Guy (a.k.a. Agentic AI)
AI agents have already caused unintended record updates, broken workflows, and pushed flawed logic into production systems. These misfires often go unnoticed until forecasts stall, pipelines break, or sensitive data is affected. These aren’t hallucinations. They’re executed actions with real consequences. At Rubrik, we’ve spent years helping enterprises recover from ransomware, insider threats, and operational errors. The pattern is always the same: Damage happens fast. The root cause is murky. And visibility is fragmented.
Agentic Container Security with Snyk MCP Server
Did developers steal the spotlight of agentic workflows with the wave of AI coding assistants sweeping the media, startups, and tech? What about DevOps workflows, container security, and operating system vulnerability scanning? One of the most time consuming tasks of application security engineers and those responsible for production artifacts is tracking Common Vulnerabilities and Exposures (CVEs) and in what way they impact a bundled application.
Claude Opus 4.1 & Copilot: The ULTIMATE Coding Combo?
Claude Opus 4.1 & Copilot: The ULTIMATE Coding Combo?
Can You Really Automate Pen Testing?
AI isn’t ready for security ops. Especially not pen testing.#cybersecurity.
Mend & Cursor: Revolutionizing AI-Generated Code Security | Mend.io
Discover how AI is transforming software development with tools like Cursor IDE and Mend.io. In this video, Alex explains how Cursor’s AI First Code Editor simplifies complex tasks, enabling both experienced and new developers to build sophisticated applications faster than ever. Mend.io takes this transformation a step further by seamlessly integrating SAST and SCA directly into the Cursor IDE. This powerful combination ensures that AI-generated code is secure from the moment it’s written, with Mend.io’s Igenic performing rapid scans without slowing down the development process.
This analysis will self-destruct...
For as much catastrophe over AI’s potential for autonomous attacks, for right now the reality is more nuanced.
#AI Voice Scam: How Scammers Mimic CEOs to Steal Your Money #aisecurity
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
Can Claude Opus 4.1 Improve My Code Security?
Anthropic just dropped Claude Opus 4.1, a major upgrade over Opus 4 for agentic tasks, real-world coding, and reasoning. In this episode, we put it through the same secure Node.js app challenge we’ve used for previous models, so you can see exactly how it stacks up!
LLMs as Compression Systems: Security Implications
LLMs as Compression Systems: Security Implications In this video, A10 Networks' security leaders Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar discuss the evolving security landscape in the age of AI and Large Language Models (LLMs). Madhav Aggarwal highlights a crucial aspect to understand about LLMs and their security implications.
CIO POV: What am I actually supposed to do with agentic AI?
For every enterprise CISO in the world right now, the burning question isn’t about cloud, TPRM, or internal threats. It’s about how to securely and responsibly adopt AI—specifically, agentic AI, the buzziest of today’s AI buzzwords. There’s no shortage of stats on skyrocketing adoption trends. Consider EY’s recent Technology Pulse Poll, which found that half of tech leaders have at least begun deploying agentic AI within their organizations.
CrowdStrike's Approach to Better Machine Learning Evaluation Using Strategic Data Splitting
Since day one, CrowdStrike's mission has been to stop breaches. Our pioneering AI-native approach quickly set our platform apart from the landscape of legacy cybersecurity vendors that were heavily reliant on reactive, signature-based approaches for threat detection and response. Our use of patented models across the CrowdStrike Falcon sensor and in the cloud enables us to quickly and proactively detect threats — even unknown or zero-day threats.
Unlocking LLM Privacy: Strategic Approaches for 2025
Large Language Models (LLMs) now power chatbots, copilots, and data agents across the enterprise. With that power comes risk: LLMs ingest and remix sensitive inputs-from customer conversations and internal docs to PHI and card data-creating new exposure paths and compliance headaches. In 2025, language model privacy is no longer a niche concern; it’s a board-level priority shaped by GDPR, HIPAA, PCI-DSS, and the EU AI Act.
Intel Chat: Can threat actors make malware with ChatGPT? #podcast #limacharlie #ai #chatgpt
Check out the full episode on our channel for more info on this week's Intel Chat! ABOUT LIMACHARLIE LimaCharlie is a SecOps Cloud Platform that provides on-demand cybersecurity infrastructure. API-first architecture with real-time EDR, multi-tenant support, and pay-per-use pricing. CYBERSECURITY DEFENDERS PODCAST Weekly episodes covering threat intelligence, incident response, and security operations.
Intel Chat: Can AI hackers access smart devices? #podcast #limacharlie #intelchat #ai #chatgpt
Check out the full episode on our channel for more info on this week's Intel Chat!
Live Demo: Claude Code autonomously investigates Cobalt Strike infection via LimaCharlie MCP
This is a technical demonstration of Claude Code performing an autonomous investigation using LimaCharlie's MCP server integration. Eric Capuano, founder of Digital Defense Institute, walks through a live investigation where Claude Code automatically detects and analyzes a Cobalt Strike compromise across two Windows endpoints. The AI agent follows standard investigation procedures without pre-scripting.
MCP Server Management Options in VS Code
MCP Server Management Options in VS Code Check out the full video.
Implementing Robust Security Protocols for Agentic AI Autonomy
In this new wave of machine-driven decision-making, the paradigm shift in artificial intelligence towards increasing autonomy is becoming increasingly significant. Autonomous or agentic AI systems, those capable of acting on their own and acclimatising themselves to new environments, are redefining the space by taking actions towards a goal without direct human intervention. Although this is exciting in terms of what it will enable for AI driven processes and creativity, it also introduces a more advanced set of security risks to contend with when dealing with autonomous based AI systems.
Exabeam Nova Automates Investigations | AI-Generated Threat Summaries Explained
Can your SIEM generate a threat summary before the analyst even starts investigating? Meet Exabeam Nova — the industry’s first multi-agent AI platform that delivers proactive, clear, and actionable summaries to speed up investigations and reduce analyst burnout. AI-generated investigation summaries Boost SOC productivity and morale Real Intelligence. Real Security. Real Fast. Subscribe for more product demos and cybersecurity insights!
How Exabeam Builds Dynamic Threat Timelines with AI | Say Goodbye to Alert Fatigue
Over 100 vendors claim to have a SIEM. Most can't deliver. See how Exabeam Threat Center uses AI and behavioral analytics to automatically build dynamic threat timelines to reduce alert fatigue, false positives, and triage time. Prioritize threats by risk score Automate correlation across users, assets, and events Real Intelligence. Real Security. Real Fast. Subscribe for more product demos and cybersecurity insights!
Security-Conscious AI Software Development with Windsurf x Aikido
Modern development teams do far more than simply write code. Now, with the help of AI, software development organizations are orchestrating its creation, maintenance, and delivery at a bigger scale than ever before. Tools like Windsurf and Devin from Cognition help developers across the Software Development Lifecycle (SDLC) by augmenting people with multi-step reasoning agents that can write code.
The challenges of securing AI adoption with Jeremy Snyder
We explored the challenges of securing AI adoption with Jeremy Snyder, Founder and CEO FireTail.ai!
Designing an Agentic AI Copilot: 8 Principles from Building Nyx
Everyone’s racing to build copilots right now. But making an agentic AI that feels like a trusted teammate—one that understands context, acts safely, and simplifies complex workflows—is harder than it looks. While building Nyx, our agentic AI copilot for security teams, our team spent a lot of time thinking about how to make her an effective team member - skilled and trustworthy.
Smarter docs, smarter security: How we're using AI to rethink PAM support
Let’s be honest — nobody wakes up excited to read documentation. You’ve been there. You’re configuring a tricky workflow, testing an API, troubleshooting a weird corner case. And instead of finding the answer fast, you’re 12 tabs deep, elbows in a PDF appendix, hoping for a miracle. That’s not how it should be.
Introducing Apono's AI-Powered Access Assistant: Smarter Access Starts with a Conversation
Today we’re excited to announce the launch of Apono’s new AI-powered Access Assistant, now live across the Apono Cloud Access Management Platform. As AI continues to transform engineering and security workflows, this assistant brings natural language interaction to access management. Helping teams move faster while staying secure. By eliminating the guesswork from access requests, Apono’s Access Assistant gives engineers a powerful new way to get exactly the access they need.
Creating an MCP Server in Tines
MCP servers in Tines allow you to create custom AI tools and connectors using the new MCP server action template. Integrating Tines and MCP streamlines incident response and workflow automation, enhancing efficiency and security operations by enabling seamless communication and data integration between systems. New to Tines? Sign up for our always-free Community Edition and start building right away.
Meeting the AI Mandates with Confidence: Why Federal Teams Trust Snyk
Federal agencies are moving fast to unlock AI's potential—from improving citizen services to driving mission outcomes. But with all that innovation comes a new wave of complexity and risk. Security, trust, and transparency can’t be afterthoughts. They need to be part of the build and AI adoption process from day one. AI-driven development is exponentially increasing both code speed and code insecurity, as AI generates code with up to 40% more vulnerabilities than human developers.
The security principles guiding 1Password's approach to AI
AI is transforming the way we work. There are immense opportunities for automation, intelligent decision-making, and productivity gains. This transformation is a tremendous opportunity, but it also comes with tremendous responsibility, especially when security is involved. For example, AI systems can now act on behalf of users, access sensitive data across tools, and make decisions without oversight, all of which have security implications.
The Role of AI in Cybersecurity
Artificial intelligence (AI) is not a new concept or technology in the world of cybersecurity. It’s been iterated and utilized by security professionals for decades. But as both cybersecurity technology and cyber threats continue to advance, AI is being adopted by organizations at a rapid pace, all of whom seek to harness AI’s power to automate, advance, and empower their security.
Why Prompt Scanning & Filtering Fails to Detect AI Risks [& What to do Instead]
Enterprises deploying AI agents and LLMs often look to prompt scanning as their first line of defense against privacy and security breaches. The idea is simple: analyze the text of the user’s prompt before it reaches the model, detect it for sensitive keywords or patterns, and block the sensitive words that may trigger a security or compliance issue. Enterprises thought this was a safe around, till they walked into unexpected issues.
SpyCloud Enhances Investigations Solution with AI-Powered Insights - Revolutionizing Insider Threat and Cybercrime Analysis
SpyCloud Investigations, now with AI Insights, empowers security teams to act decisively with finished intelligence built from billions of breach, malware, and phishing records.
Seemplicity Taps Proven Leader as CMO to Fuel Next-Phase of Global Growth
Cybersecurity Marketing Veteran Tony Thompson joins Seemplicity to accelerate go-to-market for AI-powered remediation and vulnerability management.
The life and death of an AI agent: Identity security lessons from the human experience
AI agents are on the rise. They can spin up, act independently, use tools, and make decisions—often without real-time human oversight. They promise incredible productivity but also introduce new risks and challenges that can’t be ignored. As these agents become more autonomous and integrated into enterprise operations, they blur the lines between human and machine responsibilities. This raises critical questions: How do we ensure they act ethically?
Invitation Is All You Need: Invoking Gemini for Workspace Agents with a Simple Google Calendar Invite
Over the last two years, various systems and applications have been integrated with generative artificial intelligence (gen AI) capabilities, turning regular applications into gen-AI powered applications. In addition, retrieval augmented generation (RAG)-which is the process of connecting gen-AI and large language models (LLMs) to external knowledge sources-and other agents have been incorporated into such systems, making them more effective, accurate, and updated.
AWS Security Live: AI, Burnout, and the Future of AppSec
In this special edition of AWS Security Live from the NYC Summit, Jit’s CISO Jacob Berry joined AWS to explore how agentic AI is transforming application security—from reducing developer burnout to helping security teams focus on what really matters.
CrowdStrike Signal: Detect the Undetectable
Modern adversaries hide in plain sight by blending malicious activity with normal system behavior, making it difficult for traditional detection tools to identify threats early. CrowdStrike Signal uses self-learning AI to turn scattered signals into high-confidence Automated Leads that help analysts stop breaches before they escalate.
Designing the Future of Agentic AI: Cato Engineering Details a New Practical, Secure, and Scalable MCP Server Framework
Some of you may remember the early days of security, when setting up a firewall or antivirus felt like enough. It was simple and gave us a sense of control. But over time, we learned that security is a moving target. What once felt sufficient quickly became just the starting point. In today’s agentic AI era, many treat their Model Context Protocol (MCP) setups the same way. If it’s running and returning results, it feels good enough. But the AI landscape is evolving rapidly.
From Ideas to Impact: How the Bay Area Is Shaping the Future of Secure AI
Generative AI is reshaping how software is made, secured, and scaled. At Snyk’s Lighthouse event in Silicon Valley, leaders from engineering, security, and platform teams gathered to explore one big question: How do we build AI-powered systems that move fast, without breaking trust? For many, that future is already here — 60% of organizations at the Summit reported building agentic apps internally. The answers weren’t just technical. They were cultural. Organizational. Strategic.
CrowdStrike Launches New AI Security Services to Strengthen AI Security and SOC Readiness
AI is transforming business processes and the threat landscape. CrowdStrike is expanding our AI Security Services portfolio to help organizations meet the dual challenges of securing their AI systems and effectively integrating AI into security operations.
AI Is Not the Destination-It's the Catalyst: Inside Bitsight's Vision for Third-Party Risk Management
A new era in third-party cyber risk and exposure management is underway, one that operates in real time, informed by intelligence and scaled by automation. This shift wasn’t feasible even a few years ago. The scale, speed, and complexity of today’s threat landscape—spanning thousands of vendors, assets, and attack vectors—demand more than human capacity can manage. Artificial Intelligence is the catalyst making this new model possible.
From Clipboard to Cloud: Upgrading Dental Reception Security with AI
Dental reception areas have come a long way. Not too long ago, check-ins involved clipboards, paper forms, and the occasional misplaced file. It was all a bit clunky. While it got the job done, it wasn't exactly secure, and it definitely wasn't efficient. Now, clinics are realising that the front desk is more than just a place to schedule appointments. It's also where patient data starts its journey, which means it has to be secure from the very beginning. That's where artificial intelligence comes in, offering smarter, safer ways to handle sensitive information.
Teleport announces general availability of Secure Model Context Protocol (MCP)
With nearly half of enterprises deploying AI, innovation accelerates security risks, but Teleport's new solution ensures only trusted AI get access to tools, databases, and apps.
Agentic cloud security powered by Sysdig Sage
Introducing Agentic Cloud Security with Sysdig Sage. Cloud security doesn’t need more alerts — it needs better judgment. At Sysdig, we believe defenders shouldn’t have to choose between speed and certainty. They need a different kind of intelligence: AI that thinks AI that reasons AI that acts With the Sysdig Sage, the age of agentic cloud security has arrived. Sysdig Sage brings a security “brain” to your cloud—always on, always learning, always working.
Agentic cloud security powered by Sysdig Sage - Demo
Stay ahead of threats with Sysdig's agentic cloud security.
Securing the AI Agent Era: One Control Panel Across SaaS, Endpoint, and Cloud
The companies winning with AI aren’t just deploying agents faster - they’re operationalizing them responsibly. They realize AI agents are creating a new, dynamic attack surface that traditional tools were never designed to handle. These agents span the entire enterprise ecosystem. Microsoft 365 Copilot, Copilot Studio, and Salesforce Agentforce are SaaS‑managed agents. GitHub Copilot, Cursor, and Claude desktop run directly on user devices as device‑based agents.
Ep 4: Stop writing dumb AI security policies: use threat models, not fear
AI policy is not a yes/no question. Security isn’t here to be the morality police. Our job is to enable the business safely. Join security experts Adam White and David Girvin as they chat about the importance of using threat models, a simple framework, and five policy areas you are probably ignoring.
How AI Makes APIs Even More Dangerous #apirisks #aisecurity #airisks #ai
AI and agent-based technologies are accelerating the use—and the risk—of APIs. Experts from Wallarm and Oracle explain how every new AI app or agent can instantly connect to dozens of APIs, multiplying your attack surface. Learn why the combination of AI and APIs is creating new security challenges you can't ignore.
CrowdStrike Announces Integration with ChatGPT Enterprise Compliance API
CrowdStrike is announcing a native integration between CrowdStrike Falcon Shield SaaS security and the OpenAI ChatGPT Enterprise Compliance API, adding visibility and security posture capabilities for mutual customers’ ChatGPT Enterprise environments. This integration helps security teams inventory and monitor AI agents across their organization — including who created them, what they access, and how they’re shared — so teams can consistently apply existing security controls.
How CrowdStrike Secures AI Agents Across SaaS Environments
AI agents are being rapidly embedded into the SaaS ecosystem to streamline operations, trigger complex workflows, and interact with sensitive data and systems. From automating calendar updates to executing code and accessing cloud data stores, they are becoming integral to business processes. But with this integration comes risk. AI agents are often quickly deployed across SaaS environments by employees, without centralized tools to govern them.
Humans Still Matter: Why AI Doesn't Replace Analysts
Every demo promises that the AI is smarter, faster, and more reliable than humans.
Apono's AIPowered Access Assistant - Faster, Easier Access Requests Ask ChatGPT
Here’s a streamlined version: Introducing Apono Access Assistant, our AI companion that speeds up access requests without sacrificing security. It handles three scenarios: mapping tasks to the right permissions, showing you what resources you can reach, and diagnosing permission errors. In this demo you’ll see it resolve an S3 access issue in seconds by creating a temporary read‑only role and revoking it when you’re done.
Announcing Secure Data Exchange for Agentic AI
PwC recently did an AI agent survey where they found the following: This all sounds great, right? For many reasons it is, but agentic AI creates a challenge of visibility for organizations into how AI agents are communicating with each other and external third-party vendors. Imagine a multitude of AI agents autonomously exchanging data across a complex mesh of third-party vendors and applications.
Charlotte AI in Action: Agentic AI for Modern Cyber Defense
In today’s high-stakes threat landscape, defenders are expected to respond faster, think smarter, and make critical decisions in real time—yet many are buried in manual processes and alert fatigue.
Why Vibe Coding Is the New Silent Threat to User Privacy
Vibe coding is a new development paradigm where large language models (LLMs) generate code from natural language prompts. The developer’s role shifts from writing every line to guiding the model toward a desired output—iterating through prompts, feedback, and high-level direction.
New: Building MCP servers on Tines
At Tines, our mission is to power the world’s most important workflows. That extends to how you implement and control AI across your business. We're excited to introduce the ability to build Model Context Protocol (MCP) servers directly on your Tines storyboard.
Beyond LLMs: The Strategic Need for MCP Security
Large language models (LLMs) are transforming enterprise operations, but their growing use introduces a critical security challenge: securing how they access sensitive data and integrate with existing tools. This is where Model Context Protocol (MCP) servers become a vital, yet often overlooked, part of AI security. These servers act as the crucial link, enabling LLMs to securely connect with diverse data sources and tools, significantly expanding attack surfaces that demand our immediate attention.
Is ChatGPT Safe?
Is ChatGPT safe? It can be, but only if you use it the right way. Watch this short video to learn the risks of ChatGPT and how to protect your data.
Introducing Netskope One Copilot for Private Access
Any organization that’s undergone a security transformation knows the promise of zero trust network access (ZTNA): secure, least-privilege access to private applications, anywhere, on any device. But turning that promise into operational reality is often far from simple. Between fragmented tools, complex configurations, and sprawling environments, implementing ZTNA can quickly become a manual, time-consuming, and error-prone process.
Why Human Oversight is Crucial for AI
Why Human Oversight is Crucial for AI A10 Networks' security leaders, Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar, delve into critical aspects of AI security, particularly concerning sensitive data and the role of human oversight.
AI Compliance in 2025: Is Your Business Ready?
AI is no longer a futuristic concept – It has now become the core of how modern businesses are operating. Starting from chatbots to analytics, generative content to automation, AI is across every sector of business. As AI usage increases, the risks and regulation are also increasing.
The Identity Revolution: How AI Agents Are Reshaping Security Architecture
Read key insights from GitGuardian SecDays Virtual 2025 on securing the future of autonomous AI agents.
Secure at Inception: Introducing New Tools for Securing AI-Native Development
At Snyk, we believe you should never have to choose between speed and security. As the age of AI transforms software development, our goal is to extend our developer-first security approach to this new era, providing the essential tools your teams need to build with confidence. Today at Black Hat, we are delivering on that vision with three tangible innovations that offer a comprehensive solution to secure the entire code lifecycle with AI.
How to Add MCP Servers to VS Code (with GitHub Copilot)
In this tutorial, I’ll walk you through the step-by-step process of adding MCP servers to Visual Studio Code using GitHub Copilot. Whether you’re setting up your first MCP server or integrating multiple ones for AI-assisted workflows, this guide will help you get started quickly.
AI vs. AI: The Race Between Adversarial and Defensive Intelligence
The AI battleground is here. Adversaries are weaponizing AI to launch attacks with unprecedented scale, speed, and effectiveness. In response, defenders are turning to AI as an analyst force-multiplier, using it to offload repetitive tasks, accelerate decision-making, and scale expertise across the SOC.
CrowdStrike 2025 Threat Hunting Report: AI Becomes a Weapon and a Target
Today’s enterprising adversaries are weaponizing AI to scale operations, accelerate attacks, and target the autonomous AI agents quickly transforming modern businesses. The CrowdStrike 2025 Threat Hunting Report details this new chapter in the threat landscape. This year’s report, based on frontline intelligence from CrowdStrike’s elite threat hunters and intelligence analysts, examines how threat actors are using AI to do more with less.
Preventing Data Poisoning in Training Pipelines Without Killing Innovation
Data poisoning occurs when cyber criminals intentionally compromise the integrity of a data set used for training machine learning models. They corrupt the information to manipulate the model’s outcome in the form of incorrect predictions by introducing vulnerabilities that reduce the effectiveness, add security risks, and fundamentally shape its decision making capabilities.
Top 7 Tools to Manage Cybersecurity Risks from AI-Generated Code and Software
Managing AIcoded ("vibe code") software vulnerabilities doesn't require a full rebuild of your security program. By combining runtime visibility with targeted guardrails, teams can close blind spots in days instead of months. Spektion makes that possible as the leading runtimefirst solution for securing and managing vulnerabilities in from AIgenerated code in live apps, delivering live behavioral insight the moment code executes.
When "Private" Isn't: The Security Risks of GPT Chats Leaking to Search Engines
In late July 2025, users discovered that ChatGPT chats, initially shared via link, were appearing in search engine results on platforms such as Google, Bing, and DuckDuckGo. These shared conversations included personal content relating to mental health, career concerns, legal issues, and more, without any indication of a data breach. Instead, the exposure resulted from a now-removed feature that enabled discoverability via search indexing.
Autonomous SOC, AI for cybersecurity, and Security Automation with Filip Stojkovski
Filip Stojkovski from Snyk joins us to discuss autonomous SOC, AI for cybersecurity, and security automation.
July Release Rollup: Copilot - Improved File Search and Selection, Project Center, and more
We’re excited to share new updates and enhancements for July, including: For more information on these updates and others, please read the complete list below and follow the links for more detailed articles.
Webinar Replay - Navigating AI Governance In Retail: Lessons from Real-World Scenarios
As AI continues to innovate the retail industry in areas such as supply chain management, personalizing customer experience and data insights, businesses must navigate the complex challenges of data privacy, secure and compliant AI deployment and ethical use. During this briefing, Kroll experts highlighted the key steps for building a resilient AI Governance program using real-life use cases from the retail industry that will help not only to understand, implement and monitor responsible AI but clear the way for innovation to generate successful return on investment and build consumer trust.
How AI Powers Security Without You Noticing
Coro’s AI works in milliseconds — securing your business without you even seeing it.#cybersecurity.
Can ChatGPT Help with a Penetration Test? Real-World Hacking Test vs PentestGPT
Can ChatGPT really assist in a penetration test? In this short clip, security expert Brian Johnson puts it to the test against an Active Directory environment… and let’s just say, the results are less than helpful. Find out why tools like PentestGPT are gaining momentum in ethical hacking in this webinar, "Hack the Hackers: Exploring ChatGPT and PentestGPT in Penetration Testing": netwrix.com/go/exploring-chatgpt-and-pentestgpt-yt.