Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How Falcon ASPM Secures GenAI Applications and Lessons from Dogfooding

The widespread availability of large language models (LLMs) has driven the rapid development of generative and agentic AI applications for business use cases. These systems can reason, plan, and act autonomously, creating security risks that traditional security tools weren’t built to handle. Their popularity has widened the attack surface, both for organizations using external LLMs and those building their own GenAI applications.

Beyond Agent-Washing: How Torq Delivers True Agentic Automation for Security

Eldad Livni is the Co-Founder and Chief Innovation Officer at Torq. Prior to founding Torq, Eldad co-founded and served as CPO of Luminate Security, a pioneer in Zero Trust/SASE. Following Luminate’s acquisition by Symantec, he went on to act as CPO of Symantec’s Zero Trust/Secure Access Cloud offering. The security industry has a new buzzword problem.

Understanding the OWASP AI Maturity Assessment

Today, almost all organizations use AI in some way. But while it creates invaluable opportunities for innovation and efficiency, it also carries serious risks. Mitigating these risks and ensuring responsible AI adoption relies on mature AI models, guided by governance frameworks. The OWASP AI Maturity Assessment Model (AIMA) is one of the most practical. In this article, we’ll explore what it is, how it compares to other frameworks, and how organizations can use it to assess their AI maturity.

0Click Attacks: When TTPs Resurface Across Platforms

If there’s one lesson security teams should take from recent disclosures, it’s this: AI agent attack techniques don’t disappear - they resurface, across vendors and platforms, with only small variations. What researchers called out months ago is showing up again, now in Salesforce as the ForcedLeak vulnerability.

AI Data Privacy Regulations: Legal and Compliance Guide

The regulatory landscape for AI and privacy reached a turning point in 2025. The headlines are familiar: laws multiply, consumer expectations harden, and enforcement accelerates. What is different this year is the shift from occasional audits to always-on proof. Regulators and enterprise customers want to see working controls inside your pipelines, not just policy PDFs.

Enterprise AI Security Redefined: Protecto vs. Traditional DLPs

Protecto replaces the patchwork of DLPs and DSPMs with AI-native controls, so you can safely unlock enterprise data for AI. Prompts, models, and context power Agentic AI. But context is also the most volatile and exposed layer - where 90% of enterprise AI risks originate. Intellectual property loss, unauthorized access, privacy violations, compliance failures - all start in the context. That’s why Protecto brings Zero Trust controls to data in AI.

Securing AI: The New Frontier of API Security

A10 Networks' security experts, Jamison Utter, Diptanshu Purwar, and Madhav Aggarwal, discuss the security challenges of AI. They discuss the new world of API-enabled AI agents and the necessity for robust security controls. Learn how to prevent misuse within the enterprise as they explore data ingress/egress and API security in the context of large language models (LLMs).

Top 8 Custom Software Development Trends in 2025

The world of software development never stands still. In 2025, we're seeing a surge of exciting innovations that are changing how software is designed, built, and scaled. From smarter AI tools and low-code platforms to greener coding practices and edge computing, the landscape is evolving fast. Whether you're a startup founder aiming to build a scalable MVP or a CTO steering an enterprise transformation, knowing what trends to watch can save time, money, and frustration.

ChatGPT and Gemini Run My 27-Person Team Better Than I Ever Did - While I Golf

Kevin didn't become a better manager. He got ChatGPT and Gemini to manage for him. Kevin checked his Slack. Monday, 6:45 AM. 84 unread messages. Three fires to put out. Team morale survey: 4.2/10. Four months later. Same Monday time. Kevin was on the golf course. Team morale: 8.7/10. Best performing department in company history. What changed.

Claude AI Builds Websites Better Than $50K Agencies - Clients Pay Double Rates

Claude AI website development exceeded $50K agencies Thursday when client projects demanded impossible timelines. Artificial Intelligence generated complete websites faster than human development teams. Language Model Software created custom functionality agencies couldn't deliver. Machine Learning web development surpassed professional standards.

The Dawn of the Agentic SOC: Reimagining Cybersecurity for the AI Era

At Fal.Con 2025, I had the privilege of addressing over 8,000 cybersecurity professionals about something that’s on my mind – and should be on all of ours: how do we fundamentally reimagine security for the age of AI? We're living through the fourth industrial revolution. The first brought us steam power, the second electricity, and the third the digital age we all know and love.

How to Spot and Stop Security Risks From Unmanaged AI Tools: Shadow AI, LLM Agents, Compliance Risks

How to Spot and Stop Security Risks From Unmanaged AI Tools Shadow AI is exploding in organizations—developers are using AI tools and models without approval, often embedding them into production systems. In this webinar, Mend.io EVP of Product Management Nir Stern explains the real risks behind unmanaged AI tools, why traditional AppSec can’t keep up, and eight practical steps to regain control.

SailPoint AI-Driven Identity Governance: Access Modeling

Join Xalient experts Dave Cox, VP of Identity Services, Ryan Cluff, Director - IGA Practice and Kevin Bender, Senior Manager - IGA Practice, as they dive into the challenges of role-based access control (RBAC) and how to effectively use SailPoint’s AI Access Modeling to build, refine, and govern role models at scale. Learn how organizations can avoid stale role definitions and adopt sustainable, data-driven approaches.

Bridging Enterprise Content and AI: Introducing Egnyte's LangChain Integration

In the rapidly evolving landscape of enterprise AI, the ability to seamlessly connect organizational knowledge with intelligent systems is a critical differentiator. While LLMs excel at reasoning and generation, their true potential is unlocked only when they can access and process the vast repositories of institutional knowledge driving your organization’s business decisions.

Agentic AI and the Future of Cybersecurity: A Field CTO's Perspective

When I talk to customers about AI these days, I usually get two very different reactions. Some lean forward, excited about the promise: fewer alerts, faster response, maybe even lights-out SOC operations someday. Others lean back, uneasy about the risks: does this mean attackers will be able to run thousands of hacks at once, automatically? The truth is, both reactions are justified. We are at the start of a shift toward agentic AI. This is not the same as today’s AI copilots that wait for prompts.

Supercharge Your AI Data Governance with Riscosity's F5 BIG-IP SSL Orchestrator Integration

Artificial intelligence has stormed the enterprise world, and it's not slowing down anytime soon. With thousands of AI-powered applications, from large language models (LLMs) to productivity-boosting copilots, employees are tapping into AI to work smarter and faster. But here’s the rub: while AI can supercharge productivity, it also brings along a Pandora’s box of risks.

Agentic AI in Cybersecurity: Real-World Impact & Strategic Insights

In this webinar, the Securonix team breaks down how agentic AI is transforming cybersecurity from theory into measurable results. Hear directly from our experts on the Response Agent and other AI-driven capabilities that help modern SOCs detect threats faster, cut through alert fatigue, and deliver outcomes that boards can trust. What you’ll learn: This session is packed with real-world examples and strategic guidance for CISOs, SOC leaders, and analysts who want to modernize security operations, demonstrate ROI, and prove resilience in the boardroom.

DAGStyle Agents That Finish Jobs

When I first built a chat-based AI agent, I was amazed by its conversational abilities. It could answer questions and generate code snippets on the fly. Yet when I tried to delegate complex work (like analysing a set of documents), it kept wandering off course. Sometimes it hallucinated, sometimes it looped forever, and sometimes it burned through API credits without a single useful output.

AI vs. Human: What SpamGPT Means for the Future of Security

Phishing is not new. But SpamGPT has changed the game by showing how AI can industrialize deception at scale. SpamGPT has quickly become the poster child for how attackers are using AI to industrialize old tricks. At its core, SpamGPT isn’t introducing a new kind of attack; it’s simply making phishing faster, cheaper, and more convincing. Phishing has always been about deception. But with AI generating endless, polished, and context-aware lures, the balance of power shifts.

Is AI really new-or just automation with better branding?

“AI is just automation by a different name.” It’s a bold claim—but one that Brandon Heller, CTO and co-founder of Forward Networks, and Howard Holton, CEO of GigaOm, unpack in a way that will make you think. In their recent conversation on Discovering Disruptions in Tech, they make the case that artificial intelligence, especially generative AI, is not delivering brand-new capabilities.

Still Using RBAC in AI? You're Already Behind.

Traditional role-based access control (RBAC) was built for structured systems - not for the messy, unstructured data that powers today’s AI workflows. In this video, we explore real-world healthcare scenarios where RBAC breaks down like mental health notes, lab results, and substance use histories buried in clinical documents. You’ll see how Protecto’s Context-Based Access Control (CBAC) solves this by understanding the user, prompt, and context - and enforcing policies in real time, without breaking AI functionality.

AI Meets SAST - Reimagining the Future of Static Analysis | Webinar Mend.io

Join host Tony Morbin as he explores how AI is revolutionizing Static Application Security Testing (SAST) in this future-forward episode with Saoirse Hinksmon, Senior Product Marketing Manager at Mend.io, and Amir Shahmir, Senior Sales Engineer at Mend.io. This isn’t your average security webinar — it’s a deep dive into the convergence of AI and SAST, uncovering how GenAI is making static analysis faster, smarter, and more actionable for developers and AppSec teams alike.

AI Is Writing the Code - Can Security Keep Up? | How to Secure Agentic IDEs from Dev to CI/CD | Mend

AI coding agents are exploding in use—but are they quietly shipping exploitable code? In this webinar, we break down real data, real incidents, and a practical blueprint for securing AI-accelerated development.

AI Data Privacy Trends and Future Outlook 2025

AI is now woven into everyday work. Customer teams rely on chat assistants, developers use copilots, and analysts ask models to sift through knowledge bases. The biggest shift in 2025 is not a single law or headline. It is the move from occasional audits to continuous, technical controls that run wherever data flows.

How agentic AI and non-human identities are transforming cybersecurity

Within the average enterprise, non-human identities (NHIs) now outnumber employees, contractors, and customers by anything between 10-to-1 and 92-to-1. Add to this the fragmentation of human identity management resulting from authorizing a single person’s access to multiple on-premises, cloud computing and hybrid environments, and enterprise identity and access management (IAM) becomes extremely challenging.

Revolutionizing DevSecOps with AI-Powered Application Security

The application security landscape is undergoing a fundamental transformation. While organizations race to deliver software faster than ever, traditional security approaches create bottlenecks that compromise both speed and protection. This isn’t a problem you can solve by throwing more disparate tools at the challenge. It requires a holistic, strategic shift to AI-powered application security.

Malicious MCP Server on npm postmark-mcp Harvests Emails

On September 25, 2025, the npm package postmark-mcp, an MCP (Model Context Protocol) server intended to let AI assistants send emails via Postmark, was reportedly modified to secretly exfiltrate email contents by adding a blind-copy (BCC) to an external domain. Current analysis suggests the behavior began around 1.0.16 and persisted in later versions.

Regulatory Gaps and Legacy Systems Are Aiding AI-Powered Cyberattacks on Governments

Public sector organizations face unprecedented cybersecurity challenges as artificial intelligence reshapes how adversaries launch attacks. Threat actors now use AI to execute large-scale, highly personalized phishing campaigns, automate the discovery of vulnerabilities, and evade detection faster than traditional defenses can respond.

Securing AI Part 3: AI Agents - Use Cases and Security

A10 security experts, Jamison Utter, Diptanshu Purwar, and Madhav Aggarwal explore the topic of securing AI agents, which they define as systems that perceive, decide, and act. They discuss: Defining AI Agents: Explaining that agents are not just chatbots, but are the "hands of AI" that can execute actions, call APIs, and automate complex workflows. The Challenge of Security: Discussing how security for AI agents goes beyond traditional model security and includes protecting against prompt injection, malicious instructions, and preventing unsafe actions or data leakage. The Importance of Context and Data.

AI Agent Security: Verifying Workflows with AI Firewalls & Guardrails

AI Agent Security: Verifying Workflows with AI Firewalls & Guardrails A10 security experts Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar discuss the importance of context-aware security for AI agents. They emphasize that when automating workflows with AI, it's crucial to ensure that the context fed to the agents and their subsequent actions are verifiable and in line with existing company policies.

Attackers Use AI Development Tools to Craft Phony CAPTCHA Pages

Attackers are abusing AI-powered development platforms like Lovable, Netlify and Vercel to create and host captcha challenge websites as part of phishing campaigns, according to researchers at Trend Micro. “Since January, Trend Micro has observed a rise in fake captcha pages hosted on such platforms,” the researchers write.

New AI-Driven Phishing Platform Automates Attack Campaigns

Researchers at Varonis warn of a new phishing automation platform called “SpamGPT” that “combines the power of generative AI with a full suite of email campaign tools.” While previous phishing kits have automated parts of the attack chain, SpamGPT’s sophistication sets it apart from the rest “SpamGPT’s interface and features imitate a professional email marketing service, but for illegal purposes,” Varonis writes.

LevelBlue Spotlight Report Finds Manufacturers Struggling with the Impact of AI and Supply Chain Risk

LevelBlue’s newly released 2025 Spotlight Report: Cyber Resilience and Business Impact in Manufacturing, uncovered the different ways this sector has increased its understanding of the role cybersecurity must play moving forward, including the need to adopt a more proactive security posture to increase resilience and improve its defense mechanisms to combat AI-powered attacks.

When Attackers Weaponize AI and Defenders Fight Back with Smarter Remediation

Artificial intelligence is transforming cybersecurity, and not always for the better. Attackers are now weaponizing AI to speed up reconnaissance, create exploit code, and bypass traditional defenses. Security teams can’t afford to rely on outdated vulnerability management practices. In this webinar, Scott Kuffer (COO, Nucleus Security) and Corey Brunkow (Director of Federal Operations, Horizon3.ai) break down how AI is changing the threat landscape and what defenders can do to stay ahead.

AI, Risk, and Enterprise Security: Highlights from a Discussion with Enrique Salem

Key insights from a fireside chat between Nightfall CEO Rohan Sathe and cybersecurity veteran Enrique Salem, Partner at BCV and Nightfall investor Twenty years ago, enterprise security teams scrambled to address shadow IT as employees brought consumer applications into the workplace. Today, we're witnessing the same phenomenon with AI tools—what we now call shadow AI. The fundamental question remains unchanged: What happens to our data?

Persuasion engineering: how to influence humans, LLMs, and AI agents

We’ve spent decades treating persuasion like an art—something you could master if you had charisma, practice, or luck. Lawyers use it to hone arguments. Marketers use it to craft taglines. On the flip side, phishers use persuasive tactics to sharpen lures to razor points. But looking at it as an art form, while intuitive for some, can be messy. Hit-or-miss. Especially when you consider that today’s means of persuasion can run like code: systematic, reproducible, and scalable.

Zenity and Slalom Partner to Accelerate Secure AI Agent Adoption

Zenity, the leader in securing AI agents everywhere, is officially partnering with Slalom, a global business and technology consulting firm, who made the announcement today. This collaboration is designed to help enterprises safely and confidently adopt AI agents by combining Zenity’s robust security and governance platform with Slalom’s deep expertise in digital transformation and AI implementation.

Transform Information Discovery with Egnyte's AI-Powered Search

Modern businesses are drowning in content. Documents, presentations, images, audio recordings, videos, the volume grows exponentially every day. Traditional search tools, built on outdated keyword matching, simply can't keep pace. They only help users find information if they know what to look for and what keywords to use. This inefficiency comes at a cost: delayed decisions, missed opportunities, and frustrated teams spending more time searching than working. The solution?

Agentic and Generative AI: Differences and Impact on Organizational Growth

Generative artificial intelligence (GenAI) went mainstream in 2022 with the launch of ChatGPT. Now, tech companies are turning their attention toward the next big advancement: agentic AI. Within the next few years, generative AI and agentic AI may coexist in the professional world, synthesizing information and streamlining operations more efficiently than humans can.

CISO Spotlight: AJ Debole on the Business-Tech Divide, Breach Readiness, and AI Risks

AJ Debole is Field CISO at Oracle, but her journey began far from the corporate boardroom. After starting out in law and government, she moved into healthcare and cyber defense, where she led teams through ransomware crises. In this spotlight, she explores the next wave of challenges – aligning security with business incentives, taming AI sprawl, and securing the APIs that connect it all.

Have we reached true anonymous AI? #cybersecurity #ai

PromptLock ransomware represents a chilling evolution: AI that makes real-time decisions about your data. Unlike traditional ransomware that blindly encrypts everything, this malware uses a locally-hosted LLM to analyze file contents and decide whether to exfiltrate or encrypt based on what it finds. It's essentially agentic AI making autonomous threat decisions.

Securing Business Communication with Next-Gen Voice AI Platforms

Businesses rely heavily on seamless communication to build trust, enhance customer experiences, and streamline operations. With the rise of artificial intelligence, Voice AI platforms are becoming a cornerstone of modern communication strategies. These advanced systems improve efficiency and personalization and offer enhanced security features that protect sensitive information. As cyber threats evolve, securing business communication is no longer optional. It is important for long-term sustainability.

AI Face Recognition Explained: How It Works and Where It's Used Today

Artificial Intelligence (AI) is changing the way we live, work, and interact with technology. One of the most fascinating examples of this is AI face recognition technology-a system that allows machines to "see" and identify people just like humans do, only faster and often more accurately. But how exactly does it work? And where is it being used today? Let's break it down in simple terms and real-life examples, so you can clearly understand what's behind the buzz.

Skywork AI PPT: Elevate Your Presentations with AI

Transform how you plan, draft, and refine slides with a focused assistant built for modern knowledge workers and students in the United States. Generate professional documents, slides, and reports end-to-end, moving from first drafts to final polish in minutes. Expect faster workflows and consistent brand-quality content across every stage of a project. The system creates clear slide structures, helps refine transitions and speaker notes, and improves visual hierarchy so your deck reads and presents well.

Gemini AI Powers Real Estate Empire - $2M Sales Quarter Breaks Records

Gemini AI transformed Jessica Park's struggling real estate business Monday morning when traditional lead generation failed. Artificial Intelligence Software analyzed 10,000+ property listings instantly. Language Model automation generated $2M quarterly sales from previously impossible market research speed.

Regulatory Gaps and Legacy Systems Are Aiding AI-Powered Cyberattacks on Governments

Public sector organizations face unprecedented cybersecurity challenges as artificial intelligence reshapes how adversaries launch attacks. Threat actors now use AI to execute large-scale, highly personalized phishing campaigns, automate the discovery of vulnerabilities, and evade detection faster than traditional defenses can respond.

Welcome to Dojo AI: Where AI agents strengthen your SOC

For too long, security has been defined by reaction, responding to every alert, chasing every anomaly, burning time and energy without clarity. But the strongest fighters don’t swing at every feint. They train, prepare, and conserve their energy for the moments that matter. That’s not just strength; that’s resilience. Now, this philosophy has entered the SOC. And it has a name: Sumo Logic Dojo AI.

Say hello to your newest security team member. (and the multiplier you've been waiting for)

Security teams don’t need more fragmented tools. They need clear visibility, smarter AI-driven insights, and integrated workflows. Breach Risk unifies external threat management to help you act faster, report with confidence, and prove your security posture.

Intel Chat: PromptLock AI ransomware, "Shai-Hulud", ChatGPT calendar vulnerability & FileFix [250]

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community. Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.

Advance AI and Cyber Oversight With Kovrr's Control Assessment

‍Conducting a risk assessment has become a baseline requirement, not merely an internal best practice, for building effective GRC programs. Whether their focus is on cybersecurity or the newer frontier of AI, assessments offer a systematic means of illuminating an organization’s current exposure and providing visibility into how safeguards are working across both domains. For many teams, however, beginning the assessment remains a challenge.

Protect AI Development with Falcon Cloud Security

As AI becomes an integral part of how modern applications are built and deployed, it introduces new risks and new blind spots for security teams. Large language models, machine learning packages, and embedded AI services can be hidden deep in the software supply chain or running unnoticed in production. Without purpose-built visibility, organizations risk exposing sensitive data, shipping vulnerable code, or relying on models they cannot fully govern.

Exposed AI Agents in the Wild: How a Public MCP Server Let Us Peek Inside Its Host

Modern enterprises run not only web apps and databases, but also AI agents and tooling servers. MCP (Model Context Protocol) is an interface pattern that exposes tools-functions the agent can call, such as a browser driver, accessibility checker, or script generator. One of the most powerful tools we found exposed was the ability to trigger a browsing task-likely driven by Selenium, Playwright or similar.

Rise of the AI SEO Agency: The Secret Weapon for Online Empire Builders

In the competitive world of digital marketing, staying ahead is everything. Traditional SEO strategies are becoming less effective as search engine technology evolves. This is where an AI SEO agency comes in, serving as a secret weapon for ambitious online empire builders. By harnessing the power of artificial intelligence, these agencies offer a smarter, faster, and more efficient path to achieving your business goals. Are you ready to discover how an AI-powered SEO strategy can transform your online visibility and drive organic traffic?

The Role of AI Detection Tools in Maintaining Content Trust

These days, artificial intelligence (AI) shows up in more places than we might realize. From students using it to draft essays to companies relying on it for blog posts or customer support, AI-generated text has become part of everyday life. This isn't necessarily a bad thing-it can save time, spark ideas, and make writing more accessible. But it also raises an important question: how do we know if what we're reading is authentic? Some writers even look for ways to make AI undetectable, but the bigger conversation is about why detection tools exist in the first place-and how they shape trust.

What UX Changed When ChatGPT Could See and Draw

ChatGPT's ability to analyze images and create visual content revolutionized how Elena Vasquez approaches design projects. The UX designer stopped switching between multiple tools and started using this enhanced Language Model to critique layouts, suggest improvements, and generate visual concepts directly within their conversations. Elena used to describe design problems in text and hope ChatGPT understood her visual challenges. The back-and-forth was frustrating - explaining color schemes, layout issues, and user interface problems without visual context felt like describing music over email.

Falcon Data Protection Stop GenAI Leaks with Unified Data Protection: Demo Drill Down

Stop GenAI data leaks before they happen. Falcon Data Protection unifies visibility and protection across browsers, local apps, shadow AI services, and cloud flows—closing blind spots across the entire GenAI attack surface. With real-time GenAI-specific detections, unified dashboards, and layered controls, organizations can embrace GenAI securely while protecting sensitive data. Watch the demo to see how CrowdStrike helps you boost productivity without risking exposure.

CISOs Concerned of AI Adoption in Business Environments

UK security leaders are making their voices heard. Four in five want DeepSeek under regulation. They see a tool that promises efficiency but risks chaos. Business is already under pressure. Trade disputes drag on. Interest rates remain high. Cyber threats grow. Every move to expand operations adds risk, and risk is harder to measure when AI enters the equation. AI spreads fast. It cuts costs, fills gaps, and automates mundane tasks. But it also opens hidden doors. In the UK, AI is now part of daily work.

Bridging AI Safety and AI Security: Reflections from the NYC AI Safety Meetup

The regularly occurring NYC AI Safety Meetups cover a variety of topics, with this latest session focusing on the convergence of AI Safety and AI Security. I had the fantastic opportunity to contribute to the conversation, it’s one that’s been budding for some time, but this was my first direct exposure.

Security for Autonomous Agents and Reducing Shadow AI

In the rapidly evolving field of AI, understanding the distinctions between how agentic workflows are initiated is crucial. While the verbiage among tech providers varies, it essentially comes down to whether an agent is prompted by a human from a chat interface or autonomously from external sources like emails, data changes, calendar invites, or otherwise.

The Role of AI in Enhancing Data Privacy Measures

Data privacy is no longer a policy binder. It is an engineering practice that must run every day, close to where data enters, is processed, and leaves your systems. That is why the conversation has shifted to The Role of AI in Enhancing Data Privacy Measures. AI can inspect millions of records, watch billions of events, and detect quiet patterns that humans and static rules miss. When applied correctly, AI turns privacy from a paperwork exercise into a set of working parts.

ChatGPT Is the First Place I Go for Advice Now

ChatGPT software became Tom Wilson's go-to advisor for everything from career decisions to relationship problems. The 31-year-old project manager stopped asking friends for advice and started consulting this Language Model that never judged, never got tired of his questions, and always offered multiple perspectives. Tom used to text his problems to different people depending on the situation. Work stress went to his mentor. Relationship issues to his sister. Money problems to his financially savvy friend. Each person gave advice based on their own biases and limited time.

Secure Your AI Workflows: New Governance & Visibility Features from Snyk

As AI transforms software development, AppSec teams face new complexities. For instance, the lack of visibility into where AI is being used and the reality that AI-generated code is often highly vulnerable make it nearly impossible to prioritize remediation and effectively scale security programs. To succeed, AppSec teams have to evolve from task managers to strategic governance enforcers.

AI-Assisted Phishing Attacks Are an Increasingly Serious Threat

AI-assisted phishing attacks pose a significant and increasing threat to organizations, according to Matt Weidman, partner and vice president of Commercial Property & Casualty at USIA. In an article for CBIA, Weidman explains that attackers can use AI tools to craft targeted, convincing phishing messages that are almost indistinguishable from the real thing.

Ethical and Regulatory Implications of Agentic AI: Balancing Innovation and Safety

Artificial intelligence (AI) has come a long way over the past six decades. From simple chatbots in the 1960s to today’s sophisticated large language models (LLMs), mimicking human behavior has always been one of AI’s most intriguing applications. At present, though, AI cannot plan or make decisions as humans do. If it could, the ethical implications of AI would suddenly become much more complex. That’s where agentic AI comes in.

CrowdStrike Stops GenAI Data Leaks with Unified Data Protection

GenAI adoption is exploding across organizations, transforming how work gets done and where data moves. CrowdStrike is announcing four new innovations in CrowdStrike Falcon Data Protection to empower organizations to embrace GenAI tools while securing data across endpoints, cloud, GenAI, and SaaS environments.

AI-Powered Protection, Profitable Margins: Why VARs Are Switching to AppTrana WAAP

Globally, the VAR market for IT products is projected to exceed USD 11.8 billion in 2024 and grow at a CAGR of 7.5%, potentially doubling by 2033. Within security software, where overall market spending is expected to surpass USD 200 billion, VARs(Value Added Resellers) play an outsized role by packaging products with services that help enterprises implement, manage, and get measurable outcomes from their technology investments.

A practical guide to AI-ready machine identity governance in finance

Across financial services operations, machine identities play critical roles, but in many organizations, these cryptographic keys, API tokens, certificates, and service accounts remain chronically under-governed. What’s more, machine identities outnumber human identities by staggering margins, creating a massive, often unseen, unsecured attack surface—one that’s only further compounded by the rise of artificial intelligence (AI).

ChatGPT Polished My LinkedIn Until Recruiters Replied in 48 Hours

ChatGPT rewrote Marcus's résumé so effectively that three recruiters contacted him within two days. His LinkedIn Premium subscription had generated zero meaningful leads in six months, while this Language Model transformed his generic job history into compelling career narrative.

The AI revolution in financial cybersecurity

Financial cybersecurity has never been a static discipline. Over two decades in this industry, I’ve seen it transform from a compliance checkbox to a cornerstone of business resilience—usually after a painful lesson. Today, we’re heading into the most significant paradigm shift for financial security since online banking: the convergence of artificial intelligence and machine identity governance.

Context-Aware Tokenization: How Protecto Unlocked Safer, Smarter Healthcare Data Analysis

The healthcare industry, despite being highly regulated, is one of the most targeted for breaches, necessitating tight measures. While these measures are necessary, they often restrict the free flow of information, critical for analysing patient outcomes and improving internal operations. Tokenization has long been a reliable method for masking protected health information (PHI). But not all tokenization is created equal.

CrowdStrike Collaborates with AI Leaders to Secure AI Across the Enterprise

AI is transforming how organizations operate, from automating workflows to fueling innovation and competitive advantage. It’s the backbone of the modern enterprise. But while the opportunities AI presents are enormous, they come with new risks: models can be stolen, cloud workloads can be hijacked, and data can be poisoned. Every layer of the AI stack — from GPUs and training data to inference pipelines and SaaS apps — is a new target.

Announcing Threat AI: Security's First Agentic Threat Intelligence System

CrowdStrike is unveiling groundbreaking innovations across Counter Adversary Operations. Threat AI, a system of AI-powered agents built on the CrowdStrike Falcon platform, is the industry’s first agentic threat intelligence system. It provides mission-ready agents to reason, hunt, and take action against any stage of adversary activity. In addition, the new Threat Intelligence Browser Extension for Google Chrome extends intelligence everywhere analysts work.

Military ID Deepfakes: How North Korean Hackers Target the South with AI

North Korean threat actor Kimsuky has escalated its social engineering tactics by leveraging military ID deepfakes to deceive South Korean targets. According to a recent analysis by South Korean cybersecurity firm Genians, the group is now using AI-generated images to impersonate military personnel, making phishing campaigns more convincing and harder to detect.

The 5 Phases of AI Adoption: An "Ask the SME" Breakdown

Welcome to the newly revamped "Ask SME Anything" series! In this series, our subject matter experts (SMEs) offer pro tips, address common pet peeves, and provide the TL;DR on the latest Netskope news and industry trends. In this video, we tackle a topic on everyone's mind: the AI adoption journey. What you'll learn: Netskope helps organizations secure every stage of their AI journey.

How IONIX Protects You in the AI Gold Rush

The AI revolution is moving at breakneck speed. Every week, new tools, frameworks, and integrations hit the market. Developers eager to harness the power of large language models and automation platforms are spinning up assets with little thought to long-term security. The result is a wave of exposed services — chatbots, APIs, orchestration tools, and workflow systems — that anyone on the internet can stumble upon. Attackers see this as an open invitation.

AI Risk Management: Defining, Measuring, & Mitigating the Risks of AI

‍ Artificial intelligence (AI) used to be something that only existed in science fiction novels and dystopian movies. Then, technology advanced, and it became a reality, being slowly implemented into experimental projects and niche use cases. Now, however, it is shaping real business outcomes, accelerating decisions and automating processes in ways that are becoming commonplace in daily market operations. ‍

From Shadow IT to Shadow AI: The Evolution of Unseen Risk

Security leaders are well acquainted with Shadow IT; the unsanctioned apps, services, and even devices employees adopt to bypass bureaucracy and accelerate productivity. Think rogue cloud storage, messaging platforms, or unapproved SaaS tools. These all often slip past governance until they trigger a breach, compliance issue, or operational failure. Now, a more complex threat is emerging - Shadow AI.

CrowdStrike Launches Agentic Security Workforce to Transform the SOC

AI has redrawn the cyber battlefield. Adversaries are already automating every phase of the kill chain to strike faster, scale wider, and overwhelm defenders. Manual workflows and conversational assistants help teams move faster, but still bind them to human speed. Agentic AI changes the equation. It enables security teams to deputize trusted, mission-ready agents that reason, decide, and act on their behalf — at the speed of AI. The promise of agentic AI is clear.

AI in IoT Security: How Machine Learning Prevents Botnet Attacks Like Eleven11Bot

The Internet of Things (IoT) ecosystem is expanding rapidly, connecting billions of devices across industries. While this connectivity drives efficiency and innovation, it also introduces massive cyber risks. The IoT ecosystem is an interconnected environment of devices, systems, and technologies, making security especially complex. Attackers are increasingly using automation and artificial intelligence (AI) to launch sophisticated attacks at scale.

Understanding AI and Data Privacy: Key Principles

AI is now part of customer service, product design, operations, and decision making. That reach brings real benefits, and it also surfaces personal and sensitive data in new places. It raises the question: How do we ship useful AI while protecting people and meeting laws? This guide helps you understand AI and data privacy as one practice through core principles, common pitfalls, practical controls, and a step by step plan to build privacy into your AI stack from the start.

How AI is (or should be) changing SOC workflows with Matt Bromiley

We dove into AI in the SOC with Matt Bromiley from Prophet Security! Matt broke down how AI is transforming (and should be transforming) SOC workflows. Whether you're already using AI tools or wondering where to start, this is the conversation you don't want to miss.

LCQL Made Simple with AI #cybersecurity #ai

LimaCharlie Query Language (LCQL) enables security teams to search across their entire multi-platform fleet, from Windows Event Logs to Linux package installations to macOS volume mounts. Our MCP server allows users to generate LCQL queries from plain-text language commands. Eric Capuano, founder of Digital Defense Institute, demoed this during our webinar: "I want an LCQL query that'll go and find processes in the last twenty four hours that exhibit signs of x. I can just give it that instruction... that MCP tool will work it out and give Claude the ideal LCQL query to run.".

The Evolution of AI: From Symbolic Reasoning to GPTs and Agentic Systems

It seems like Artificial Intelligence (AI) has suddenly appeared in everything, everywhere, all at once. What feels like “five minutes ago”, there was “pre-AI life”, and now we have AI assistants that speak like real people, apps that create images, music, and video from nothing, and AI agents that do work for us.

Guy Let ChatGPT Handle Every Conversation With His Wife - You Won't Believe What Happened

Mark, a 34-year-old software engineer, had a bold idea. He wondered what would happen if ChatGPT, a Language Model he used for code reviews, handled his personal life too. One evening, tired of juggling deadlines and small talk at home, he fed ChatBot transcripts of his conversations with his wife. Claude AI was added to polish tone, ensuring nothing sounded robotic. What started as an experiment in Artificial Intelligence quickly turned into a week-long case study on trust, communication, and the limits of Software.

Using ChatGPT to Catch Bugs Pre-Launch: Zero Rollbacks Success Story

ChatGPT was the last Software the developer trusted before pushing code to production. For months, his small SaaS team had been burning nights fixing rollbacks after buggy releases. With deadlines tight and investors asking for updates, he turned to a Language Model not for new features, but for one job: hunting bugs in human-readable form before they went live. It wasn't magic Artificial Intelligence. It was structured prompts, checklists, and ChatBot-powered reviews that saved him from another midnight rollback.

4 Ways to Secure Bedrock Agent-Initiated Actions with Teleport

AI agents powered by Amazon Bedrock are playing an increasingly central role in cloud operations. These agents can interact directly with core AWS services like S3, Lambda, RDS, and EC2 to perform tasks such as data retrieval, automation orchestration, and resource provisioning. Many teams rely on the Model Context Protocol (MCP) to structure agent behavior and convert natural language into actionable commands.

Enable Secure AI Adoption Without Blocking Innovation: Just Add Nightfall

AI has become essential infrastructure for modern business. What started as pilot programs has evolved into production deployments across business functions, fundamentally changing how work gets done. While this transformation drives significant productivity gains, it creates a fundamental security challenge that traditional data loss prevention (DLP) approaches can't address.

AI Voice: I Tried to Make My Robot Hand Talk | AI Avenue Ep 1

In this episode you’ll go on a mission alongside Craig to find Yorick, his robot hand co-host, a voice. He’ll talk to experts at the NVidia GTC conference in San Jose, people on the street, and then travel to @elevenlabsio in London. You’ll learn how speech synthesis got its start and where it’s headed. You’ll hear about the challenges of making voices seem real, understand privacy concerns, and see the power voice gives us by augmenting our abilities.

Report: AI-Powered Phishing Fuels Ransomware Losses

AI-powered social engineering attacks are significantly more successful than traditional attacks, according to a new report from cyber risk management firm Resilience. The researchers state, “Social engineering attacks fueled 88% of material losses, with AI-powered phishing achieving a 54% success rate compared to just 12% for traditional attempts.” AI allows attackers to easily craft sophisticated phishing emails, as well as voice and video deepfakes.

Why AI Security Breaks Without Context Based Access Control (CBAC)

Generative AI is transforming the way enterprises approach daily operations – powering virtual assistants, summarizing medical records, and aiding clinicians with insights. These benefits come at a cost: risk to a wide range of sensitive data in AI-driven workflows. Traditional access controls and content filters that work for static systems fail as these are not designed for the free-flowing, context-rich data exchanges in LLM applications.

FBI Issues Guidance for Avoiding Deepfake Scams

The FBI and the American Bankers Association (ABA) have issued a joint advisory warning of the growing threat posed by AI-generated deepfake scams. “Criminals may pose as loved ones, government officials, law enforcement personnel, or even celebrities, often using fear and urgency to convince victims to send money or share sensitive information,” the advisory says.

What Is Data Privacy in AI? Explained Simply

If your company is shipping chatbots, copilots, or decision systems, you have probably heard the question many times: what is data privacy in AI, and how do we do it right. The answer is simpler than it looks. Data privacy in AI is a set of habits and controls that limit what personal or sensitive data you collect, how you use it, where you store it, and who can see it. When those habits are part of the build, AI products move faster, customers feel safer, and audits become routine.

Orchestrating AI: The practical way to scale while reducing tool sprawl

Every IT team is under pressure to “do more with AI.” A new tool promises smarter workflows, a new agent claims to replace manual tasks. But if you’re managing service requests, availability SLAs, patch cycles, infrastructure capacity, and application performance every day, you know the truth: AI doesn’t automatically reduce complexity on its own.

AI Safety Controls #cybersecurity #ai

Eric Capuano, founder of Digital Defense Institute, demoed permission controls using LimaCharlie's MCP server. When Claude recommended isolating compromised systems, Eric explained: "It's very aggressively recommending it's time to isolate these systems, but it is not authorized to fire off the isolate network command.".

Securing AI Workloads in Kubernetes: Why Traditional Network Security Isn't Enough

The AI revolution is here, and it’s running on Kubernetes. From fraud detection systems to generative AI platforms, AI-powered applications are no longer experimental projects; they’re mission-critical infrastructure. But with great power comes great responsibility, and for Kubernetes platform teams, that means rethinking security.

Report: Shadow AI Poses an Increasing Risk to Organizations

The use of “shadow AI” is an increasing security risk within organizations, according to a new report from Netskope. Shadow AI is a newer variant of shadow IT, in which employees use unauthorized technology without the knowledge of the IT department. This is generally driven by a desire for increased productivity rather than malicious motives, but employees are often unaware of the risks introduced by unauthorized tools.

Introducing proactive, AI-powered risk management that breaks the cycle of reactive risk

Risk doesn’t live in just one place—it comes from vendors, suppliers, partners, and from inside your business through processes, people, and systems. ‍ Managing that risk is often fragmented, too. Vendor reviews live in one system, internal issues in another, and leadership reports take hours to compile. And every new vendor, tool, or requirement contributes to another layer of risk.

Bitsight GIA Update: How Gen-AI and LLMs Get You Faster (and Better) Entity Mapping

Bitsight’s mission to keep evolving the capability of our data engine through AI enhancements hit a new milestone today. The latest addition is a new entity mapping capability added to Bitsight AI and the data engine, which uses GenAI agents to create more complete and consistent sets of identifiers for organizations scanned and added to Bitsight’s entity inventory.

Zenity Named a 2025 Cool Vendor in Gartner's Agentic AI TRiSM Report

Your security teams are facing an unprecedented challenge. AI agents are spreading across enterprises faster than anyone anticipated, from Microsoft 365 Copilot processing sensitive emails to custom agents built on AWS Bedrock accessing critical databases. Over 80% of Fortune 500 companies are already deploying these autonomous systems, oftentimes without adequate security guardrails. The result is a rapidly expanding attack surface that conventional security tools simply cannot see or secure.

Apono Releases MCP Server for End Users

We’re excited to announce the launch of our MCP server for end users, designed to boost engineering productivity while keeping security strong. Engineers often know exactly what they need to do—deploy to a new environment, spin up a workload, investigate logs—but not which permissions translate into those tasks. That leads to two common problems: The result is wasted time, frustrated teams, and an inflated attack surface from unnecessary standing privileges.

The Invisible Trick: How to Fool an AI Agent

The Invisible Trick: How to Fool an AI Agent A10 Networks' security experts, Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar, discuss a classic example of an adversarial attack that tricks an AI agent using the equivalent of invisible watermarks. Madhav explains how researchers used an invisible watermark in a research paper that, when scanned by an AI agent, would automatically trigger a positive review. This watermark was not visible to human reviewers. This clever manipulation highlights a significant vulnerability in AI models: they can be influenced by hidden data in their input.

5 AI Mandates from Your Board: A Boardroom Mandate for AI-Driven Efficiency

In 2025, AI in cybersecurity is no longer optional—it’s a board-level expectation. CISOs aren’t being asked if they’re using AI; they’re being asked to show measurable outcomes: faster response, reduced noise, greater visibility, and ROI the board can trust. Security operations have become a boardroom priority.

AI-Generated Images: The New Frontier of Digital Art

Art has always changed with technology. From cave paintings to oil on canvas, from photography to digital design, every step opened a new way to create. Now, we are entering another exciting stage-the world of AI-generated images. With powerful tools available online, anyone can turn ideas into visuals within seconds.

Smart Chairs, Safer Spaces: Preventing Cyber Threats in AI-Connected Restaurant Furniture

In restaurants across the world, chairs are no longer just places to sit. Many are becoming smart, equipped with sensors and AI features that adjust posture, monitor temperature, or even personalize the dining experience. This innovation brings comfort and efficiency to dining spaces, but it also introduces new risks that many business owners overlook.

Egnyte Unveils AI Agents to Boost Efficiency and Reduce Risk for the Architecture, Engineering, and Construction Industry

Egnyte announces its first industry-specific AI agents specifically designed to support the unique needs of the Architecture, Engineering, and Construction (AEC) industry. These AEC AI agents target some of the most time-consuming and costly parts of the process, from bid to completion, by addressing some of the most labor-intensive tasks involving often very complex documents.

Vanta Delivers: New AI-powered Capabilities to Help Security Teams Move Beyond Reactive Risk

AI-powered workflows and Vanta AI Agent extend to policy management, enterprise risk oversight, vendor monitoring, and Slack collaboration. Product announcements and demos debut at Vanta Delivers: AI-Powered Risk Management virtual event September 10.

Forrester study finds IT holds the key to orchestrating AI responsibly and at scale

Businesses everywhere are moving fast to adopt AI. Yet many initiatives are fragmented, siloed, difficult to scale, and lacking adequate governance. New research from Forrester Consulting, commissioned by Tines, surveyed more than 400 IT leaders in North America and Europe on the challenges of scaling AI and the role IT can play. The findings show that while governance, security, and cross-functional alignment are top priorities, they’re also some of the biggest barriers.

AI Data Privacy: Concepts, Definitions & Best Practices

AI now sits inside customer support, finance, human resources and product development. That reach brings value, and it also exposes personal and sensitive data in new ways. The question is no longer whether to adopt AI. The question is how to adopt it responsibly, with AI data privacy built into the system rather than tacked on after a test run. This guide explains the core concepts, definitions and best practices you can use to design, ship and scale AI with privacy in mind.

Agentic Software Supply Chain Security: AI-Assisted Curation and Remediation

Software supply chains are the attack vector for cybercriminals, and the challenge isn’t just finding vulnerabilities; it’s fixing them fast while ensuring security, compliance, and developer productivity. As supply chains grow in complexity, traditional tools aren’t enough; organizations need intelligent, autonomous assistance embedded directly into developer workflows.

Trusted AI Delivery: Introducing the JFrog AI Catalog

The rapid pace of AI innovation is driving new possibilities for every organization. Yet, for many, the journey from inception to reliable, production-ready AI applications is riddled with hidden challenges: proliferation of models, security blind spots, and a desperate need for consistent governance. You want to harness the power of AI, but not at the expense of control, security, or compliance.

How Hospitality Brands Can Simplify PCI DSS 6.4.3 and 11.6.1 Compliance with Feroot PaymentGuard AI

PCI DSS 6.4.3 requires organizations to maintain integrity controls over all JavaScript running on payment pages, while 11.6.1 requires continuous monitoring and alerting for script changes. For hospitality brands, compliance is harder than in other industries because: The result: Security teams struggle with fragmented visibility, manual evidence collection, and constant alerts during audits.

AI-Generated Code: A Double-Edged Sword for Developers

If you think AI-generated code is saving time and boosting productivity, you’re right. But here’s the problem: it’s also introducing security vulnerabilities at an alarming rate. Our latest research reveals that 45% of AI-generated code contains security flaws, turning what should be a productivity breakthrough into a potential security nightmare.

Bringing Creativity and Humor to Everyday Conversations

GIFs are one of the most universal ways to express emotion online. From laughter to surprise, they capture moments in motion and make conversations more vivid. Recently, a new trend has added a whole new level of personalization: GIF face swap. With tools like AI Face Swap, you can take any photo and instantly replace faces. But the technology doesn't stop there. GIFs and even videos can now be transformed in seconds, giving users a powerful and fun way to customize their content.

Preventing AI Agents from Going Rogue: Zenity Collaborates with Microsoft Copilot Studio to Deliver Inline Protection Against Malicious Behavior

AI agents are autonomous, powerful, and deeply embedded in how modern businesses operate. From rerouting customer support emails to accessing critical business tools like email and CRM systems, agents are transforming workflows across departments. As of Microsoft’s Q1 2025 earnings report, over 230,000 organizations, including 90% of the Fortune 500, are using Microsoft Copilot Studio to build custom agents for a huge variety of tasks.

Securing Identity in the Age of AI: A Buyer's Guide to Teleport

As enterprises embrace AI, identity has become the defining security challenge. Every new database, Kubernetes cluster, SaaS app, and now every AI agent introduces yet another identity that must be governed and protected. At the same time, attackers are weaponizing AI to accelerate identity-based threats, exploiting fragmentation and credential sprawl to devastating effect.

From Firewalls to AI: Understanding the Evolution of Cybersecurity

From Firewalls to AI: Understanding the Evolution of Cybersecurity The history of IT security has always been a journey of adapting to new threats. It started with simple firewalls to protect the "front door" and evolved to include endpoint, database, and Docker security. But what happens when the very intelligence you're building becomes a new kind of front door—and a new attack surface?

AI Regulations and Frameworks: Preparing for Compliance and Resilience

‍Artificial intelligence (AI) has departed from the realm of science fiction and emerged as a very real, regular part of life, increasing efficiency across a number of everyday activities. Particularly in the marketplace, where process optimization directly equates to time and money, general-purpose AI (GenAI) and other AI systems have rapidly taken on a central role.

LimaCharlie's AI: What It Does

Sr. Technical Content Strategist Everyone advertises AI, how does LimaCharlie use it? If you are not exhausted by the relentless AI hype cycle by now, your resilience is commendable. Our industry is awash in AI marketing that is an inch deep and a mile wide*. Everyone claims to have AI, almost no one will explain how it works. At LimaCharlie transparency is a core value. You see it in our high-visibility security platform and publicly available pricing structure.

Using AI in Security Operations: A Practical Checklist for the Modern SOC

AI is transforming how security operations centers (SOCs) work, but the hype can outpace the reality. You don’t need to build custom models or deploy cutting-edge platforms to benefit. Chances are, you already have AI-powered capabilities in your SIEM, SOAR, or security data platforms. The question is: Are they doing anything useful? This practical playbook lays out six key priorities to increase productivity and effectiveness while maintaining control.

Intel Chat: Salt Typhoon, Scattered LapSus Hunters, WhatsApp compromise & AI-assisted attack [245]

Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.

Rising Importance of Secure Healthcare Data Destruction

Healthcare organizations are generating more data than ever before. From electronic health records (EHRs) and medical billing information to diagnostic images and insurance credentialing documents, the amount of sensitive information stored and shared across systems continues to grow. With this growth comes a heightened risk of breaches, identity theft, and regulatory penalties if the data is not managed and disposed of properly.

How Trust Centers and AI are replacing security questionnaires and accelerating B2B sales

As Anna say in the podcast, “Security reviews show up just when you think the deal is about to close. It’s like a final boss that no one wants to fight.” The last-mile friction caused by security diligence isn’t new, but it’s becoming more painful as deal cycles tighten and expectations around transparency rise. Buyers want answers faster. Vendors want to close faster. And security teams, stuck in the middle, are often left juggling risk, reputation, and revenue timelines.

Securing AI Part 2: What Makes Protecting AI a Unique Challenge?

Securing AI Part 2: What Makes Protecting AI a Unique Challenge? In part 2 of our "Securing AI" series, security experts Jamison Utter, Diptanshu Purwar, and Madhav Aggarwal discuss the unique and evolving challenges of protecting AI systems, particularly Large Language Models (LLMs). They review why traditional security methods, like firewalls and simple behavioral analysis, fall short in a world where AI is dynamic, data-driven, and unpredictable.

How Nightfall Brings AI-Native Context-Aware DLP to Microsoft 365

It's 8:47 AM. Your phone buzzes with another "urgent" DLP alert. You've already ignored three this morning. This one screams "SENSITIVE DATA DETECTED" in all caps. But it’s just a lunch menu with a credit card number for catering. You silence the notification and grab your coffee. What you don't know? While you're dismissing false alarms, your VP of Finance just dropped next quarter's earnings in a public Teams channel. Your DLP system? Completely silent.

The WinINet.dll Red Flag Moment #cybersecurity #ai

Our recent webinar showed how our MCP server enables AI to apply the same technical analysis that expert threat hunters use by providing structured API access to security data and tools. In the demo, Claude identified WinINet.dll loaded in a suspicious process - a discovery that Eric Capuano, founder of Digital Defense Institute, called "a pretty smart move." This moment highlighted how AI can move beyond basic data collection to understand investigative context and connect technical findings to broader threat hypotheses.

Adversarial AI and Polymorphic Malware: A New Era of Cyber Threats

The state of cybersecurity has always been in flux, but the arrival of tools like ChatGPT heralded one of the most significant challenges for security teams in years. AI has the potential to unlock incredible potential in data processing and malware detection, but in the wrong hands, Large Language Models (LLMs) and other adversarial AI tools can be used to develop polymorphic malware that can escape detection, gain access to sensitive data, and poison data sets.

The Hidden Risk in Enterprise AI, and the Smarter Way to Safeguard Data

AI exploded into the workplace overnight, reshaping how we work. Today, nearly every employee is experimenting with tools to move faster and think bigger. However, that acceleration comes with risk. According to Cyberhaven Labs’ latest research, nearly three-quarters of AI apps in use pose high or critical risks, and only 16% of enterprise data sent to AI ends up in enterprise-ready apps. The rest flows to personal or unvetted tools.

The Double-Edged Sword: Benefits and Risks of AI Transformations

Over the past few years, artificial intelligence (AI) has transformed millions of organizations worldwide. AI can automate rote tasks, facilitate natural-language interfaces, and pick up subtle patterns in huge data sets. It can also hallucinate wrong answers, reinforce societal biases, and even introduce cybersecurity risks. Before incorporating the technology into their workflows, responsible organizations must weigh the benefits and risks of AI.

Hospitals Need to Prepare for AI-Powered Phishing Attacks

Healthcare organizations need to be prepared for an increase in AI-assisted phishing attacks, according to Zack Martin, Senior Policy Advisor at Venable. In an article for HIT Consultant, Martin explained that AI has made phishing attacks more convincing and easier to launch, posing a heightened risk to healthcare organizations.

Report: AI Can Now Automate Entire Attack Chains

Threat actors can now use AI tools to automate entire attack operations, according to a new report from Anthropic. The company says an attacker abused its Claude AI tool to create a hacking and extortion campaign that compromised at least seventeen organizations. The attacker used Claude to conduct reconnaissance, initial access, malware development, data exfiltration, and extortion analysis.

New Invisible Attack Creates Parallel Poisoned Web Only for AI Agents

AI agents are rapidly evolving from simple text generators into powerful autonomous assistants that can browse the web, book travel, and extract complex data on our behalf. This new “agentic” AI, which operates in a “sense-plan-act” loop, promises to revolutionize how we interact with the digital world.

What an 'Aha' Moment with an Org Admin Token Taught One DevSecCon Speaker About AI Security

As the summer winds down and conversation around AI Security heats up, the Snyk team is in full swing planning mode for a double-header this October—with the return of DevSecCon’s Flagship conference, focusing this year on Securing the Shift to AI Native, and serving as the founding partner of the inaugural AI Security Summit.

Cato CTRL Threat Research: Threat Actors Abuse Simplified AI to Steal Microsoft 365 Credentials

AI marketing platforms have exploded in popularity, becoming everyday tools for creative teams in enterprises worldwide. Platforms like Simplified AI offer marketers the ability to generate content, clips, and campaigns at scale. For CISOs and IT leaders, approving such services often seems straightforward: allow access, whitelist the domain, and enable the marketing team to innovate.

AI Data Privacy Statistics & Trends for 2025

2025 is the year privacy becomes the competitive layer of AI. If you’re rolling out GenAI privacy is no longer a compliance chore; it’s a trust-building strategy that accelerates adoption, partnerships, and revenue. This report distills the most important AI privacy issues, statistics, and trends shaping 2025: what they mean, and how to respond with practical guardrails that protect people and performance.

When AI skips the app layer: Welcome to the OS Hunger Games

Remember when we thought the application layer was where all the fun happened? Firewalls, WAFs, EDR, dashboards galore — the entire security industrial complex built around watching what apps do. Well, with “agentic AI” running the show, that middle ground is turning into a bypass lane. Instead of clicking through UIs or APIs, your AI buddy is making direct system calls, automating workflows at the OS and hardware level.

From Prompt Injection to a Poisoned Mind: The New Era of AI Threats

In our last post, we introduced the Model Context Protocol (MCP), the "brain" or "mission briefing" that guides an AI agent's actions. Most security teams are just getting familiar with prompt injection, the equivalent of tricking an AI with a single, misleading command. But that's like stopping a pickpocket at the door when a master spy is already inside, rewriting the mission plans. As AI agents become autonomous, the attacks become more profound.

How Tines gets agentic automation right

At the RSAC Conference this year, it seemed that every cybersecurity company had suddenly become an agentic AI company. According to such vendors, AI agents were the solution to every security problem keeping CISOs up at night. The audience, however, was understandably skeptical. Concerns over vendor promises fell into two camps. The first camp: companies that took whatever AI capabilities they had and slapped the word ‘agentic’ on them (aka ‘agent-washing’). Or even worse.

Why AI Security Tools Are Different and 9 Tools to Know in 2025

As companies embed AI models into their applications, they face risks that traditional security tools weren’t designed to catch, such as prompt injection, data leakage, model poisoning, and shadow AI. Addressing these threats requires a new class of security tools built specifically for AI specific risk.

End-to-End AI in Security Operations | Exabeam Nova's 6 AI Agents Explained

Is your AI just a chatbot? Exabeam Nova delivers true end-to-end AI—from behavioral detections and automated investigations to natural language reports and intelligent case creation. Six purpose-built AI agents Full-cycle threat detection, investigation, response Subscribe for more product demos and cybersecurity insights!

The API Security Dilemma: Why Traditional Approaches Are Failing in the AI Era

Throughout the past few years, APIs have become the backbone of digital infrastructure. They enable software-to-software communication, improve integration and interoperability, support modular architecture, and more. But as API use has exploded, so has API traffic volume and complexity, making them increasingly difficult to secure. And the rise of AI agents and automation have complicated matters further. The result? APIs have become a favourite attack vector for cybercriminals.

Securonix - Breach Ready. Board Ready. AI-Powered.

Security teams today are expected to do it all. Stop threats faster. Prove value to the board. Scale with fewer resources. Securonix makes it possible. Breach Ready means unified detection and response with up to 60 percent faster time to containment and 50 percent less analyst workload. Board Ready means 193 percent ROI, a six-month payback period, and reporting that drives strategic decisions. AI Powered means modular agents that cut false positives by 90 percent and automate triage with precision, keeping your team in control. This is modern security. This is Securonix.

Trustwave Security Colony's 8 Commandments for AI Adoption

The advent and continuing widespread adoption of artificial intelligence for basic research, document creation, code writing, or any other purpose increases an organization’s threat level if done incorrectly. However, when an organization implements AI as a tool in a thoughtful and well-considered manner, it can be a great benefit.

Securing AI Transformation: Why Cato Networks Acquired Aim Security

Every major technology wave reshapes enterprise security. The rise of the Internet gave us firewalls. The move to SaaS brought CASB and DLP. The migration to the cloud and rise of the hybrid workforce demanded a new architecture like SASE to enable network transformation. Today, the AI revolution is creating an entirely new attack surface – one that is as transformative as it is urgent.

What AI Means for Your Cybersecurity!

Understanding AI security threats before they become your next crisis On this episode of Razorwire, I explore the emerging frontier of AI security with leading experts Jonathan Care and Martin Voelk. We examine the latest risks, show you how adversaries are exploiting AI systems and share practical advice for professionals working with these rapidly advancing technologies.

Securing LLM Superpowers: When Tools Turn Hostile in MCP

In Part 1 of this blog series, we explored the architecture, capabilities, and risks of the Model Context Protocol (MCP). In this post, we will focus on two attack vectors in the MCP ecosystem: prompt injection via tool definitions and cross-server tool shadowing. Both exploit how LLMs trust and internalize tool metadata and responses, allowing attackers to embed hidden instructions or persistently influence future tool calls without direct user prompts.

The CSA AI Controls Matrix: A Framework for Trustworthy AI

The Cloud Security Alliance, a respected non-profit founded in 2008 to pursue cloud security assurance, has now unveiled its Artificial Intelligence Controls Matrix (AICM), a quiet revolution for trustworthy AI. It has come at a time when generative AI and large language models are moving quickly into every sector. These systems can transform business, but they can also fail, or be made to fail. Because of this, trust becomes the measure of success.

Examples of AI Privacy Issues in the Real World

What’s the fastest way to lose trust? Expose private data. With AI moving from pilots to core workflows in support, finance, HR, and healthcare, one careless prompt or leaky integration can turn into headlines, fines, and weeks of incident response. The most useful way to understand the risks is to study AI privacy issues examples from the real world.

4 ways to scale compliance with AI

You got compliant—congrats! That’s a big milestone. It tells customers, investors, and the world that you take security seriously. But compliance doesn’t stop at your first audit. As your company grows, so do the requirements. You’ll have to manage new frameworks, more policies, faster timelines, more scrutiny, and more complexity. ‍ Modern GRC teams need to do more with less.

How Synthesia Became One of Europe's Fastest-growing AI Companies | Frameworks for Growth

In this episode of Frameworks for Growth, Vanta CEO Christina Cacioppo sits down with Steffen Tjerrild, co-founder and COO/CFO of Synthesia, to talk about what it takes to scale one of the UK’s fastest-growing AI companies. They explore the future of AI-generated video, how Synthesia built category-defining technology, and why European values may shape the next chapter of AI development. Topics covered.

The Case of the Phantom Date: How a Single Pixel Fooled Our Visual AI

We’ve all seen it: a cutting-edge, multimodal LLM, capable of understanding complex documents, stumbles on a seemingly simple task. In our case, the model confidently reported a contract’s signing date as "March 30". The only problem? The document clearly stated "March 9th". It wasn't just a minor error; it was a baffling one that sent us down a rabbit hole of debugging.

Reflecting on Wallarm's Journey: Growth, Resilience, and What Comes Next

When we started Wallarm, we focused on the APIs that power modern apps. We built an API-first platform, used AI from day one, and secured early patents in behavior-based detection and automated policy creation. The result: real-time, inline blocking with automatic API discovery that protects production, not just dashboards. Today’s investment isn’t only fuel for innovation—it’s proof of enterprise recognition.

Must-Know AI Development Services Every Startup Needs to Scale Fast

Artificial Intelligence (AI) was once a buzzword of the future, but it has now become a viable tool that contributes to innovation, efficiency, and growth. In the case of startups, AI is not the benefit; it is the requirement. The use of AI can assist startups in automating operations, customizing customer experiences, and making smarter business decisions more quickly. Within this article, we will discuss the best AI development services startups can take to stay competitive in a highly competitive market.

Phishing Attacks Are Rising: Automate Detection Before They Overwhelm Your SOC

Phishing has become one of the most consistent and damaging entry points for attackers. Today's campaigns aren't the obvious scams we once knew. They look professional, mirror trusted brands, and often come packaged as full-service phishing kits with ready-made infrastructure. For SOC leaders, this means one thing: the volume is climbing, and manual detection is no longer sustainable.

The Rise of AI-Powered Attacks Threatening Crypto Trading Platforms

AI has made it cheap and fast to generate convincing scam campaigns. With scam deposits rising 200% year-over-year and 60% of scam funds now tied to AI-enabled fraud, trading platforms are facing an industrialized wave of deception. What once required sophisticated criminal networks can now be automated by anyone with basic technical skills. Crypto crime drained $2.17 billion in H1 2025 alone, already surpassing 2024's total. While the ByBit hack took the headlines, analysts warn that AI-driven infiltration and phishing are eating away at platforms daily, in smaller but relentless amounts.

From Ad Description to Video Production: A Practical Guide to Full-Process AI Advertising with AdMaker.ai

In the fast-paced marketing world today, full-process AI advertising creation is revolutionizing how brands produce content. Platforms like AI Ad Generator - AdMaker.ai empower marketers to automate every step-from generating advertising copy to producing professional videos-greatly improving efficiency, precision, and creative diversity.

Illuminate AI Adoption with AIBOMS

An AI Bill of Materials (AIBOM) addresses this gap. It is a concise, living profile for every AI capability an organization can invoke—models, agents, SaaS features, plug‑ins, and APIs. Kept in a machine‑readable format, it serves as a practical record that can inform runtime decisions in a control plane. An AIBOM summarizes five things about each AI capability: who provides it, what it can do, what data it sees, where it runs, and how it should be treated.

Beyond the Hype: The Veracode AI-Advantage in Application Security

For years, the cybersecurity industry has hyped AI as a game-changer, but what vendors often delivered was basic machine learning driven or simple predefined rules. The rise of ChatGPT and similar tools dramatically reshaped the landscape, prompting vendors to hastily identify real AI use cases in their offerings.

Challenges in Ensuring AI Data Privacy Compliance [& Their Solutions]

What happens when the AI feature you shipped last quarter is compliant in one region—but illegal today in another? That’s the new normal. In 2025, the EU AI Act, new U.S. state privacy laws, China’s PIPL, and APAC rules are reshaping how organizations collect, process, store, and share data for AI. Privacy isn’t a back-office task anymore; it’s a front-line guardrail for product, security, and data teams.

Secure AI at Machine Speed: Defending the Growing Attack Surface

As AI becomes embedded across the enterprise — from customer-facing tools to backend automation — it dramatically expands the enterprise attack surface. Models, agents, apps, and data pipelines now span public and private clouds, SaaS, and edge environments, creating a sprawling, opaque risk landscape.

Are We Creating an AI Security Nightmare?

Out tomorrow! 77% of enterprises have already faced AI-related security incidents. Are we building innovation—or just our next crisis? AI is becoming more prevalent, especially in the world of cybersecurity. However, there are many AI risks and dangers of AI that people should be aware of, including the weaponisation of ai. It's important to consider the ethical implications of artificial intelligence, especially in fields like ai in healthcare.

Ignite Creativity Using AI Image Generation Technology

In today's digital landscape, visual content has become paramount, with studies showing that posts with images receive 352% more engagement than those without. Yet, creating professional-quality visuals remains a significant challenge for many content creators, demanding substantial time, resources, and expertise. Innovative solutions like Kling AI are revolutionizing the way we create visual content. By harnessing the power of advanced artificial intelligence, creators can generate stunning, professional-grade images in minutes rather than hours.

How Device Intelligence Detects Fraud Without Using Personal Data

Fraud tactics now evolve on an hourly cycle. For banks, fintech, digital lenders, and payments players, the question isn't whether rules still help - it's whether they adapt fast enough. Recent numbers from Alloy's 2024 Financial Fraud Statistics underscore the shift: over 50% of surveyed institutions saw business fraud rise, two-thirds reported higher consumer fraud, and generative AI could drive $40B in bank losses by 2027. It's no surprise that more than half are raising third-party spend, with three in four prioritizing identity risk capabilities.

Shadow AI could be your organization's biggest threat.

What starts as innovation (an employee testing a new AI tool) can quickly become exposure. Unsanctioned apps create data leaks, compliance issues, and an expanded attack surface. With UpGuard User Risk, security teams gain visibility into shadow AI activity, so they can detect and neutralize risks before they escalate into breaches. activity before attackers can act. Ready to see what User Risk can do for you?

The Swiss Cheese Model of AI Security

The Swiss Cheese Model of AI Security A10 Networks' security experts, Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar, explain that adequate AI security isn't a one-size-fits-all solution. They introduce the concept that security controls must be tailored to your specific data, company, and industry, as every context is unique.

Understanding Bias in Generative AI: Types, Causes & Consequences

Bias in generative AI refers to the systematic errors or distortions in the information produced by generative AI models, which can lead to unfair or discriminatory outcomes. These models, trained on vast datasets from the internet, often inherit and amplify the biases present in the data, mirroring societal prejudices and inequities.

Seven ways AI could impact the future of pen testing

In an era where attack surfaces are expanding faster than ever, AI has the potential to transform how organizations find and fix vulnerabilities. Gartner estimates AI agents will reduce the time it takes to exploit account vulnerabilities by 50%. From automating routine scans to developing self-learning attack agents, AI is already changing the red team playbook – and the pace of innovation shows no signs of slowing.