The Back Room Problem: Why Most Organisations Lack AI Data Visibility
AI Risk & Governance Sam Soares CRO 31 October 2025 5 min read Share.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Entropy vs. Encryption: Which Tokenization is Better?
The rapid scale of AI development and deployment has introduced a number of unprecedented privacy and compliance challenges for enterprises. IT and compliance teams are looking for solutions that address these concerns without affecting AI adoption. Tokenization has for long been the solution for protecting sensitive data. However, to implement it correctly, it is critical to understand which type fits best – both protect PII but differently.
Elevating public sector cyber defense with AI-powered threat hunting
Public sector organizations face sophisticated, persistent threats — 38% of public sector organizations say their cyber resilience is insufficient compared to 10% of medium to large private businesses. With sensitive data and critical infrastructure at stake, agencies need tools that enable proactive detection and rapid investigation, all while keeping data inside a secure boundary.
AI and SOC Efficiency in MDR
Adam Winston discusses how AI plays a role in the WatchGuard SOC.
Aembit Introduces Identity and Access Management for Agentic AI
The new capabilities, anchored by Blended Identity and the MCP Identity Gateway, give enterprises a secure and auditable way to manage how AI agents identify themselves and access sensitive systems.
How LLM Privacy Tech Is Transforming AI Using Cutting-Edge Tech
The promise of large language models is simple: turn messy text and data into instant answers, drafts, and decisions. The catch is simple: those models are hungry, and the most valuable data you own is also the most sensitive. If that escapes, you have legal, brand, and trust problems. This is where the story shifts. How LLM Privacy Tech Is Transforming AI is about making real deployments possible.
CVSS 4.0 and its Evolving Role in Vulnerability Management
Adam Dudley, Nucleus VP of Strategy and Alliances, provides some background on the Common Vulnerability Scoring System (CVSS) version 4.0 in this Nucleus conversation. He discusses the improvements made in the new version, the evolving role of CVSS in vulnerability management, the limitations practitioners face, and the future of scoring systems in the context of emerging technologies like AI. The conversation emphasizes the importance of context and quality inputs in effectively utilizing CVSS for risk assessment.
AI Unlocks Ransomware And Deepfake Espionage
Attackers use AI to craft phishing, automate ransomware, and slip deepfakes into job interviews—breaching systems without ever touching a keyboard.
Installing Chrome Dev Tools MCP in Goose
Installing Chrome Dev Tools MCP in Goose.
The enterprise AI crisis: Unsanctioned tools and unenforced policies
Unsanctioned AI tools. Patchy access controls. Unmanaged apps and devices. And of course, compromised credentials. These are the issues revealed in the 1Password Annual Report 2025: The Access-Trust Gap. The report is based on a survey of over 5,000 knowledge workers, IT and security professionals, and CISOs, and it captures a moment of profound technological and cultural transition.
An Identity Security taxonomy for Agentic AI
Agentic AI is a fundamentally new paradigm. AI agents can interact with various tools and act dynamically and probabilistically as they encounter new inputs. That means they end up falling somewhere between an application and a user in terms of how they operate. Indeed, the interaction with other applications is what gives agentic AI its power; however, this also has implications for identity security and access management.
Fortune Names Zenity to the Cyber 60: Owning the Era of AI Security
Defining AI Security: Zenity Named in Fortune’s Cyber 60 If you follow cybersecurity innovation, you’ve probably seen the Cyber60 list - an annual snapshot of the 60 most promising companies shaping the future of security.
Introducing Seemplicity's AI Agents for Exposure Management: A New Era of Action
Security teams don’t struggle to find exposures – they struggle to fix them. The new Seemplicity AI Agents change that. Integrated into the Exposure Action Platform, they combine intelligence and automation to help teams move faster, stay aligned, and reduce risk. From clear findings and ownership mapping to guided fixes and executive insights, Seemplicity’s AI Agents make exposure management truly action-driven.
How Tines helps organizations align with the EU Artificial Intelligence Act
The EU Artificial Intelligence Act (AI Act) introduces the world’s first comprehensive regulatory framework for artificial intelligence. It defines clear rules for how AI systems are built, deployed, and monitored, focusing on risk management, data governance, transparency, and accountability. Any organization offering AI-powered products or services to EU users (or processing EU data) must comply.
Why Your Business Needs an ISO-Certified AI Platform
Do you own a business? Running a business today can feel like a lot. There are so many things to manage, from keeping customers happy to handling endless messages. Everyone wants quick answers, real conversations, and safe service. That is why businesses now use tools like AI SMS and automation. Not all AI platforms are created equal. But when you bring AI into your work, safety and reliability become very important. This is where an ISO-Certified AI Platform comes in.
Seemplicity Releases Four AI Agents to Bring Action to Enterprise Exposure Management
First AI agents purpose-built to help security teams fix exposures up to 4x faster.
StrongestLayer Unveils the Industry's First Inbox-Native Assistant for Real-Time Sender Verification
AI Advisor provides instant verification when employees aren't sure about an email, dramatically reducing security false positives while helping teams safely engage with legitimate new contacts.
Vanta State of Trust 2025: AI Threats Outpace Security Expertise
7 in 10 organisations say the security risks for their company have never been higher. For the majority of companies, AI threats have outpaced their team's expertise to combat them. 8 in 10 are adopting agentic AI to help-but fewer than half have frameworks in place to control it. 78% of security and compliance teams are seeing a reduction in employee burnout thanks to AI and automation tools.
The Human-AI Partnership: Securing the New Dual-Front of Business Risk
The integration of artificial intelligence into the modern workplace represents a paradigm shift in productivity and innovation. From desktops to mobile devices, AI agents are now deeply embedded in daily workflows, augmenting human intelligence and accelerating business processes at an unprecedented scale.
Report: Organizations Are Struggling to Keep Up With AI-Powered Attacks
76% of organizations are struggling to keep up with the sophistication of AI-powered attacks, according to CrowdStrike’s latest State of Ransomware Survey. “Most organizations (87%) consider AI-generated social engineering tactics more convincing than traditional methods,” the report says.
All Clones Aren't Equal: Harmless ChatGPT Wrappers vs. Malicious Fakes
A quick search for “ChatGPT” or “DALL·E” on a mobile app store today reveals dozens of lookalikes. Each promises “AI chat,” “image generation,” or “smart assistance.” Yet beneath these polished logos lies a troubling truth — not all clones are created equal. Some are harmless wrappers that simply connect to genuine APIs. Others are opportunistic adware disguised as AI tools.
Delivering Real-Time Feedback with Bitsight Groma: Dynamic Remediation Now Fully Live
In December 2024, we announced Dynamic Remediation, an initiative that accelerates the feedback of customers' remediation efforts. The goal was simple but ambitious: reduce the time between a remediation and seeing that improvement reflected in Bitsight Security Ratings. This initiative was built in response to direct customer input. You asked for faster validation of your remediation, more transparency, and credit when vulnerable assets were remediated or taken offline.
Navigating the AI Cyber Iceberg: Deepfakes Above, Zero Days Below
Agentic AI is transforming cyber threats from phishing and deepfakes into nonstop zero-day exploits and automated ransomware. Most organizations will struggle to keep pace, but the same AI power can drive autonomous defenses that ultimately shift the balance back to the defenders.
Most AI projects FAILS! #ai #startup #enterpriseai
AI On The Edge: Scaling AI - Part 3 Hosted by Amar Kanagaraj, CEO of Protecto, chats with Manoj Mohan, a veteran AI leader who has built large-scale data & AI platforms for Intuit, Meta, and Apple.
The Key To Detecting AI Threats - CTRLtheThreat Cybersecurity Tips From Cato CTRL
The key to detecting AI threats? Detecting them before they detect you. Tune in to this week's series in which Dolev Attiya, threat researcher and member of Cato CTRL, shares insights about AI malware threats, agent to agent and top ways to stay protected. Subscribe: short.url/aBcXyZ Let’s connect: Instagram: short.url/aBcXyZ LinkedIn: short.url/aBcXyZ X (Twitter): short.url/aBcXyZ TikTok: short.url/aBcXyZ.
How Cybercriminals are using AI - and How to Defend Against It
What happens when the dark side gets its hands on cutting-edge AI — and why might even seasoned defenders find themselves playing catch-up? Welcome back to Razorwire, where I’m joined by Oliver Rochford and Richard Cassidy to discuss how criminals are using AI, what’s actually working and how the threat landscape is changing. We explore how adversaries are using AI, what’s actually working in the wild and how professionals can prepare for the unsettling pace of change.
8 Best Cloud PAM Solutions in an AI World
AI is rewriting the rules of privileged access, but the rise of AI agents is creating a governance crisis. Threats like credential stuffing and privilege escalation are now accelerated by autonomous systems moving faster than humans can react. 82% of companies deploy autonomous AI agents, but 23% of IT teams admit those bots have already been tricked into revealing credentials—and fewer than half have guardrails in place. In modern infrastructure, machine identities now outnumber humans 80:1.
The League Assembled: Reflections from the AI Agent Security Summit
At the AI Agent Security Summit in San Francisco, some of the brightest minds in AI security and top industry leaders gathered to tackle one of the most challenging problems in tech nowadays - how do we secure super smart systems that change at runtime and are designed to think, adapt, and compete? As someone who spends every day turning AI security challenges into tangible solutions, I left the summit both inspired by the innovation on display and concerned by the magnitude of what’s still ahead.
Using LLMs to filter out false positives from static code analysis
Static application security testing (SAST) is foundational to modern application and code security programs. Yet these tools inevitably produce false positives that require manual review. When scanners find vulnerabilities that are not genuine issues, they erode trust, slow down remediation, and make it harder for teams to understand which alerts require attention.
Making AI Less "Wednesday:" A Practical Guide to Using AI in Cyber Defense
Artificial intelligence has only been available for a relatively short period. Still, already many cyber defenders are as frightened as if Jenna Ortega’s Wednesday Addams had whipped her head around and set her dark, dangerous eyes on them. It’s not hard to see why. Machine learning, Gen AI, and Retrieval-Augmented Generation (RAG) are a few of more than 20 new acronyms flooding our industry, with more being added almost every day.
EP 18 - The humanity of AI agents: Managing trust in the age of agentic AI
In this episode of Security Matters, host David Puner sits down with Yuval Moss, CyberArk’s VP of Solutions for Global Strategic Partners, to explore the fast-evolving world of agentic AI and its impact on enterprise security. From rogue AI agents deleting production databases to the ethical blind spots of autonomous systems, the conversation dives deep into how identity and Zero Trust principles must evolve to keep pace.
Meet Jit's AI Agents: The Future of Product Security Work
Application security has become too complex — too many scanners, too much noise, and not enough time. Jit’s AI Agents change that. Built on Jit’s Agentic ASPM Platform, these intelligent agents don’t just detect issues — they think like your best AppSec engineer. They correlate findings across systems, validate real attack paths, generate human-in-the-loop fixes, and continuously monitor what actually matters to your business.
When AI Joins the Cybercrime Underworld: How Far Ahead Are Hackers Now?
In this week's episode, discover how AI-driven attacks are rewriting the rules of cybersecurity. Phishing is nearly impossible to spot, deepfakes target companies, and self-evolving malware is changing the game. Meet the new adversary: artificial intelligence. Watch the full discussion in this week's show.
EP 18 - The humanity of AI agents: Managing trust in the age of agentic AI
In this episode of Security Matters, host David Puner sits down with Yuval Moss, CyberArk’s VP of Solutions for Global Strategic Partners, to explore the fast-evolving world of agentic AI and its impact on enterprise security. From rogue AI agents deleting production databases to the ethical blind spots of autonomous systems, the conversation dives deep into how identity and Zero Trust principles must evolve to keep pace. Yuval shares insights from his 25-year cybersecurity journey, including why AI agents behave more like humans than machines—and why that’s both exciting and dangerous.
Browser Agent Security Risk - ChatGPT Atlas Corporate Adoption Trends
Last Tuesday, October 21st, OpenAI released ChatGPT Atlas, an AI-powered browser that allows users to interact with ChatGPT directly from any browser tab. Throughout last week, the Cyberhaven Labs team tracked its adoption in corporate environments and actively investigated its security vulnerabilities.
AI at Work: Speed, Risk, and Why Simplicity Wins
I’ve been spending a lot of time with teams and customers talking about AI. Not in terms of buzzwords or market predictions, but the real, in-the-trenches work of building software, serving customers, and securing identities and data. The mindset we’ve adopted around AI is simple: you can’t cut your way to great products or great customer experiences. AI isn’t about replacing people or chasing short-term efficiency gains.
The Evolving Role of AI Governance: Turning Risk into Responsibility
This piece is part of a monthly series by Carisa Brockman and Bindu Sundaresan exploring the evolving world of AI governance, trust, and responsibility. Each month, we look at how organizations can use artificial intelligence safely, thoughtfully, and with lasting impact.
Understanding the Impact of AI on User Consent and Data Collection
AI convenience rides on a river of data: text, clicks, images, voices, locations, and metadata you didn’t know existed. The core question is not whether AI uses data but how it collects it, what it infers, and whether people truly agree to that. In other words, the impact of AI on user consent and data collection is not academic. It decides whether your product earns trust or burns it.
AI can do what now?! Accelerating SIEM migration
It’s rare to find a security professional who enjoys the security information and event management (SIEM) migration process. Security teams are often diverted from actively defending their environment to tend to the long, manual, and error-prone migration process.
How AI-Powered Voice Technology (Using Murf AI) Can Enhance Cybersecurity Awareness & Training
No matter how advanced your firewalls or encryption tools are, the weakest link in cybersecurity often remains the human element. Phishing emails, fake voice calls, and social engineering attacks exploit human error more effectively than they exploit code vulnerabilities. To counter this, organizations invest heavily in cybersecurity awareness and training programs.
Geo-Specific Messaging for Campaigns Using Headless CMS and Region Data
Relevant is the name of the game in today's marketing world, and there's no better relevance than location. What works for one set of consumers in one area may trigger cultural sensitivities, non-holidays, and non-seasonal themes in another. That's why a one-size-fits all campaign can go awry and turnoff consumers who expect the same level of personalization that caters to where they live and what they need. Yet, by leveraging geo-specific data based upon the needs of certain locations through a headless CMS, companies can still merge campaign messaging that is local yet globally feasible.
How a Leading Bank Unlocked AI - Without Breaking Data-Sovereignty Laws
In many countries — especially in India and across the Middle East — strict data-sovereignty laws prevent banks and enterprises from using cloud-based AI models like Gemini, GPT, or Anthropic. Sending personal or financial data outside national borders can violate compliance rules, blocking the adoption of AI. This video shows how Protecto helped a leading bank overcome these challenges. By deploying Protecto’s context-aware protection layer inside the bank’s private cloud, the bank could safely use advanced AI models while staying fully compliant.
How to Use Smallppt AI Summary to Summarize Your Documents in Minutes
Picture this: You're buried under a stack of reports, emails, and articles that never seem to end. Each one demands your full attention, but who has the time? That's where Smallppt AI Summary steps in. This tool cuts through the noise, turning hours of reading into quick insights. In this guide, you'll learn how to use Smallppt AI Summary to handle any document fast. By the end, you'll save time and grasp key points without the hassle.
AI-Powered IoT Security: How KeyScaler 2025 Automates Trust Across the Device Lifecycle
In a world where billions of devices now shape our connected reality, IoT security has evolved from an IT problem to a board-level priority. As the iot ecosystem grows—an interconnected network of devices, systems, and infrastructures—comprehensive iot security solutions have become essential to protect, manage, and scale these environments. Yet despite the growing awareness, one challenge remains stubbornly persistent — the management and protection of unmanaged devices.
Securing agentic commerce: helping AI Agents transact with Visa and Mastercard
The era of agentic commerce is coming, and it brings with it significant new challenges for security. That’s why Cloudflare is partnering with Visa and Mastercard to help secure automated commerce as AI agents search, compare, and purchase on behalf of consumers. Through our collaboration, Visa developed the Trusted Agent Protocol and Mastercard developed Agent Pay to help merchants distinguish legitimate, approved agents from malicious bots.
AI Chatbots Aren't Taking Your Jobs: They're Your New Assistants
I have never been one to jump on most technology bandwagons early; I am very pragmatic about what technology can do rather than what it promises. This extends to generative AI. I was not the first to play with ChatGPT and Gemini when they came out in the early 2020s. Maybe it’s because I work in fields that use machine learning very effectively. Even though I was aware of the leap Google made in 2012, I wasn’t eager to dive into the new wave of AI when it first appeared.
Secrets, out: Why workload identity is essential for AI agent security
AI agents aren’t waiting in the wings anymore. They’re approving payments, spinning up cloud resources, and pulling sensitive data at machine speed. Blink, and a swarm of them has already acted a thousand times before anyone can check the logs. But with all that speed and capability comes risk. For many teams, it’s the authentication model—not the tech—that’s breaking.
Data Sovereignty in the Age of AI: Why It Matters and How to Get It Right
Data sovereignty means that data is subject to the laws and governance of the country where it is stored or processed. In simpler terms, if your AI system stores user data in Germany, you’re bound by EU’s GDPR rules — even if your company operates from the U.S. As AI and large language models (LLMs) become central to business operations, data sovereignty is no longer just a compliance checkbox.
Agentic AI Ransomware: What You Need to Know
Brace yourself for agentic AI ransomware. It's a terrifying fusion of cutting-edge tech and malicious intent that's set to redefine cyber threats as we know them. Unlike traditional ransomware, which follows pre-programmed rules, agentic AI ransomware can adapt its behavior in real-time based on its environment and the defenses it encounters.
Cybersecurity Trends in 2026: From AI Defense to Digital Trust
In 2026, cybersecurity has evolved from being an IT concern to becoming one of the most strategic levers of global stability. As artificial intelligence systems become self-learning, quantum computing moves closer to commercialization, and consumer data flows multiply across platforms, cybersecurity is no longer about preventing attacks-it's about maintaining trust in an increasingly automated world.
AI Sidebar Spoofing Attack: SquareX Uncovers Malicious Extensions that Impersonate AI Browser Sidebars
SquareX released critical research exposing a new class of attack targeting AI browsers. The AI Sidebar Spoofing attack leverages malicious browser extensions to impersonate trusted AI sidebar interfaces, which is used to trick users into executing dangerous commands that can lead to credential theft, device hijacking, and password exfiltration.
Downstream Data: Investigating AI Data Leaks in Flowise
Low-code workflow builders have flourished in the AI wave, providing the “shovels and picks” for non-technical users to make AI-powered apps. Flowise is one of those tools and, like others in its category, it has the potential to leak data when configured without user authentication. To understand the risk of misconfigured Flowise instances, we investigated over a hundred data exposures found in the wild.
Key Takeaways for Partners from the Zenity AI Agent Security Summit
Having joined visionary leaders and top practitioners at ZenityLabs’ AI Agent Security Summit in San Francisco, I came away inspired and laser-focused on the incredible opportunities and responsibilities ahead for any organization looking to adopt and secure AI agents.
Building a Flexible AI SOC with Tines Agents
AI-powered SOCs are dominating industry conversations, yet security leaders remain split on whether a truly autonomous SOC can ever exist. Despite certain vendors aggressively marketing fully autonomous SOC solutions, Gartner's analysis "Predict 2025: There Will Never Be an Autonomous SOC" suggests solutions in the market are unlikely to deliver against claims of full autonomy. As someone who has run SOCs, I agree. Full autonomy isn’t the answer.
Seeing the Invisible: Visualizing and Protecting AI-Agent Activity with Exabeam & Google
Artificial intelligence is no longer just an emerging technology in security operations and modern SIEMs. AI agents now enrich alerts, drive investigations, generate reports, and increasingly act as extensions of human analysts. But as with any powerful technology, new risk surfaces follow. From the Exabeam perspective, every entity in your environment deserves protection.
Is ChatGPT Safe? Understanding Its Privacy Measures
“Is ChatGPT safe” is the headline question that nearly every team asks the moment AI enters the room. The better version is: safe for what, and under which controls? Safety is not a single switch. It combines technical security, data privacy, content safeguards, governance, and how your people use the tool. This guide breaks down how ChatGPT handles data, where privacy risks actually come from, and the practical steps to operate safely at home and at work.
How to set up the Fetch MCP Server in Amazon Kiro
How to set up the Fetch MCP Server in Amazon Kiro.
Attackers Abuse Grok to Spread Phishing Links
Threat actors are abusing X’s generative AI bot Grok to spread phishing links, according to researchers at ESET. The attackers achieve this by tricking Grok into thinking it’s answering a question, and providing a link in its answer. “In this attack campaign, threat actors circumvent X’s ban on links in promoted posts (designed to fight malvertising) by running video card posts featuring clickbait videos,” ESET says.
Why We Built Evo - From My Heart
I’ve spent my career building and defending. I’ve seen the beauty of innovation and the brutality of cyber warfare. I’ve sat shoulder-to-shoulder with security engineers and platform teams in the trenches at 3AM responding to state-backed attacks where context and speed meant survival. In those moments, one truth becomes painfully clear: With AI, that gap just became a chasm. Agentic AI didn’t bend the rules of software — it rewrote them. Code now evolves in real time.
Unleashing AI 60sec 01
Join us for Day 6 of the Netwrix Innovation Week Podcast Series, part of Cybersecurity Awareness Month. In this episode, Grady Summers, Jordan Violet, Paul Stephens, and Whitney Daily share how innovation at Netwrix is powered by curiosity, collaboration, and accountability. They explore how AI is transforming both our technology and the way we work — from product development to customer experience.
From Path Traversal to Supply Chain Compromise: Breaking MCP Server Hosting
We found a path traversal vulnerability in Smithery.ai that compromised over 3,000 MCP servers and exposed thousands of API keys. Here's how a single Docker build bug nearly triggered one of the largest AI supply chain attacks to date.
Netwrix's Culture of Innovation- Unleashing AI
Netwrix’s culture of innovation thrives on curiosity, collaboration, and accountability. From integrating AI across development and customer experience to fostering cross-team creativity, innovation here moves sideways as much as it does down. During Innovation Week, leaders explore how AI and the 1Secure Platform are redefining data and identity security for the future.
LLM guardrails: Best practices for deploying LLM apps securely
Prompt guardrails are a common first line of defense against client-level LLM application attacks, such as prompt injection and context poisoning. They’re also a critical component of a full defense-in-depth strategy for LLM security at the infrastructure, supply chain, and application level. The specific guardrails that teams implement depend highly on use case, but they are typically designed to.
30+ due diligence questions to ask AI vendors in a security review
Introducing third-party AI into your systems can be a milestone for productivity and growth, but it also expands your attack surface in unpredictable ways. If your AI vendors have weak controls, threats like data poisoning and algorithm failure can ripple through your systems.
The Shift in SOC Escalation: From Manual to AI-Powered
Patrick Orzechowski (also known as “PO”) is Torq’s Field CISO, bringing his years of experience and expertise as a SOC leader to our customers. PO is a seasoned security veteran with a deep understanding of the modern security landscape. You can find him talking to SOC leaders and CISOs from major brands at cybersecurity events around the world. Every SOC has an escalation process — but not every SOC has one that is truly effective.
The Smartest Way to Start a Cybersecurity Career | Marius Poskus
Marius Poskus shares practical advice for those breaking into cybersecurity. He explains why beginners should start in Security Operations Centres (SOCs) rather than chasing rare pen‑testing roles. Building defensive skills first creates a stronger foundation and opens the door to any cybersecurity path—even in an AI‑driven future.
What Technologies Make Online Money Transfers Secure?
A 2022 report by the Bank for International Settlements suggests that about $7.5 trillion is transferred daily around the globe. For context, the U.S. federal government spent $7.01 trillion in its 2025 fiscal year, which ran from October 2024 to September 2025, according to the U.S. Treasury Fiscal Data. Basically, this implies that about 7% more money is traded on the foreign exchange market daily than the U.S federal government spends annually.
AI Privacy and Security: Key Risks & Protection Measures
AI systems learn from vast amounts of data and then generalize. That power is useful and also risky. Sensitive data can slip into prompts. Proprietary datasets can be memorized by models. Attackers can steer models to reveal secrets or corrupt results. Meanwhile, your company is probably experimenting with multiple AI tools at once. That creates hidden data flows and inconsistent controls. “Traditional” app security isn’t enough.
Unlocking AI's full value: CIO and CISO perspectives
AI investment is accelerating across industries. Many organizations have either fully or extensively embedded AI in their business processes today. Yet, 40%* of IT teams still express a lack of trust in AI-generated outcomes. They remain in reactive mode, held back by disconnected systems, manual work, and rigid tools. What’s missing?
AI On The Edge: Scaling AI #ai #shorts
Hosted by Amar Kanagaraj, CEO of Protecto, chats with Manoj Mohan — a veteran AI leader who has built large-scale data & AI platforms for Intuit, Meta, and Apple.
Under The Light: ExPRT.AI
n this episode of Under the Light, we take a closer look at ExPRT.AI—CrowdStrike’s approach to vulnerability prioritization that cuts through the noise. You’ll see how ExPRT.AI moves beyond static scoring models like CVSS, EPSS, and KEV by asking a better question: Will this vulnerability actually be exploited? We’ll break down: The three signals attackers rely on—and so does ExPRT.AI What makes a vulnerability worth their time A real-world story from Intermex that shows what this looks like in action And how all of it comes to life inside the Falcon platform.
Zenity Labs & MITRE ATLAS Collaborate to Advance AI Agent Security with the First Release of Agent-Focused TTPs
Zenity Labs worked in collaboration with MITRE ATLAS to incorporate the first 14 agent-focused techniques and subtechniques, extending the framework beyond LLM threats to cover the unique risks posed by AI agents.
AI at Work: How Egnyte Intelligence Goes Beyond Generic Tools
AI isn’t the future, it’s here. Your CEO’s talking about it in board meetings. Your manager wants to know if it'll save time or just add more work. And you? You're wondering if it's going to make your job easier or just add noise. The excitement is justified. McKinsey says nearly 80% of companies are using AI somewhere in their business. But here's what most people miss: very few have gotten it to work across their entire organization. Why?
CVE-2025-6515 Prompt Hijacking Attack - How Session Hijacking Affects MCP Ecosystems
JFrog Security Research recently discovered and disclosed multiple CVEs in oatpp-mcp – the Oat++ framework’s implementation of Anthropic’s Model Context Protocol (MCP) standard. Among these, CVE-2025-6515 stood out due to its potential threat of hijacking MCP session IDs. Within the context of MCP we’ve dubbed this new attack technique “Prompt Hijacking“. Your browser does not support the video tag.
Are we only one prompt away from using AI for evil? #cybersecurity #ai #infosec
Are we only one prompt away from using AI for evil? In this week's episode of The Cybersecurity Defenders Podcast, we explore a concerning reality about AI and cybersecurity. As AI becomes more prevalent within the threat actor community, exploits are being developed faster than humans can patch. The tools that help developers debug code can just as easily be used to weaponize vulnerabilities.
AI Software Development Solutions: 7 Key Trends to Watch
Artificial intelligence isn't just a buzzword anymore-it's a game-changer. From startups to large enterprises, AI software development solutions are reshaping the way companies operate, innovate, and connect with customers. Imagine having a system that can analyze millions of data points in seconds, predict trends before they happen, or even draft content for marketing campaigns automatically. That's the power AI brings to the table.
AI Cybersecurity Risks in 2026: The Ultimate Guide to Data Protection
*According to Gartner, by 2026, over 80% of enterprises will have used generative AI APIs or deployed GenAI-enabled applications, up from less than 5% in 2023. This rapid adoption introduces a new and complex attack surface.
Half of Young People in the UK Cite Non-Consensual Deepfakes as a Top Fear
A new survey found that 50% of UK residents aged 16 to 34 cite deepfake nudes as their top worry related to AI technology, SecurityBrief reports. The survey, published by VerifyLabs, found that 35% of Brits across all age groups said sexualized deepfakes of themselves or their children were their top concern. “The study indicated that more than one in three respondents (36%) are also worried about the impact deepfakes could have on their family and friends,” SecurityBrief writes.
How to Add MCP Servers to Kiro (Amazon)
In this video, we’ll walk you through how to add MCP servers into Amazon Kiro step-by-step. You’ll learn how to connect the Brave Search MCP server for web search capabilities and the Snyk MCP server for security and dependency scanning — all inside Kiro.
From Deepfakes to Fake Identities: How Threat Actors Are Weaponising AI
CYJAX has identified a growing trend of AI-based tools being developed and shared across threat actor forums for fraudulent and cybercriminal purposes, highlighting the need for proactive monitoring and defence against evolving AI-driven threats.
The Rise of AI Abuse: A story of Criminal GPTs, DeepFakes, Data Breaches, AI Malware, and Agentic Sleeper Agents
In late 2022, AI exploded into the mainstream with OpenAI’s ChatGPT, starting an AI-fuelled shift in both everyday life and the cyber threat landscape. Just as quickly as everyday users rushed to adopt the technology, so did threat actors. From generating phishing pretexts to writing malware and crafting deepfakes, AI systems have become both a new tool and a new target.
#258 - Intel Chat: Oracle EBS, Storm-2603, North Korean IT infiltration & LLM poisoning study
In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community. Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.
The Essential Definition of AI Agents: Tools, APIs, and Workflow Automation
In this video segment from Securing AI Part 3: AI Agents – Use Cases and Security, A10 security experts, Jamison Utter, Diptanshu Purwar, and Madhav Aggarwal explore the topic of securing AI agents, which they define as systems that perceive, decide, and act. Diptanshu Purwar starts with a fundamental definition of an AI agent, clearly distinguishing it from a simple chatbot and setting the stage for the security challenges discussed in the series.
OpenAI Data Privacy Compared: OpenAI, Claude, Perplexity AI, and Otter
AI assistants and search tools are woven into daily work. But not all providers handle your prompts, files, or transcripts the same way. Small policy details determine whether your data trains future models, how long it’s kept, and what an auditor will see. If you use these tools in regulated environments, the safest choice to ensure OpenAI data privacy often depends on your specific channel: consumer app, enterprise account, or API.
How Graylog Uses Explainable AI to Help Security Teams
Security teams face an endless stream of alerts, false positives, and investigation backlogs. Every second counts, yet many AI-driven tools promise to handle everything for you that leaves analysts uncertain about how conclusions were made. Graylog takes a different path. The company develops assistive AI that helps analysts make faster, smarter calls with context, transparency, and control. No black boxes. No mystery logic.
How AI is Transforming Machine Identity Management for IoT and OT Devices
In 2025, machine identities outnumber human identities by a factor of 40 to 1. Every connected sensor, gateway, vehicle, and robot depends on a digital credential to prove its authenticity and secure its data. These digital credentials serve as unique identifiers for devices, enabling secure communications and access control.
Lead the Shift: Modernizing Your SOC with Agentic AI and Human-in-the-Loop Autonomy
Threats are faster, budgets are tighter, and boards demand answers. Your legacy SOC model can't keep up.
Featured Post
The Autonomous Shield: Cybersecurity in the Age of Automation and AI
As businesses adapt to an ever-evolving threat and regulatory landscape, it is widely accepted that the next big challenge lies in scaling cybersecurity to keep pace. In fact, organizations have never experienced the volume, velocity, and severity of attacks that we witnessed in 2024 and are continuing to see in 2025. You only have to look at recent high-profile cyberattacks on major UK retailers and manufacturers to appreciate how devastating such attacks can be, with consequences rippling across entire sectors.
Snyk's MCP Server in ACTION! (Windsurf)
Snyk's MCP Server in ACTION! (Windsurf)
OAuth for MCP - Emerging Enterprise Patterns for Agent Authorization
Why agents break the old model and require rethinking traditional OAuth patterns.
How Falcon Exposure Management's ExPRT.AI Predicts What Attackers Will Exploit
Nearly 40,000 vulnerabilities were disclosed in 2024.1 Security teams are overwhelmed, especially those relying on outdated tools. ExPRT.AI, the native intelligence engine embedded in CrowdStrike Falcon Exposure Management, is built to help teams prioritize which vulnerabilities are most urgent for them.
Reflections from the AI Agent Security Summit in San Francisco
Last week, I had the honor of emceeing the AI Agent Security Summit in San Francisco, a gathering of some of the brightest minds exploring the intersection of artificial intelligence, security, and human responsibility. Having moderated a panel at the first Summit in New York City earlier this year, stepping into the emcee role this time around was a different experience, but just as enjoyable. On-demand recordings of the sessions will be available soon.
How to demonstrate your AI security posture: A step-by-step guide
As organizations integrate AI into their everyday systems and operations, the scrutiny on the risks it introduces is higher than ever. According to Vanta’s State of Trust Report 2024, more than half of organizations express concerns over security risks compounded by AI. The growing unease highlights a new business expectation: you must be able to prove your organization is using AI securely and responsibly.
How to Install an MCP Server in Windsurf
How to Install an MCP Server in Windsurf.
Copilot Readiness - Tighten Data Controls to Scale Secure AI
Join us for Day 3 of the Netwrix Innovation Week Podcast Series, part of Cybersecurity Awareness Month. In this episode, Farrah Gamboa and Hanan Levy discuss how organizations can prepare for Microsoft 365 Copilot by strengthening governance around data and identities. They share insights on preventing oversharing, reducing excessive permissions, and closing compliance gaps before deploying AI tools.
AI: What's the future smell like? | AI Avenue Ep 6
In the season finale, Craig and Yorick take a big whiff of the future. What is our world going to look like? Which future do you want? The sit down with thought leaders from Cloudflare, @IBM, Science Fiction author, and a 9 year-old vibe coder/comedian named Fay. The future is bright if you want it to be.
Netwrix Innovation Week: Copilot Readiness - Prepare your Hybrid Data Estate to Unleash AI
Microsoft 365 Copilot can supercharge productivity, but without guardrails it can also surface sensitive data to the wrong people. Risks like oversharing, excessive permissions, and compliance blind spots become amplified in the age of AI. Netwrix helps organizations prepare for safe adoption by uniting data and identity security. Watch our podcast episode to learn how to build real Copilot readiness.
When Convergence Gets Real: Winning on Time, Trust, and Talent in the Cyber Arms Race
Forescout CEO Barry Mainz is joined by Lt. General Robert J. Skinner, USAF, retired. Together, they will explore how convergence across people, technologies, and missions is reshaping cybersecurity in both the public and private sectors. From the pressure to deliver AI-driven cost savings, to navigating the emerging threat posed by quantum, to the cultural shift required for true operational convergence, Barry and Bob unpack what it really takes to lead in today’s threat landscape. At the center of it all: how time, not money, is becoming the most scarce and strategic resource in cyber defense.
Passive Income Meets Predictive Tech: Where Investing and AI Collide
For decades, the idea of passive income sounded like a dream - money flowing in while you slept, worked, or traveled. But in 2025, that dream is no longer reserved for the ultra-wealthy or early adopters. It's been democratized by data, automation, and artificial intelligence. We've reached the point where algorithms don't just trade stocks or suggest portfolios; they actually learn from behavior, sentiment, and even emotion. Predictive technology is reshaping how we invest, spend, and build wealth - creating a new intersection where automation meets autonomy.
Automation Anywhere + Protecto: How Leaders Secure GenAI Data
GenAI data security is now a critical concern for every enterprise. In this insightful episode of AI On The Edge, Dinesh Chandrasekhar, Founder and Chief Analyst at Stratola, sits down with Amar Kanagaraj (CEO, Protecto.ai) and Steve Shah (SVP Products, Automation Anywhere) to explore the future of data privacy, agentic automation, and securing LLMs in enterprise settings. Learn how two of the industry's top innovators are setting AI guardrails, preventing sensitive data leaks, and embedding privacy-by-design into large-scale automation.
How AI is Transforming Application Security Testing
AI is revolutionizing software development, enabling teams to build and ship faster than ever. But this speed introduces new risks at an unprecedented scale. Your current application security testing program must evolve to keep pace. For security leaders, the challenge is clear: how do you secure applications without slowing down innovation? This article provides a practical analysis of how artificial intelligence is fundamentally transforming application security testing (AppSec).
Kovrr Launches AI Risk Governance Suite
Kovrr, a global leader in cyber and AI risk management, today announced the launch of its AI Security Risk Governance suite, a comprehensive solution developed to help enterprises at any phase of adoption harness the value of GenAI responsibly.
Cybersecurity, Cyber Recovery and the Fight Against AI
Cybersecurity has always been a high-stakes game of cat and mouse. Defenders build taller walls, and attackers find longer ladders. But with the rapid rise of artificial intelligence (AI), the very nature of this conflict is changing. AI is no longer just a tool for defenders; it’s being weaponized by cybercriminals to automate and scale attacks with unprecedented speed and sophistication.
Agentic AI The Next Evolution in Cybersecurity
Agentic AI: The Next Evolution in Cybersecurity Welcome to a groundbreaking episode of the Silverfort AI podcast, where we explore the future of cybersecurity powered by Agentic AI. This isn’t just another tech talk — it’s a front-row seat to the next wave of intelligent defence.
We Need to Teach Our AIs to Securely Code
I have been writing about the need to better train our programmers in secure coding practices for decades, most recently here and here. At least a third of data compromises involved exploited software and firmware vulnerabilities and we are on our way to having over 47,000 separate, publicly known vulnerabilities this year. There are at least 130 new vulnerabilities learned and publicly reported every day, day after day. That is a lot of exploitation. That is a lot of patching.
Data Overload in the AI Era: Why Aggregation and Prioritization Are Non-Negotiable
AI was supposed to make our lives easier. Vendors promised it would cut through complexity, detect threats faster, and lighten the load on already overworked security teams. But if you’ve been paying attention, you know the truth: AI has given us more noise than ever. Corey Brunkow from Horizon3.ai joined Nucleus co-founder and CPO, Scott Kuffer, to unpack this problem during a recent webinar. AI helps attackers move faster, but on the defensive side, it’s created a flood of data.
How to Ensure Data Privacy with AI: A Step-by-Step Guide
AI sits in everyday workflows: assistants answering customer questions, copilots helping developers, and RAG apps searching internal knowledge. That means personal and sensitive data flows through prompts, vector stores, and integrations you didn’t have a year ago. Privacy can’t be an end-of-quarter compliance push anymore. It needs to live in your pipelines and apps the way logging and monitoring do.
Securing AI Applications in the Cloud: Shadow AI, RAG & Real Risks | Mend.io
What does it take to secure AI-based applications in the cloud? In this episode, host Ashish Rajan sits down with Bar-el Tayouri, Head of Mend AI at Mend.io, to dive deep into the evolving world of AI security. From uncovering the hidden dangers of shadow AI to understanding the layers of an AI Bill of Materials (AIBOM), Bar-el breaks down the complexities of securing AI-driven systems. Learn about the risks of malicious models, the importance of red teaming, and how to balance innovation with security in a dynamic AI landscape. What is an AIBOM and why it matters The stages of AI adoption.
Hybrid Detection Architecture: Rules, ML, and LLMs in Concert
Security teams are drowning in complexity. Modern networks generate millions of events daily, attackers constantly shift tactics, and the tools meant to protect us often work in isolation, blind to what their neighbors are seeing. That mythical single solution that would catch everything? It's sitting in the graveyard next to perpetual motion machines and honest vendor pricing.
MCPTotal Launches to Power Secure Enterprise MCP Workflows
MCPTotal, a comprehensive secure Model Context Protocol (MCP) platform, today announced its flagship platform to help businesses adopt and secure MCP servers.
Tanium Ushers in New Era of Autonomous Endpoint Management Powered by Agentic AI and Real-time Intelligence
Customers experience real-time value with Tanium Ask Agent which transforms IT operations and security by automating complex workflows with precision, scale and speed.
A CISO's Guide to the Business Risks of AI Development Platforms
The tools designed to build your next product are now being used to build the perfect attack against it. Generative AI platforms can spin up a pixel-perfect replica of your brand's login page in minutes, launching high-fidelity phishing campaigns at a scale and speed that legacy security models cannot handle. This isn't an emerging threat; it's an industrialized phishing engine that’s already being weaponized against businesses.
Snyk and Cognition partner to enhance security for AI-native development
Today, Snyk is excited to announce a new partnership with Cognition that significantly advances security within the software development lifecycle, validating our "Secure at Inception" model. This collaboration introduces new integrations, Snyk for Devin and Snyk for Windsurf, which directly embed Snyk Studio's security intelligence into Cognition's AI-native developer tools.
What is shadow AI and what can you do about it?
Organizations across industries are actively investing in AI to streamline operations, boost productivity, and stay ahead in competitive markets. However, most proceed with caution when rolling out new AI solutions internally as they need to meet standards for AI security, compliance, and responsible use through rigorous testing and assessments. At the same time, teams may occasionally adopt AI solutions outside formal channels to simplify their workload.
Building a Privacy-First AI Stack for Highly Regulated Industries
In a bid to quickly join the AI race, enterprises are steadily pouring time and money to adopt it. While designing a new AI tool, security and compliance are often an afterthought for developers and product managers. For industries that don’t handle sensitive data, AI adoption does not necessitate embedding strong privacy controls. However, highly regulated sectors like healthcare, finance, or government defence contractors can’t afford to launch without adhering to regulations.
Securing Autonomous B2B Workflows with AI Firewalls and Guardrails
A10 security experts Jamison Utter, Madhav Aggarwal, and Diptanshu Purwar discuss the importance of context-aware security for AI agents.
Reinventing Data & Identity Security in the age of AI
Introducing our latest innovations, Netwrix Innovation Week, and our new corporate identity.
AI Risk Visibility: The Foundation of Responsible AI Governance
General-purpose AI (GenAI) and other artificial intelligence (AI) systems are now completely embedded within business processes across the market. The once purely imagined technology is significantly influencing operations and reshaping the very processes under which high-level decisions are made.
Featured Post
Adapting to an AI-Driven Threat Landscape: The Future of Cyber Defence
As cyber threats grow more advanced, with AI becoming a tool for both cyber attack and defence, the challenge facing businesses has never been more complex. Emerging technology is now making watertight cybersecurity practice a core pillar of operational resilience, data integrity, and customer trust. The path forward lies in strategic AI integration, harnessing its potential to automate defence and accelerate detection, while maintaining transparency, governance, and trust.
Agentic Marketplaces: Why Visibility Will Define the Next Decade of Digital Commerce
The web is entering a new phase. Artificial intelligence is beginning to act on behalf of people rather than simply assisting them. AI agents are now browsing, comparing, and buying, taking on the decisions that once sat firmly in human hands. This marks the start of the agentic marketplace, an emerging ecosystem where autonomous systems interact, negotiate, and transact across digital platforms.
How agentic AI in security changes the game: Benefits and challenges
As AI and automation become the norm, more and more organizations lean on them to streamline decision-making processes across business functions, including security. Traditional AI solutions take on repetitive and time-consuming tasks, freeing teams to focus on higher-level strategy and growth.
96 machines per human: The financial sector's agentic AI identity crisis
What if you hired about 100 new employees for every one you already had, and then, on a whim, gave them all admin rights? Sure, these fresh hires would likely be brilliant and hungry to make an impression. But they wouldn’t always know the rules. Some would make mistakes. Others might take liberties. Before long, it’d be bedlam. That’s what’s happening right now inside financial services institutions.
Why Traditional Security Fails Against AI and Headless Systems
A10 Networks security expert Jamison Utter breaks down the astonishing reality of modern internet traffic: over half of all traffic carriers' processes are no longer human—they're from headless systems, such as bots, crawlers, and AI.
Shadow AI and the New Data Defense Paradigm: Insights from Our Data Defense Forum
Last month, we brought together some of the brightest minds in cybersecurity for our Data Defense Forum event. As someone who's been in the trenches of data security for years, I walked away from these conversations with a renewed sense of urgency and optimism about where we're headed.
Securing Agentic AI on Mobile
AI adoption is accelerating at an unprecedented rate. A recent McKinsey survey found nearly 80% of enterprises now regularly use generative AI, outpacing the early adoption of both the personal computer and the public internet. Agentic AI—autonomous agents capable of planning, reasoning, and acting on a user’s behalf—has likewise moved from pilots to production, with 79% of senior executives reporting adoption.
How AI Changes the Way Influencers Create Content
Influencers used to rely on instinct. They posted what felt right, read comments, and hoped engagement would confirm the guess. Now, artificial intelligence reshapes that entire rhythm. With tools like instagram following tracker, creators no longer move blindly. They can trace patterns in audience behavior, spot trends forming in real time, and adjust before attention drifts elsewhere.
How to Add MCP Servers to Windsurf
In this video, I’ll show you exactly how to add MCP (Model Context Protocol) servers to Windsurf step-by-step. Whether you’re setting up your first server or connecting custom ones for development, this guide will walk you through the entire process clearly and quickly.
How AI is transforming Elastic's Security team
Spending hours creating threat intelligence reports is a thing of the past with our InfoSec AI Assistant, built on Elastic’s Search AI Platform. Mandy Andress, our CISO, shares how the AI Assistant has transformed the way our security team gathers, documents, and reports on threats — cutting report-building time by over 75%. Learn how we’re using generative AI to build threat intelligence reports quickly, assess relevance and risk faster, and shift from reactive defenses to proactive security strategies.
The Security Paradox of AI Video Generation: Why ChatGPT's Sora2 Access Demands New Digital Verification Standards
The launch of OpenAI's Sora2 model has fundamentally transformed the landscape of AI-generated video content. As the successor to the groundbreaking Sora, this advanced text-to-video AI system can now produce photorealistic video sequences up to 20 seconds long from simple text descriptions.
Best Practices for Protecting Data Privacy in AI Deployment in 2025
AI is no longer a side project. It now powers support desks, analytics, knowledge search, decision support, and developer tooling. That reach makes data privacy a daily engineering task, not an annual policy exercise. Teams that succeed treat privacy like performance or reliability: they design for it, measure it, and improve it with each release. This guide captures Best Practices for Protecting Data Privacy in AI Deployment that work across industries.
9 AI risks that could impact your organization-and how to mitigate them
As AI becomes more user-friendly and performance-focused, organizations are increasingly adopting it into their systems to streamline elaborate workflows. However, the rapid pace of adoption means that teams often implement AI models before fully mapping the security and compliance implications that they bring. According to Vanta’s State of Trust Report, more than 50% of organizations view AI risks as a growing concern today.
Exabeam Nova: The First Autonomous Multi-Agent AI for Cybersecurity
Security teams are in an AI arms race — facing massive data volumes, insider threats, and adversaries using AI to find vulnerabilities and launch faster, smarter attacks. Exabeam changes the game with Exabeam Nova, the first autonomous multi-agent AI purpose-built for security operations. Fully embedded within the New-Scale Security Operations Platform, Exabeam Nova delivers measurable outcomes across threat detection, investigation, and response.
A TikTok for Deepfakes? OpenAI Could Be Making It a Reality
OpenAI, the people behind ChatGPT, have launched an updated AI video- and audio-generation system with fascinating, and terrifying, implications for the spread of deepfakes.
The Hidden Cybersecurity Threat: Securing the Human-AI Relationship
The conversation about AI in cybersecurity is missing the point. While the industry has been focused on the emergence of AI-generated phishing emails, perhaps a far more profound shift has been somewhat ignored. Your workforce is no longer just human. It's a hybrid team of people, AI agents, copilots, assistants and digital partners. This creates a new and complex attack surface. The next great security challenge isn't just protecting a human from a machine.
SquareX Shows AI Browsers Fall Prey to OAuth Attacks, Malware Downloads and Malicious Link Distribution
As AI Browsers rapidly gain adoption across enterprises, SquareX has released critical security research exposing major vulnerabilities that could allow attackers to exploit AI Browsers to exfiltrate sensitive data, distribute malware and gain unauthorized access to enterprise SaaS apps. The timing of this disclosure is particularly significant as major companies including OpenAI, Microsoft, Google and The Browser Company have announced or released their own AI browsers. With Chrome and Edge alone representing 70% of the browser market share, it is very likely that the majority of consumer browsers in the future will be AI Browsers.
Regulatory Frameworks Affecting AI and Data Privacy Explained
AI is now embedded in everyday operations across support, finance, healthcare, and the public sector. As models touch more sensitive data, the legal landscape is moving just as quickly. The center of gravity has shifted from annual checklists to continuous compliance in production. This guide explains the regulatory frameworks affecting AI and data privacy in 2025, how they fit together, and how to turn their requirements into practical, repeatable controls your teams can run every day.
Anatomy of a Modern Threat: Deconstructing the Figma MCP Vulnerability
Threat researchers recently disclosed a severe vulnerability in a Figma Model Context Protocol (MCP) server, as reported by The Hacker News. While the specific patch is important, the discovery itself serves as a critical wake-up call for every organization rushing to adopt AI. This incident provides a blueprint for a new class of attacks that target the very infrastructure powering the AI Agent Economy. To understand the risk, we must first look at the mechanics of this emerging threat.
Why agentic AI poses an identity security problem #shorts #identitysecurity #cybersecurity
Why agentic AI poses an identity security problem.
A step-by-step guide to AI security assessments [With a template]
As artificial intelligence becomes deeply integrated into business operations, organizations have started feeling the pressure to keep up. According to Vanta’s 2025 survey, more than 50% of the organizations report being overwhelmed by the speed of AI adoption and growing compliance obligations. This issue is aggravated by the fact that AI tools evolve faster than governance policies can adapt, potentially leaving complex gaps for security teams to fill.
Identity automation in the age of agentic AI with Matthew Chiodi
Defender Fridays - Identity Automation in the Age of Agentic AI with Matthew Chiodi Join us for this session of Defender Fridays as we explore identity automation in the age of agentic AI with Matthew Chiodi, Chief Strategy Officer at Cerby. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
Is Claude Sonnet 4.5 the BEST AI Coding Tool?!
Is Claude Sonnet 4.5 the BEST AI Coding Tool?!
Agentic AI Security: Introducing the AI Firewall/Guardrail
As organizations adopt powerful AI agents for complex B2B workflow automation, securing their actions and ensuring compliance becomes paramount. A10 Networks' security expert, Diptanshu Purwar, explains the foundational need to integrate AI agents into existing governance platforms, which involves utilizing established enterprise security practices, such as role-based access and robust policy management, tailored explicitly for agents.
The Evolution of AI Technology: Shaping a Smarter Digital Era
Artificial Intelligence (AI) has evolved from a futuristic concept to an everyday reality, influencing nearly every corner of our lives. From entertainment to business automation, AI technology has become the backbone of the digital transformation we see today. Tools like Free Unlimited Video Face Swap illustrate how AI can merge creativity and innovation, allowing users to seamlessly blend faces in videos with stunning accuracy. This once-complex task now happens in seconds, showcasing how machine learning and computer vision have revolutionized media production.
Miggo Security Named a Gartner® Cool Vendor in AI Security
Miggo Security, pioneer and innovator in Application Detection & Response (ADR) and AI Runtime Defense, today announced it has been recognized as a Gartner Cool Vendor in AI Security. To us, this recognition underscores Miggo's mission to close the detection-to-mitigation gap that plagues security teams today by providing comprehensive, fast, and precise analysis and response for what applications actually do at runtime.
Only 1% Get Enterprise AI Security Right - Are You One of Them?
Most companies think their AI is secure — but the truth is far more complex. In this episode of AI On The Edge, Amar Kanagaraj (Founder & CEO, Protecto) and Sabrykrishnan Loganathan (Strategy Advisor, Peloton Interactive) break down what really goes into building secure, trustworthy AI systems for enterprise. You’ll learn: This is your masterclass on enterprise AI security. Don’t be in the 99% — watch and join the top 1%.
Future Trends in AI and Data Privacy Regulations for 2025
AI is no longer a pilot project. In 2025 it sits inside support desks, developer tools, clinical workflows, loan underwriting, and public services. The regulatory landscape has shifted from paper policies to real-world evidence in production. Buyers, auditors, and regulators want to see controls in place where data flows and models are operational.
Closing the credential risk gap for AI agents using a browser
AI agents increasingly are completing real tasks in the browser, acting on behalf of employees, and connecting to the same systems humans rely on to get work done. This introduces a new security problem: AI agents require credentials – passwords, API keys, and one-time codes – to operate. As agents proliferate, the risk surface increases and it brings a variety of identity and access management challenges.
Rethinking Security Posture Assessments
Security posture assessments are a foundational part of any security program. They’re how organizations take stock of their defenses, evaluate coverage, and identify gaps. But in practice, many posture assessments have become stuck in a pattern. They follow the same checklist, occur on a set routine, and result in a static document that often doesn’t translate into real change. The problem isn’t that posture assessments are irrelevant.
Securing AI agent access to credentials: the making of 1Password Secure Agentic Autofill
Enabling AI agents to securely use credentials in a browser is a challenging problem to solve. In this video, 1Password Head of Ecosystems and Partnerships Dennis Kromhout van der Meer discusses these challenges and the steps 1Password took to ensure that agents and LLMs never have access to your credentials when using Secure Remote Autofill.
Cyber Risk Still #1: Why AI Is Raising the Stakes - and the Opportunities
If you’re wondering what keeps business leaders up at night, the latest Aon Global Risk Management Survey has a clear answer: cyber attacks and data breaches. Once again, they top the list as the risk to organizations worldwide — and the problem isn’t getting any smaller. In fact, Aon’s Cyber Risk Report shows incidents jumped 22% in 2025 alone.
Securing the Human-AI Boundary: Why the Future of Cybersecurity Must Train People and AI Agents
The cybersecurity landscape is undergoing its most dramatic transformation since the dawn of the internet. AI has become integral to business operations. Goldman Sachs estimates that agentic AI/AI agents will account for approximately 60% of software market value by 2030, and Gartner predicts that 40% of enterprise applications will integrate task-specific AI agents by 2026, up from less than 5% today.
From Bottleneck to Enabler: A New Approach to API Security in the Age of AI
AI adoption has fundamentally redefined the role of APIs. They are no longer just conduits for data; they have become the “AI action plane” for autonomous systems. Every AI workflow, agent, and tool call now rides on an API, exposing a critical truth: you cannot secure AI without first securing your APIs. The H2 2025 State of API Security report reveals that this dependency is dangerously outpacing current security practices.
AI can do what now?! Agentic AI is the autonomous future coming to security operations
Agentic AI in cybersecurity promises to transform workflows as we know them, enabling a new level of personalization, automation, efficiency, and innovation. It’s already being deployed by security teams for use cases like autonomous threat detection and response, advanced threat hunting, automated incident investigation, real-time fraud protection, and more. So, how is agentic AI working overtime to help security analysts build a more resilient security posture?
Securing AI agents: privileged machine identities at unprecedented scale
Earlier in 2025, an AI agent named Claudius made headlines when it insisted it was human, promising to deliver products in “a blue blazer and red tie.” Quirky? Sure. But beneath the strange admission sat a more important truth: today’s AI agents aren’t just chatbots with puppet-like ambitions, whose untruths would be betrayed by a growing nose. They’ve evolved into actors with real credentials, access, and autonomy.
Get Access to Claude Sonnet 4.5 in VSCode!
Get Access to Claude Sonnet 4.5 in VSCode!
How AI Will Transform Manufacturing-And What You Can Do Today
Welcome to another episode of AI On The Edge, where we explore how AI is transforming manufacturing—and how you can stay ahead of the curve. In this exclusive conversation, Amar Kanagaraj (Founder & CEO of Protecto) sits down with Vicky Sareen, a Principal Leader at Forbes Marshall, to uncover.
What Does It Really Mean to Be AI-Native? Insights from a Silicon Valley AI Leader
What does it really mean to be AI-native? In this episode of AI On The Edge, host Amar Kanagaraj (Founder & CEO, Protecto) chats with Manoj Mohan — a veteran AI leader who has built large-scale data & AI platforms for Intuit, Meta, and Apple. Manoj shares practical insights on: Whether you’re a CTO, engineer, or AI enthusiast, you’ll walk away with actionable lessons on how to build and scale AI responsibly.
Artificial Intelligence in Business: Value, Risk, and How to Put It to Work Safely
Leaders do not lack information; they lack the right signal at the right time, presented in a way they can trust. That is the promise of artificial intelligence in business, and also the source of its headaches. Used well, AI turns scattered activity into timely visibility. Used carelessly, it creates security questions, unpredictable outputs, and nervous legal teams. This guide lays out where AI reliably adds value inside a company, the security decisions that matter most, and a practical path to pilot, measure, and scale without drama.
Demystifying AI Agent Security
Let me be the first to say it, this space - AI agent security and governance - can be confusing. When I joined Zenity, I was new to “agents”; so new that I thought we were talking about endpoint agents (to be fair, my background is in XDR/SIEM). Laughs aside, if you’re still figuring it out, you’re in good company.
What is MCP. Demo with Dina Kozlov (Paypal, Stripe, and more)
Clip from a episode from late May 2025 about MCP (Model Context Protocol) servers. Cloudflare Product Manager Dina Kozlov goes into live MCP demos, practical use cases, and a look at how companies like Stripe, PayPal, and Anthropic are getting involved.
AI Adoption Is Outpacing Governance: Conversations on Managing AI Risk
Executives everywhere are under pressure to deploy AI fast — but our recent roundtable on AI risk, hosted by TEISS, revealed a growing concern: AI adoption is outpacing governance, and organisations are taking on more risk than they realise. While most enterprises have mature technical controls, many are missing visibility into how AI is being used — and by whom.
AI-Generated Attacks: What are They and How to Avoid Them?
AI-generated attacks, such as social engineering, phishing, deepfakes, malicious GPTs, data poisoning, and more, are disrupting the current security landscape speedily. But there are ways to avoid them and strengthen our defences with miniOrange IAM solutions.
How Exabeam Detects LLM Abuse for Google Cloud Model Armor
In this demo, see how the Exabeam New-Scale Security Operations Platform integrates with Google Cloud Model Armor to detect and stop abuse of large language models (LLMs). You’ll learn how Exabeam: Monitors AI activity for suspicious or malicious behavior Uses advanced analytics to spot LLM misuse in real time Helps security teams enforce responsible AI use policies Watch how Exabeam and Google Cloud work together to provide stronger visibility, detection, and protection against emerging threats targeting LLMs.
Verifiable AI: Policy Management for Next-Gen AI Security
As AI agents increasingly automate complex B2B workflows, how do organizations ensure security and compliance? In this segment, A10 Networks' security experts, Jamison Utter, Diptanshu Purwar, and Madhav Aggarwal, dive into the critical steps for securing AI deployments. Diptanshu emphasizes the importance of integrating AI agents into existing governance platforms, leveraging systems such as role-based access control and policy management.
Security Leaders Cite AI-Driven Phishing Attacks as a Top Concern
A new report has found that nearly 40% of security leaders believe their organizations are least prepared for phishing and other social engineering attacks, Help Net Security reports. According to the report from VikingCloud, these concerns are driven by the increasing use of AI tools to assist in cyberattacks. “Generative or agentic AI-driven phishing attacks (51%) are leadership teams’ top concern when it comes to new cyberattack techniques,” the report says.
An AI/ML Deep Dive with Luke Wolcott
This week on the podcast, we bring on WatchGuard's head of MDR data science Luke Wolcott to discuss the evolution of machine learning and artificial intelligence in cybersecurity. We dive into the differences in common (and uncommon) machine learning models, the pros and cons of supervised vs unsupervised learning, and why some of the coolest things happening in AI aren't the ones you hear about in the news.
AI agents in financial services: The hidden org chart
AI agents are quickly becoming “first-class citizens” in financial services, mimicking human behavior and holding privileged access that rivals employees. Yet unlike people, they don’t appear on your official org chart. The financial services sector already lives in a state of constant tension: the race to adopt new technologies for a competitive edge often faces off with the duty to preserve customer trust earned over decades of reliability, regulation, and security.
The AI Revolution: Embracing the Future of eDiscovery
The eDiscovery landscape is undergoing a profound transformation, driven by the rapid evolution of artificial intelligence (AI). What was once a labor-intensive, manual process is now being revolutionized by technologies capable of analyzing vast volumes of data with speed, precision and insight. AI is not just a buzzword; it’s a catalyst for smarter, faster and more defensible legal workflows.
Privacy Concerns with AI in Healthcare: 2025 Regulatory Insight
Healthcare has always been one of the toughest environments for maintaining privacy. Now add AI assistants, retrieval-augmented generation, and multimodal inputs like clinical images and voice notes. Sensitive information travels farther and faster than ever before, and the fallout from a single leak can be devastating, affecting clinical, legal, and reputational aspects. The question for 2025 is simple: how do we harness the advantages of AI without compromising private health data?
LLM Security in 2025: Risks, Mitigations & What's Next
Large language model (LLM) security refers to the strategies and practices that protect the confidentiality, integrity, and availability of AI systems that use large language models. These models, such as OpenAI’s GPT series, are trained on vast datasets and can generate, translate, summarize, and analyze text. However, like any complex software component, LLMs present unique attack surfaces because they can be influenced by the data they process and the prompts they receive from users.
Is This the Best Coding Model in the World? Claude Sonnet 4.5
In this episode of our AI Coding Tools series, we test Claude Sonnet 4.5 to see if it can build a secure note-taking app. The model claims to be the best in the world — but does it live up to the hype? We’ll cover how it codes, where it shines (or struggles), and how it stacks up against other AI coding assistants.
The Usage of AI by Threat Actors
CYJAX has conducted research into the known use of AI on social media for fraudulent activities, uncovering how malicious actors exploit these technologies to deceive users and spread misinformation.
6 Ways Technology Strengthens Supply Chain Compliance and Security
More than 80% of global trade by volume moves through maritime routes, according to the United Nations Conference on Trade and Development. Each container crossing borders carries not just goods, but pages of documentation, compliance checks, and security verifications. Managing all this manually leaves room for costly mistakes and unnecessary delays.
How AI Is Reshaping Cybersecurity in K12
It is first period in a busy school district. Teachers are opening their learning management systems to take attendance, preparing lesson slides, and answering a few messages from parents. Students are logging into Chromebooks after sneaking in a final Snap before leaving their phones in lockers. In the finance office, payments are being processed.
Beyond the Buzzwords | Our Vision for a Secure Digital Future
This Cybersecurity Awareness Month, learn why always on security is key in a world of AI-powered threats.
8 fundamental AI security best practices for teams in 2025
Organizations worldwide are increasingly developing or implementing AI-powered tools to streamline operations and scale efficiently. However, the benefits come with unpredictable risks unique to AI that need to be mitigated with the right safeguards. One of the biggest AI security challenges is the lack of formalized oversight. According to Vanta’s State of Trust Report, only 36% of organizations have AI-informed security policies in place or are in the process of building them.
Inside Protecto: The Technology Powering Context Security for AI
In this video, we take you under the hood of Protecto’s technology stack and show how it powers context-aware security for AI—while hiding the complexity behind simple APIs. At the core are two intelligence layers: You’ll also see how Protecto’s DeepSight engine, entropy-based tokenization, secure vault, and inference-level APIs deliver enterprise-scale security, compliance, and auditability. Protecto enables enterprises to safely unlock their data for GenAI, copilots, and Agentic workflows — without leaks, oversharing, or loss of AI capability.
The Hidden Data Compliance Risk in AI Agents at Financial Institutions
Artificial intelligence is reshaping financial services, from fraud detection to personalized banking assistants. But with innovation comes risk. AI agents—particularly those powered by large language models (LLMs)—are increasingly being embedded into financial workflows. While they promise efficiency, they also introduce a new layer of data compliance challenges.
AI Learning: It's copying everything we do!!! | AI Avenue: Ep 4
Don’t you hate it when your robot hand co-host tries to hijack your show? Yorick makes his OWN version of AI Avenue, prompting a conversation about ethics and learning in AI. Craig reaches out to experts like Amanda Haskell from @anthropic-ai to discuss how we can all use AI more responsibly. AMECA from @EngineeredArtsLtd makes a cameo to get Yorick in line. And Nick from @heygen_official swings by to make a new Craig Avatar, ethically.
The 4 Best Online AI Courses from UK Universities: A Comprehensive Guide for 2025-26
This article shares the top 4 AI courses designed by leading UK universities to prepare students for a career in the fast-paced world of artificial intelligence. Keep reading to explore these courses.
Elastic Security Explained: Transparency, AI, and the Future of Threat Hunting
Elastic’s James Spiteri joins John Hammond to dive deep into the evolution of Elastic Security, from the ELK stack’s early days to today’s full-fledged, unified SIEM, XDR, and cloud security solution powered by agentic AI and automation. They discuss free tools, open detections, and how Elastic is making cybersecurity more accessible and collaborative for everyone.
AI security posture management (AI-SPM): All information in one place
As AI adoption grows, so do the related risks. Organizations are actively looking for strategies to secure their AI systems. According to Vanta’s State of Trust Report, 62% of organizations plan to boost investments in AI security in the next 12 months. However, another recent survey on AI governance reveals that more than half of organizations find it challenging to keep up with AI security developments.
Zenity Joins the Microsoft Security Store: Securing AI Agents Everywhere, Together
We’re thrilled to share that Zenity is included in the unveiling of the Microsoft Security Store Partner Ecosystem. The Security Store is a new marketplace offering from Microsoft that brings together trusted, curated security solutions and AI agents to help organizations navigate the evolving landscape of cybersecurity in the age of AI. The Microsoft Security Store is a strategic leap forward in how security teams discover, deploy, and operationalize technologies that protect their environments.
Beyond Traditional AppSec: Navigating the New Frontier of AI Security with Mend AI
Hear from Bar-El Tayouri, Head of Mend AI, about the urgent need for a new approach to securing AI-driven applications. From understanding novel AI components and their risks to implementing a comprehensive AppSec program, this episode provides actionable insights for organizations building with AI.
How a Digital Bank Reduced Shadow AI Risk by 80% - Without Blocking Innovation
When a fast-scaling digital bank began seeing widespread employee adoption of generative AI tools like ChatGPT and Gemini, their security team faced a growing dilemma: how do you protect sensitive data without shutting down innovation?
Empowering Safe GenAI Adoption at a 3,600-Employee Fintech - And Stopping 20+ Data Leaks a Day
Despite having modern DLP and CASB tools in place, they lacked the behavioural insights and real-time context needed to guide employee use of GenAI tools. Shadow AI use was growing, and SecOps lacked clear visibility into which incidents required intervention.
AI Meets Edge Device Security: Securing Agentless Devices in Modern Connected Environments
In 2025, the edge has become the new frontier of digital transformation. From industrial robotics and autonomous vehicles to energy grids and smart hospitals, mission-critical operations now depend on distributed, intelligent edge systems. Yet this shift has created a profound security challenge. Many of these connected devices are agentless — they cannot host traditional security software or be managed through standard IT frameworks.
What is Agent2Agent (A2A) Protocol and How to Adopt it?
Imagine autonomous agents negotiating and acting on your behalf—no manual hand-offs, just an efficient, policy‑driven communication. That’s the promise of Google’s Agent2Agent (A2A) Protocol, unveiled at Google Cloud Next in April 2025. Developed with input from over 50 partners, A2A is now open-sourced under the Apache 2.0 license and governed by the Linux Foundation.
Building Trust in AI: KnowBe4's Journey Toward ISO 42001 Certification
At KnowBe4, everything we do is built on a foundation of innovation and trust. As we bring more artificial intelligence (AI) into our human risk management platform, we believe it’s essential to be transparent and responsible every step of the way. That's why we're proud to announce that we are pursuing ISO 42001 certification, the world's first standard for managing AI systems.
When AI agents become admins: Rethinking privileged access in the age of AI
From resetting passwords and approving workflows to pulling HR data and orchestrating cloud infrastructure, AI agents now perform tasks that previously required a human with privileged access. AI has moved beyond the realm of passive chatbots into autonomous, persistent operations, performing work on behalf of an individual or entity. Like it or not, that makes AI agents a new part of your workforce. They hold credentials, trigger workflows, and make their own decisions.
CrowdStrike's Fall 2025 Release Defines the Agentic SOC and Secures the AI Era
We are living through the fourth industrial revolution: the age of AI. Just as with the steam, electricity, and the digital revolutions that preceded it, this leap forward requires a parallel leap in security. AI is transforming how businesses operate and how adversaries attack. They are moving at machine speed, compressing the defender’s response window from weeks to mere seconds.
AI security: A comprehensive guide for evolving teams
The AI boom has introduced intelligent tools into most industries, not just in tech-first organizations. But the rising adoption also opens the door to new risks. Vanta’s AI governance survey found that 63% of organizations rate data privacy and protection as the top concern with AI, followed by security and adversarial threats at 50%. These numbers emphasize how urgently organizations want to prioritize defenses for AI-specific attack vectors.
AI Code Review in 2025: Technologies, Challenges & Best Practices
AI code review leverages artificial intelligence models and machine learning techniques to analyze and provide feedback on source code, automating and improving the traditional code review process. It is crucial for software development workflows, offering significant advantages to developers and teams. AI code review can scan for bugs, style violations, security vulnerabilities, and other issues.
CTI Roundup: SystemBC, ShinyHunters, AI-obfuscated Phishing
This week, Tanium’s Cyber Threat Intelligence (CTI) team investigates SystemBC, a large-scale proxy botnet that’s leveraging compromised virtual private server (VPS) infrastructure to support cybercriminal operations, including ransomware and credential theft. Next, the team looks at ShinyHunters—a financially motivated data extortion group that’s now targeting enterprise cloud applications.