Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Modernizing Vendor Risk for the AI Era

See how Riverside County transformed vendor risk from a manual, time-consuming process into a streamlined, data-driven operation that speeds decision-making, reduces risk, and enables innovation. Also hear about their approach to managing emerging AI risks, with practical, actionable lessons other security teams can apply. Interested in finding out more about UpGuard?

The New Era of Digital Experience: How AI-Driven 3D Visualization Is Transforming Product Design and Marketing

In the race to capture consumer attention, brands are shifting from flat, static media to immersive digital experiences-and 3d visualization is proving to be one of the most profitable moves they can make. By enabling customers to explore products from every angle, customize options in real time, and experience lifelike simulations before purchasing, companies are seeing higher engagement, lower product returns, and a measurable boost in conversion rates.

AI Data Loss Risks In Jira You Can't Ignore

Artificial Intelligence is everywhere nowadays. It helps teams to be more productive, but at the same time, it can threaten your critical project management data. The introduction of AI into Jira opened up new paths for attackers to exploit, new vulnerabilities coming up internally, and human errors. So, in this article, let’s speak about AI data loss in Jira and what measures to take to protect your sensitive data in Jira Cloud.

Don't Let AI Put Your Jira Data at Risk

Artificial Intelligence is everywhere nowadays. It helps teams to be more productive, but at the same time, it can threaten your critical project management data. The introduction of AI into Jira opened up new paths for attackers to exploit, new vulnerabilities coming up internally, and human errors. So, in this article, let’s speak about AI data loss in Jira and what measures to take to protect your sensitive data in Jira Cloud.

Cybersecurity in Healthcare: Protecting Patient Data in the Age of AI, IoMT, and Ransomware

Over the past decade, the global healthcare sector has undergone a sweeping digital transformation. Electronic Health Records (EHRs) moved to the cloud, hospitals adopted remote telemetry systems, pharmacies automated workflows, and AI-powered diagnostics entered day-to-day clinical practice. The result is a faster, more connected, and more data-rich healthcare ecosystem. But this connectivity has a cost.

Advanced Data Tokenization: Best Practices & Trends 2025

Breaches got faster. Architectures got messier. And data stopped living in tidy tables. Modern stacks push personal and regulated data through microservices, data lakes, event streams, vector stores, and LLM prompts. Encryption still matters, but it protects containers, not behaviors. As soon as an app decrypts a record, risk comes roaring back.

MCP ROI in a New Era of AI Orchestrated Threats

Security leaders spent most of the past year testing AI driven security automation. Many discovered that the promise of fully autonomous SOC operations collided with the reality of hallucinations, opaque recommendations, and inconsistent outcomes. McKinsey research now shows that more than 80 percent of organizations have not realized meaningful results from gen AI programs.

The Genesis Mission: A New Era of AI-Accelerated Science and a New Security Imperative

Innovation has always been the engine of American advancement. With the launch of the Genesis Mission, the White House is signaling a new era of AI-accelerated scientific discovery. This executive order directs the Department of Energy to build an integrated, national-scale AI platform designed to unlock scientific breakthroughs across biotechnology, energy, materials, quantum systems, and beyond.

EP 20 - Why agentic AI is changing the security risk equation

As enterprises embrace agentic AI, a new security risk equation emerges. In this episode of Security Matters, host David Puner sits down with Lavi Lazarovitz, VP of Cyber Research at CyberArk Labs, to unpack how AI agents and identity security are reshaping the threat landscape. Learn why privileged access is now the fault line of enterprise security, how attackers exploit overprivileged AI agents, and what security teams must rethink before scaling AI.

Snyk Log Sniffer: AI-Powered Audit Log Insights for Security Leaders

Snyk empowers organizations to build fast and stay secure. As security and engineering teams scale their use of Snyk across the enterprise, understanding what's happening across your group and organizations becomes critical–from API integrations and user access patterns to policy changes and security events. However, raw audit logs alone can be overwhelming and difficult to interpret. Security leaders need instant visibility into critical events, risk patterns, and user activity.

AI hype & the future of SecOps, what's changed in 30 years? With Erik Bloch from Illumio [271]

On this episode of The Cybersecurity Defenders Podcast we speak with Erik Bloch, VP of Security at Illumio, about better tools to combat burnout rate and discuss the reality of AI in security. Erik Bloch has 30+ years of information and cyber security experience, both as an IC and as a leader of teams. “People first” has always been his approach. He has led entire security and IT functions at smaller companies, and been the CISOs leading big teams at larger orgs.

Enterprise PII Protection: Two Approaches to Limit Data Proliferation

As enterprise data moves across applications, databases, and analytics pipelines, uncontrolled proliferation of PII increases compliance risk and a potential breach. IT leaders and product managers are often struggling to find the best way to protect data. Protecto Vault helps organizations contain this risk by centralizing PII governance and offering two powerful architectural models to minimize data exposure – the Tokenization Model and the Centralized Profile Model.

EP 20 - Why agentic AI is changing the security risk equation

As enterprises embrace agentic AI, a new security risk equation emerges. In this episode of Security Matters, host David Puner sits down with Lavi Lazarovitz, VP of Cyber Research at CyberArk Labs, to unpack how AI agents and identity security are reshaping the threat landscape. Learn why privileged access is now the fault line of enterprise security, how attackers exploit overprivileged AI agents, and what security teams must rethink before scaling AI. Packed with real-world examples and actionable insights, this is a must-listen for anyone meeting the challenges of AI and cybersecurity.

19 AI Risk Leaders Driving Enterprise Transformation

‍ AI has moved from experimentation to everyday infrastructure, shaping decisions and workflows across nearly every industry. However, in the rush to harness its speed and efficiency, many enterprises adopted GenAI and other AI systems faster than they built the structures necessary to govern them. The result is an all-too-familiar pattern of powerful technology being deployed widely before its risks are fully understood, let alone managed. ‍

How To Combat AI-Enhanced Social Engineering Attacks

Artificial intelligence (AI) has supercharged social engineering. Global management consulting firm McKinsey & Company reported a 1,200% global surge in phishing attacks since the rise of generative AI in the latter half of 2022. And it’s not just the number of attacks that’s climbing; it’s also the success rate. Arctic Wolf’s Human Risk Behavior Snapshot: 2nd Edition reveals that nearly two-thirds of IT and security leaders self-reported falling for a phishing attempt.

Find the Invisible: Salt MCP Finder Technology for Proactive MCP Discovery

The conversation about AI security has shifted. For the past year, the focus has been on the model itself: poisoning data, prompt injection, and protecting intellectual property. These are critical concerns, but they miss the bigger picture of how AI is actually being operationalized in the enterprise. We are entering the era of Agentic AI. AI is no longer just generating text; it is taking action. Autonomous agents read customer tickets, query databases, update financial records, and trigger workflows.

Simplifying credential security on ChatGPT Atlas

AI-powered browsers are transforming how people use the internet. They help you move faster, automate tasks, and simplify how you operate on the web. As this innovation continues, 1Password is committed to meeting our customers wherever they are in their AI journey. That means giving you the confidence to explore new AI tools, without sacrificing the security, privacy, or ease of use you depend on. And today, that includes OpenAI’s new ChatGPT Atlas browser.

Nicole Perlroth & Garrett Hamilton at UCI - How AI Changes the Security Operating Model

Moderated by Nicole Perlroth, this session at UC Irvine’s Digital Leadership Agenda 2026 surfaces a foundational reality in cybersecurity: Most organizations lack a clear, empirical understanding of how their security is actually deployed. Our Co-founder & CEO Garrett Hamilton outlines: Why proactive security remains difficult — because accuracy depends on conversations, assumptions, and fragmented knowledge across IT and security teams.

Top 10 NHI Management Tools in an AI World

In today’s AI-driven world, machine identities are multiplying faster than humans can manage them. Every API key and automation script is a digital identity, often with standing access privileges that attackers can exploit through leaked credentials or misconfigured policies. Recent research shows that non-human identities (NHIs) now outnumber human users by more than 80:1 across enterprise cloud environments.

Cato CTRL Threat Research: HashJack - Novel Indirect Prompt Injection Against AI Browser Assistants

HashJack is a newly discovered indirect prompt injection technique that conceals malicious instructions after the # in legitimate URLs. When AI browsers send the full URL (including the fragment) to their AI assistants, those hidden prompts get executed. This enables threat actors to conduct a variety of malicious activities.

How Can Digital Strategies Support Patient Retention in Healthcare?

Picture this: your team works hard to bring in new patients, but many never return for a second visit. They slip through the cracks, and you only feel the loss when revenue starts to dip. The truth is, keeping patients is often easier and cheaper than finding new ones-you've already done half the work. The challenge is staying connected in a way that feels natural, not pushy. The good news? A few smart digital tools can help you keep patients engaged, informed, and coming back, all without adding more work to your staff's day.

Agentic experience are reshaping enterprise AI #ai #shorts

In this video breakdown, we unpack the three pillars of a successful agentic experience: Autonomy — agents that act independently Guardrails — to keep decisions safe and data protected Integration + Context — so agents work seamlessly across tools without losing meaning At Protecto, we’re building the guardrails that keep your agents autonomous, context-aware, and enterprise-ready.

Autonomous Security is Here: A Deep Dive into OpenAI's GPT-5 Powered Threat Hunter

Every time a developer hits “commit,” the global software ecosystem takes a collective breath. Why? Because in today’s fast-paced development cycle, the sheer volume of code changes—and the 1.2% of commits estimated to introduce a bug—means that tens of thousands of new vulnerabilities emerge every single year. Security teams are in a relentless, exhausting race against time, trying to find and fix flaws before malicious actors do.

The Efficiency Shift: How AI Turns Noise into Clarity

Artificial intelligence (AI) is everywhere in cybersecurity marketing. Real AI is not about detecting more. It is about making decisions faster and more precisely, so that humans can spend their time on what truly matters. Endpoint security efficiency is the ability to deliver maximum protection with minimum operational effort, turning noise into clarity and alerts into meaningful incidents. AI is the engine that makes this possible.

Why User Consent Is Revolutionizing LLM Privacy Practices

Ask most people what “consent” means and you’ll hear about a banner that asks to collect cookies. That was yesterday. Modern LLMs ingest emails, tickets, docs, chats, and logs. They create embeddings, reference snippets with retrieval, and sometimes fine-tune on past conversations. If you do not wire user consent into each of those steps, you either violate laws, lose user trust, or both. That is why user consent is revolutionizing LLM privacy practices.

Platformization in Security: Why "One Platform to Rule Them All" Doesn't Exist

One platform to rule them all? Not quite. As Jay Wilson puts it, security stacks behave like a rubber band — always stretching between broad platforms and best-of-breed tools. No enterprise runs on a single vendor. But no one survives seventy, either. The real objective is coherence: a custom platform built from what your business already owns. That’s where Reach fits. ⇢ Unifies disparate controls into one operational view⇢ Bridges gaps as stacks expand or contract⇢ Turns your actual environment into a cohesive, measurable platform.

8 Best AI Software Development Companies to Create Your Dream AI Product

Finding the right partner to build your AI product can feel like searching for a needle in a haystack. You need more than just developers who can write code. You need a team that understands machine learning architectures, knows how to train and deploy models at scale, and can navigate the complexities of data pipelines, model governance, and real-world AI implementation.

Why AI Security Monitoring Is Becoming Essential for Modern Enterprises

Enterprises today face growing challenges in keeping their workplaces safe. Traditional CCTV systems, while widely used, fall short because they only record events for later review. By the time an incident is noticed, the damage is often done. In fact, 60% of respondents fear their organizations are inadequately prepared to defend against AI-powered attacks, showing just how critical smarter security has become. AI-powered surveillance cameras change this approach.

Shadow AI: From Hidden Threat to Organizational Challenge

This blog post is adapted from a recent episode of The Cloudcast podcast featuring Rohan Sathe, CEO and co-founder of Nightfall AI. Listen to the full conversation here. Your employees are uploading company documents to ChatGPT. Your healthcare teams are transcribing sensitive call recordings and feeding them into LLMs. Your finance department is pasting confidential spreadsheets into publicly accessible AI tools. And unless you have visibility into these workflows, you have no idea it's happening.

How AI Companies Can Use Data Lineage To Stop IP Theft - And Win When It Goes To Court

The 21st-century gold rush is the AI boom, and it is producing a wave of emerging AI companies. Being the first to build and apply AI in novel ways successfully is the difference between success and failure. Because of this, companies can find themselves making a trade-off between time-to-market and security.

Considerations for Microsoft Copilot Studio vs. Foundry in Financial Services

Financial services organizations are increasingly turning to AI agents to drive productivity, automate workflows, and deliver an innovative edge. Within the Microsoft ecosystem, two agentic platforms, Copilot Studio and Foundry, are paving new paths for agent development and deployment. Despite their shared vision for enterprise AI, their differences have important implications for user groups, agent capabilities, and security priorities.

The Evolving Role of AI Governance: Turning Risk into Responsibility

This article is part of a monthly LevelBlue series that explores the evolving world of AI governance, trust, and responsibility. Each month, we look at how organizations can use artificial intelligence safely, thoughtfully, and with lasting impact. Artificial intelligence has moved from being an experiment to becoming an expectation. It now shapes how decisions are made, how customers are supported, and how innovation happens. As AI grows in influence, so does the need to manage it wisely.

The Evolution of Cybersecurity Automation and AI Adoption

Automation has become the foundation of modern cybersecurity operations. What was once a tool for efficiency is now critical. In parallel, artificial intelligence is no longer just a buzzword; it is reshaping how organizations detect, analyze, and respond to threats. The new Cybersecurity Automation and AI Adoption Report explores how global security leaders are approaching these technologies, what’s driving adoption, and where organizations still face challenges.

How AI-Driven Attacks Are Putting Gmail Security At Risk

Gmail has always been a common target for cybercriminals, and with the arrival of advanced AI tools, the threat level has increased significantly. Now, attackers no longer rely on generic phishing emails or scam methods. They are using AI to create convincing messages and imitate real support agents to make attacks look more genuine. This change in attack patterns has made Gmail users more vulnerable because they can’t differentiate between real and fake messages.

How Enterprise CPG Companies Can Safely Adopt LLMs Without Compromising Data Privacy

A major publicly traded CPG company wanted to adopt LLM to improve performance marketing, analytics, and customer experience. However, the IT team blocked AI usage and uploads to external AI tools as interacting with public AI models could expose sensitive brand, consumer, and financial data. This isn’t an isolated problem. It’s a pattern across enterprises: business agility collides with security requirements.

Inside the Agent Stack: Securing Azure AI Foundry-Built Agents

This blog kicks off our new series, Inside the Agent Stack, where we take you behind the scenes of today’s most widely adopted AI agent platforms and show you what it really takes to secure them. Each installment will dissect a specific platform, expose realistic attack paths, and share proven strategies that help organizations keep their AI agents safe, reliable, and compliant.

Are we on the path to AI defenders vs. AI attackers?

Swarms of AI bots are now being used to continuously test security perimeters. In this episode, Michael Baker, VP and Global CISO at DXC Technology, discusses the shift to AI-driven security operations. He recently met with startups working on agentic pentesting to find vulnerabilities before bad guys do. The advantage? You control these bots and get immediate feedback. The threat? Adversaries are building the exact same capabilities right now.

Proactively Identify and Eliminate Defensive Weaknesses with Cybersecurity Domain-Specific AI

AI is everywhere. I live in San Francisco, and a day doesn’t go by that I don’t see a billboard, an advertisement on the side of a bus, or a tech bro’s hoodie with two big letters on it: AI. It’s no different in cybersecurity marketing – AI terminology is everywhere. But too often, it’s tacked on as a buzzword – a thin layer washed on top of existing security tools, with little real impact. This makes it tricky to decipher what’s real and what’s hype.

Multimodal Attacks and Model Drift: The Future of AI Exploitation

Multimodal Attacks and Model Drift: The Future of AI Exploitation A10 security experts Jamison Utter, Diptanshu Purwar, and Madhav Aggarwal discuss the critical vulnerabilities emerging from multimodal AI agents (systems that perceive, decide, and act) and the absolute need for security mechanisms external to the Large Language Model (LLM) itself. The experts dive into why traditional security is failing and what the next evolution of defense must look like.

AI Watermark Remover & Image to Video AI: Powerful Tools for the Visual Age

The pace of digital content creation is faster than ever, and success depends on standing out. No matter your field-marketing, design, e-commerce, or education-the demand for clear, versatile, and engaging visuals is universal. Two advancements now empower creators to meet this demand: ai watermark remover and image to video ai. Here's how these tools can transform your content, boost productivity, and unlock fresh storytelling opportunities.

The Future of Firmware in Edge Computing and Embedded AI

Here's what's happening right now: intelligence is migrating closer to the action. Your smart devices? They're not sitting around waiting for some distant cloud server to tell them what to do anymore. They're making decisions on the spot, right where the work happens. This transformation is fundamentally altering how intelligent systems get built and deployed. Consider this: the global AI in embedded systems market is heading toward US$26.2 billion by 2026.

Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers

SquareX released critical research exposing a hidden API in Comet that allows extensions in the AI Browser to execute local commands and gain full control over users' devices. The research reveals that Comet has implemented a MCP API (chrome.perplexity.mcp.addStdioServer) that allows its embedded extensions to execute arbitrary local commands on users' devices, capabilities that traditional browsers explicitly prohibit. Concerningly, there is limited official documentation on the MCP API.

Come see us at Microsoft Ignite: Live Demos & How We Optimize Your Security Stack

We're live. Cheyenne, Walter, and Cain are giving demos, answering questions, and showing how Reach helps teams optimize their security stack. Level up your knowledge and get some loot on this side quest. Come see us: Microsoft Ignite — San Francisco Booth 4037 November 18–21, 2025.

What Is a Large Language Model (LLM)?

The history of computing is marked by sea change moments; those times when the world seems to shift into a new possibility space almost overnight. ENIAC. The personal computer. The World Wide Web. The smartphone. And now, AI. While the term “AI” has been applied to many new (or re-branded) services and products, the underlying technology that makes most of them feel like magic is the large language model (LLM).

Cloudflare Firewall for AI Explainer and Demo

AI is powerful, but without protections in place, it’s risky. In this explainer and demo, you'll learn how you can secure your AI-powered applications with Cloudflare Firewall for AI. The demo will show Firewall for AI detecting and mitigating threats like PII exposure, unsafe/toxic content, prompt injection, and jailbreak. Further, you'll see Cloudflare’s powerful analytics capability and how Cloudflare's AI agent, Cloudy, can help investigate threats and build and deploy Firewall for AI security policies.

How KnowBe4 Uses AI Efficiently to Get the Best Results

Using the right tool for the job is always better. Anyone who does DIY projects around the home knows how using the right tool can dramatically make the job you are doing far easier. Use the wrong tool, and that task suddenly becomes a burdensome nightmare. And after over 38 years in cybersecurity, I know that applies to cyber defense strategies, but I add one more axiom: Use the dumber, faster thing first for best results. Dumber things are usually faster at blocking a large number of things.

How AI offers defenders even more growth opportunities with Michael Baker from DXC Technology [269]

On this episode of The Cybersecurity Defenders Podcast we speak with Michael Baker, VP, Global Chief Information Security Officer at DXC Technology, about his optimistic outlook on the impact of AI in cybersecurity.

Apono Releases MCP Server for Admins

We’re excited to announce the launch of our MCP server for Apono administrators — giving security and DevOps teams the ability to surface complex access data instantly, without the endless API queries, spreadsheets, or manual digging that slows everyone down. Admins are the guardians of access. But when they need answers like “Which users are included in this access flow?” or “Who has access to production?”, getting that data today can take hours.

Prompt Injection: The Hidden Threat Hijacking Your LLMs (and How to Stop It)

Generative AI is rapidly transforming the way we work. The large language models (LLMs) that power tools like ChatGPT and Claude are immensely powerful, capable of providing us with research data, detailed insights, and even deep analysis of documents and data sets, all performed through simple, text-based prompts. However, these prompts have unfortunate side effects for the IT professionals assigned to protect sensitive and proprietary data from cyber attacks.

How to Build AI Agents That Don't Break: Design, Risk & Defense Explained #aiagents #AISecurity

Agentic AI is evolving fast — but building agents that are *both* effective and secure is still a major gap for most teams. In this webinar, Mend.io’s Bar-El Tayouri and AI21 Labs’ Yehoshua “Shuki” Cohen share a practical, deeply technical walkthrough of what it really takes to design and defend AI agents. You’ll learn: This is a tactical, no-fluff guide for anyone building AI agents in production engineers, security leaders, and innovators shaping the next wave of AI systems.

Bits AI Security Analyst: Automate Cloud SIEM investigations

Datadog's Bits AI Security Analyst transforms the way security teams handle investigations by autonomously triaging Datadog Cloud SIEM signals. Built natively in Datadog, it conducts in-depth investigations of potential threats and delivers clear, actionable recommendations. With context-rich guidance for mitigation, security teams can stay ahead of evolving threats with greater efficiency and precision.

When your AI Assistant Becomes the Attacker's Command-and-Control

Earlier this month, Microsoft uncovered SesameOp, a new backdoor malware that abuses the OpenAI Assistants API as a covert command-and-control (C2) channel. The discovery has drawn significant attention within the cybersecurity community. Security teams can no longer focus solely on endpoint malware. Attackers are weaponizing public and legitimate AI assistant APIs and defenders must adjust.

Unlocking Microsoft E3/E5 Security: How Reach Finds Hidden Gaps and Automates Remediation

New product tour who dis Most teams aren’t getting the full value out of their Microsoft E3/E5 stack — not because the tools aren’t powerful, but because the configurations are complex, scattered, and hard to operationalize. Reach maximizes your Microsoft security investment: Interrogating your current Microsoft security configurations→ Reach evaluates the current capabilities of the existing E3/E5 environment, analyzes how the current licenses are being utilized, and identifies opportunities to leverage E5 features to enhance the organization’s security posture.

Can Image-to-Video AI Replace Traditional Video Shoots?

Video has become the backbone of digital communication. Brands, creators, educators, and businesses rely heavily on video to reach audiences online. But traditional video shoots require time, budget, and resources that are often difficult to sustain, especially in high volume content environments. As artificial intelligence continues to evolve, image-to-video AI is emerging as a compelling alternative. With the ability to turn a single static photo into a fully animated video, this technology is reshaping how visual content is produced.

Why 95% AI Fails #shorts #ai

AI On The Edge – Where Intelligence Meets Risk: Part 3 Building an enterprise AI app is NOT the same as building a traditional application, and this is why so many AI projects fail. In this conversation, we break down why 95% of enterprise AI implementations fail, what teams misunderstand about AI systems, and how to actually build AI that works in real organizations.

GPT5 Pulls Ahead on Secure Code While Rivals Stall

AI coding assistants are evolving quickly. But are the latest models any better at writing secure code? Our October 2025 analysis brings fresh data on how newer large language models (LLMs) stack up against their predecessors, and the results reveal both progress and persistent gaps. This update builds on our July 2025 GenAI Code Security Report, which tested over 100 LLMs across four major programming languages.

Attackers are integrating LLMs directly into malware #cybersecurity #ai #malware #infosec #podcast

Threat actors have moved beyond using AI to speed up operations. They're now embedding large language models directly into malware. In this Intel Chat, Matt Bromiley and Chris Luft discuss Google's Threat Intelligence Group findings on malware families like PromptFlux and PromptSteal. These threats query LLMs mid-execution to dynamically alter behavior, obfuscate code, and generate system commands on demand.

Trust at enterprise scale: Introducing Vanta's Agentic Trust Platform

Building trust is critical for today’s most ambitious businesses. Why? Because companies viewed as trustworthy grow up to four times faster. Yet earning and proving trust remains harder than ever. ‍ As organizations scale, their attack surfaces grow—and so do their tech stacks. Every new tool meant to increase security often fragments it, leaving teams buried in overhead and blind spots.

Egnyte Collaborates With Microsoft to Power Enterprise AI With Microsoft Agent 365

Egnyte is excited to announce a new collaboration with Microsoft, integrating Egnyte’s data governance and secure collaboration expertise with Microsoft Agent 365 for AI agents. This collaboration is designed to transform how organizations empower their employees, enhancing productivity and decision-making through secure, governed AI. The enterprise landscape is rapidly evolving.

Admin MCP

Apono announces the launch of our Admin MCP (Model Context Protocol), a new tool that simplifies organizational access management through natural language queries. The product works with MCP-supported clients like Claude and Cursor, allowing administrators to quickly answer access questions without manually navigating through dashboards and permissions. This demo shows how users can instantly check if someone can access database resources or get comprehensive audit reports for AWS production accounts.

Comparing NER Models for PII Identification

Identifying and redacting personally identifiable information (PII) is a critical need for enterprises handling sensitive data. Over 1000 NLP models and tools claim to solve this problem, but an infinite number of options opens a paradox of choice. We compiled this comprehensive comparison that examines ten notable PII detection solutions – their features, use cases, pros/cons, and reported success rates.

The Shadow AI Disconnect CISOs Need to Know

Our new State of Shadow AI Report has just uncovered a critical disconnect that all security leaders need to be aware of. We all know shadow AI is exploding, and that blocking is the most logical response. How else are you going to regain control? But our data shows this is backfiring: This is where blocking can get dangerous. It doesn't stop AI; it just limits your visibility. Download the full (ungated) shadow AI report to see all the data.

Agentic AI and Identity Sprawl: The Convergence Redefining Cyber Risk

Welcome to Data Security Decoded. In this episode, Caleb Tolin welcomes back Joe Hladik, Head of Rubrik Zero Labs, for a focused look at how identity-driven threats are redefining modern security. Drawing insights from Rubrik Zero Labs’ latest report, Identity Crisis: Understanding and Building Resilience Against Identity-Driven Threats, Joe explains why identity has become the new perimeter in an era where hybrid and multi-cloud environments dominate.

Comparing Best NER Models for PII Identification

Identifying and redacting personally identifiable information (PII) is a critical need for enterprises handling sensitive data. Over 1000 NLP models and tools claim to solve this problem, but an infinite number of options opens a paradox of choice. We compiled this comprehensive comparison that examines notable PII detection solutions – their features, use cases, pros/cons, and reported success rates.

Insider Threats in the Age of AI: What Security Teams Need to Know

Artificial intelligence has gone from buzzword to business tool almost overnight. Employees are rapidly adopting platforms like ChatGPT, Gemini, and Copilot to draft content, analyze data, brainstorm code, and accelerate productivity. But as AI becomes embedded in everyday workflows, a new category of insider threat is emerging—one that is harder to detect, harder to classify, and potentially more damaging than anything security teams have faced before.

When AI writes code, who fixes the flaws?

Veracode's Chief Security Evangelist Chris Wysopal on AI's Coding Secret: 45% of Code Has Vulnerabilities Chris (aka @WeldPond), Wysopal, a veteran in application security and former member of the legendary L0pht hacker group, shares practical insights on shifting security left while embracing AI-powered development. Whether you're a CISO, AppSec leader, or developer using Copilot/GitHub Copilot, Claude, or other AI coding assistants, this discussion will change how you think about secure AI adoption.

Intelligent workflows: SAP's approach to SOAR in the AI era

Join SAP’s CISO and Tines’ Co-founder for a conversation on how SAP is modernizing its SOAR workflows and building an AI SOC capability with Tines. As SAP scales its global enterprise cloud services, the security team is taking a new approach to workflow automation: combining deterministic playbooks with intelligent, AI-assisted workflows that improve speed, accuracy, and visibility across security operations.

8 Best AI-Powered HCM Solutions Modern HR Leaders Must Try in 2026

Human capital management (HCM) solutions are basically the tools and practices companies use to manage and grow their people in a smarter way. They cover everything from hiring and onboarding to handling payroll, performance, benefits, and ongoing development. With a North American market size valued at $9.71 billion, there are plenty of HCM platforms out there. So, which one will be the ideal pick for your HR and business needs?

Avast Scam Guardian for Mobile: Advanced AI Scam Protection

Introducing Avast Scam Guardian and Scam Guardian Pro for mobile devices—bringing powerful AI-driven scam protection to your smartphone and tablet. Experience complete peace of mind with advanced AI tools that proactively block scam calls before they ring, detect even the most convincing phishing emails and texts, and offer instant expert guidance whenever something seems suspicious—giving you round-the-clock protection against evolving scams. Avast Scam Guardian is now available with Avast Mobile Security in France and Germany, with worldwide availability coming soon.

Invisible Instructions: Multimodal AI is Already Being Tricked

Invisible Instructions: Multimodal AI is Already Being Tricked In this clip from "Securing AI Part 4: The Rising Threat of Hidden Attacks in Multimodal AI," Diptanshu Purwar and Madhav Aggarwal respond to Jamison Utter's example of a new, well-known form of multimodal attack: abusing AI resume screeners by exploiting both text and visual processing. The Resume Attack: White-on-White Text.

Intel Chat: LLM in malware, LandFall, Windows kernel zero-day & Ex-L3Harris exec sells secrets [268]

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community. Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.

AI for India, built on trust: what the new AI governance guidelines mean for the future

India has taken a decisive step toward shaping a responsible and inclusive AI future. The Government of India’s AI Governance Guidelines (2025) mark a bold framework that balances innovation, accountability, and trust—three pillars critical for sustainable AI growth. At a time when the world is debating the risks and rewards of artificial intelligence, India’s approach stands out for its clarity and cultural grounding.

To Stop AI-Powered Adversaries, Defenders Must Fight Fire with Fire

Anthropic's Threat Intelligence team recently uncovered and disrupted a sophisticated nation-state operation that weaponized Claude’s agentic capabilities and the Model Context Protocol (MCP) to orchestrate automated cyberattacks simultaneously against multiple targets worldwide. This AI-powered attack automated reconnaissance, vulnerability exploitation, lateral movement, and more across multiple victim environments at unprecedented scale and speed.

Introducing Vanta AI Agent: Your 24/7 GRC engineer

*What is the Vanta AI Agent?* The Vanta AI Agent is your 24/7 GRC engineer built into Vanta's Agentic Trust Platform. It automates and accelerates critical workflows helping teams stay audit-ready, reduce risk, and prove security continuously. The agent understands your environment with context and memory to deliver accurate, context-rich insights and actions in seconds.

Building the Right Foundation With Kovrr's AI Risk Governance Suite

‍AI systems are being woven into the fabric of business operations at a pace that outstrips the structures needed to safely scale them. McKinsey’s latest State of AI report shows that nearly two-thirds of organizations are still stuck in experimentation or pilot mode, unable to systematically expand AI usage across the business. Although leaders cite early benefits in efficiency, revenue gains, and innovation, only 39% report enterprise-level impact.

AI Rewriting vs. Humanizing: What's the Difference?

Open any modern writing platform and you'll find two shiny buttons that promise instant polish: "Rewrite" and "Humanize." At first glance, they sound interchangeable; both appear to refresh clunky prose with a single click. Yet, as every editor who has wrestled with an AI draft knows, they serve very different purposes. Understanding those differences will save you time, preserve your voice, and keep your readers convinced that a real person is talking to them.

The Comprehensive Guide to Product Design Agencies: How Top Firms Like Phenomenon Studio Drive Market Success

In today's hyper-competitive business environment, the distinction between market leaders and also-rans increasingly hinges on product excellence. But what separates truly transformative products from mediocre ones? The answer often lies in partnering with the right product design agency. As a distinguished web design and development company and product innovation leader, Phenomenon Studio exemplifies how strategic design partnerships can elevate products from functional to phenomenal.

Claude Moves to the Darkside: What a Rogue Coding Agent Could Do Inside Your Org

On November 13, 2025, Anthropic disclosed the first known case of an AI agent orchestrating a broad-scale cyberattack with minimal human input. The Chinese state-sponsored threat actor GTG-1002 weaponized Claude Code to carry out over 80% of a sophisticated cyber espionage campaign autonomously. This included reconnaissance, exploitation, credential harvesting, and data exfiltration across more than 30 major organizations worldwide. The impact was real. And the AI was in control.

Microsoft E3/E5 Security Optimization | Reach Demo

Microsoft's E3 and E5 security tools offer powerful defensive capabilities, but without proper configuration, critical protections can be overlooked. Reach identifies misconfigurations and underutilized capabilities across your Microsoft security stack, then deploys fixes to optimize your tooling, eliminate exposures, and reduce risk. Learn more at reach.security.

How AI is reshaping identity governance for CISOs and CIOs

2025 has been a defining year for identity security, marked by a rapid increase in the volume, variety, and velocity of identities that organizations must now govern. The changes have been building for a long time, as identity tools have evolved from early single sign-on solutions and compliance-driven governance to the cloud-first, AI-powered world we live in now, which must enable employees with the access they need at lightning speed while maintaining security.

Why AI's Real Value in Security Isn't What You Think

Security is entering a phase where operationalization becomes the true competitive edge. Garrett puts it plainly—much of AI’s usefulness right now comes from supporting the repetitive, high-volume operational work, and that is likely here to stay. Sebastian and John point to the same pressure: more sensors, more platforms, more enforcement points… yet the real bottleneck is how teams turn those capabilities into daily practice.

Building human-centric SOCs in the age of AI automation with Alec Fenton

Defender Fridays - Building human-centric SOCs in the age of AI automation with Alec Fenton Join us for this week's Defender Fridays as we explore the evolution of security operations and AI's role in empowering analysts with Alec Fenton, VP Security Operations at Foresite Cybersecurity. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.

WAN AI vs Other AI Video Generators: Which Is Best?

In the world of artificial intelligence (AI) technology, video generators have become increasingly popular for creating stunning visual content. One of the most talked-about AI art generators is WAN AI, which promises to revolutionize the way we create and share videos. But how does WAN AI stack up against other AI video generators on the market? Let's take a closer look at the features, capabilities, and benefits of WAN AI compared to its competitors.
Featured Post

Cyber Resilience and AI Risk: Safeguarding the UK's Critical Infrastructure in a New Threat Landscape

In October, the UK put a spotlight on cyber resilience with the release of the NCSC's 2025 Annual Review. CEO Richard Horne warned that failing to prepare for cyberattacks risks a company's future. The urgency behind this statement is backed by data: the NCSC handled 204 major cyber incidents between September 2024 and 2025, and 43% of UK businesses reported a breach in the past year.

Cato CTRL Threat Research: Two Vulnerabilities in Anthropic's MCP SDK Enable OAuth Token Theft and Supply Chain Attacks

The SolarWinds supply chain attack in 2020 reminded the world how a single weakness in trusted software can have global consequences. That incident reshaped how organizations view software integrity and the importance of securing every stage of the development pipeline.

How Aurora Endpoint Powers Outcome-Driven Security

See how Aurora Endpoint Defense uses predictive AI and behavioral detection to deliver powerful, outcome-driven endpoint protection. This demo highlights key features like alert triage, threat prevention, and automated response—all designed to simplify and strengthen your security posture.

Secure Your App with Mend.io's AI-Native AppSec Platform (featuring ByteGrad)

This video, originally created by Wesley from ByteGrad, walks through how to secure your applications using Mend.io’s AI-Native AppSec Platform — including SAST, SCA, and SBOM scanning. Wesley explores how Mend integrates with GitHub, automates code fixes, and helps developers stay ahead of vulnerabilities. Creator: ByteGrad YouTube Channel Timestamps.

Adopting cold-war tactics for AI deep fakes?

The AI arms race in deepfake detection has a critical problem: the technology can't keep up. In this episode, Navroop Mitter, CEO of ArmorText, discusses why the industry is shifting away from relying on AI detection alone. A recent study from SKKU in South Korea found that zero out of sixteen top deepfake detection technologies could reliably identify deepfakes in real-world conditions. They worked fine in controlled lab settings, but failed when it mattered most.

How Are Cyber Security Companies Managing AI Attacks?

AI attacks pose real risks for companies because of their ability to scale and automate attacks like brute force attacks, smarter malware, deep fakes and advanced phishing. Attacks that were once slow, manual and easy to spot are now becoming faster, more sophisticated and harder to detect. UK government research shows that 32% of UK businesses have experienced a cyber attack in the last year, and experts warn that AI could make this number rise significantly.

Why Every Tech Company is Talking About OWASP for AI (and You Should Too)

AI is changing everything—but with innovation comes new risks. In this episode of AI on the Edge, we dive deep into OWASP's Top 10 for Large Language Models with security leader Steve Wilson (Exabeam). Discover why every tech company is suddenly talking about LLM security and how you can stay ahead. Inside this episode: Why traditional security doesn’t work for AI Learn from Steve’s new book The Developer’s Playbook for LLM Security and get actionable tips to protect your AI systems.

The Critical Inflection Point: Navigating Apex Risks from AI to Stolen Credentials

The global cyber threat landscape has accelerated beyond traditional defense, reaching a critical inflection point. Today, organizations are no longer battling isolated attackers; instead, they are confronting industrialized, financially motivated cyber syndicates that leverage cutting-edge technologies to maximize their impact. Moreover, the rise of AI in Cybersecurity has created both opportunities and threats.

From Model Drift to API Exploitation: The Next Challenge in AI Security

From Model Drift to API Exploitation: The Next Challenge in AI Security In this clip from "Securing AI Part 4: The Rising Threat of Hidden Attacks in Multimodal AI," Diptanshu Purwar and Madhav Aggarwal summarize why external guardrails are the only sustainable defense against the new wave of AI exploitation. Jamison Utter then sets the stage for the next topic in the series: securing the fundamental protocols and APIs that AI agents rely on.

How Reach Security Automates Remediation and Prevents Configuration Drift

From identification to remediation to drift management. When Reach flags an exposure, it doesn’t stop there. It shows exactly how much risk you’ll reduce by fixing it — and what impact it’ll have on users. In this short demo, CRO Jared Phipps walks through how Reach:︎ Quantifies residual risk reduction (e.g., 62%, 91%, etc.)︎ Weighs that against user impact︎ Guides teams through the remediation process︎ Integrates with Jira or other ticketing systems to track fixes︎ Monitors configurations to prevent drift and maintain baselines.

5 Critical LLM Privacy Risks Every Organization Should Know

Large language models take in unstructured data. They transform it into context, embeddings, and answers. That journey touches raw files, vector stores, model logs, and third-party services. Traditional privacy programs focus on databases and forms. LLMs push risk to the edges. The riskiest moments are when you ingest messy content, when your system retrieves chunks to support an answer, and when an agent with tool access is tricked into over-sharing.

Find the Fixer: The AI Agent Bringing Order to Ownership

Assigning remediation tasks across an enterprise organization can feel like navigating a maze of inconsistent tags, overlapping teams, and unclear ownership. It’s one of the most persistent operational challenges in vulnerability and exposure management, and one of the biggest barriers to speed. Each scanner and cloud platform comes with its own tagging logic. One system uses ProductOwner, another productowner. Some tags are outdated, others duplicated, and many have no clear purpose.

Agentic Controls for an Agentic World: Why Traditional Security Can't Keep Up

AI agents now move data, collaborate, and make decisions at machine speed — millions of actions per second. But our entire security architecture was built for humans, not for autonomous AI. In this new Agentic World, every action is faster, every breach more invisible, and every compliance gap more dangerous. Protecto introduces Agentic Controls — intelligent, context-aware CBAC Agents that live inside AI workflows. They understand policies written in plain English, enforce zero-trust decisions before data ever leaves its boundary, and protect privacy across industries.

Predict and Prevent: How AI is Changing Insider Risk Management

Insider risk has become one of the most urgent and financially consequential cybersecurity challenges for today’s organizations. Insider Risk is a top concern for the C-Suite and Boards, and organizations must be prepared to detect and respond to insider risks. In fact, according to IBM’s Insider Threat Report, 83% of organizations reported at least one insider-related security incident in 2024 (IBM, Insider Threat Report, 2024).

"Trust in AI Starts with Transparency | Sebastian Goodwin (Autodesk) x Reach Security"

Trust in AI starts with transparency. In our recent conversation, “No Time to Drift,” Sebastian Goodwin, Chief Trust Officer at Autodesk, shares how his team is putting that principle into practice — by creating AI Transparency Cards. Think of them like nutrition labels for AI: clear, consistent, and designed to help customers understand what’s inside. Each one outlines what the model does, how it’s trained, safeguards in place, and more.

How Responsible AI Governance Strengthens Cybersecurity Defenses

Here's something that should keep you up at night: cybercrime might cost the global economy $10.5 trillion every year by 2025. That's not a typo. Traditional security measures? They're already struggling to keep pace. Attackers have figured out how to weaponize artificial intelligence, launching sophisticated campaigns that waltz right past conventional defenses like they're invisible.

Seven Bibliography Mistakes SparkDoc Catches, Plus How to Keep Them Out of Your Drafts

Good writing can wobble at the finish line when the references go wrong. Reviewers notice. Teachers notice. Readers who care about sources notice first of all. Bibliography mistakes do not only weaken credibility, they slow down the whole process because every small error leads to another round of checking. This guide looks at the errors that appear again and again, plus how an AI-aware workflow reduces them without turning the page into a sales pitch. The goal is a clean, verifiable bibliography that supports the argument rather than distracts from it.

Reach Security Recognized as a CRN® 2025 Stellar Startup!

Reach Security announces that CRN , a brand of The Channel Company, has included Reach Security on its 2025 Stellar Startups list in the Security category. This prestigious list highlights fast-rising technology vendors that are driving innovation and fostering growth in the IT channel with groundbreaking products.

Uncovering the Shadow AI Paradox

Does the world really need another study of shadow AI? That was my first thought going into this project. Reading dozens of previous reports did not change that impression: there's a lot of shadow AI out there, and a lot of reports saying so. But the more I read, the more apparent it became that something important was missing. This endless supply was not meeting what was actually in demand.

The Agentic OODA Loop: How AI and Humans Learn to Defend Together

Last week at the AI Security Summit, something profound happened. The first cohort of AI Security Engineers in the world earned their certification — a milestone that symbolized not just new skills, but a new mindset. For decades, security has been about control. Rules, gates, and policies that define what’s safe and what’s not. But the age of Agentic AI — systems that perceive, reason, act, and learn — is forcing us to evolve beyond static defenses.

If AI Security were food...What's on the menu? #aisecurity #food

How do you explain AI Security without the jargon? Easy you make it food. In this video, we asked leading AI Security professionals to describe AI Security as a dish. Their answers turn complex ideas like prompt injection, data leaks, and model hardening into bite-sized insights you’ll actually remember. From layered lasagna to spicy tacos, each response brings a fresh perspective on what it means to build and protect secure AI systems.

Turn AI ambition into secure operations

If you attended AWS re:Invent last year, it probably felt like there was an AI solution for everything. Models, copilots, agents; by the end, someone had to pitch an AI solution to summarize all of the other AI solutions. This year, it may still feel like the AI announcements multiply faster than the models themselves. Under all of the hype, one message still resonates: AI innovation only works when it’s built on a secure foundation.

Language Switching Attacks: The New Threat Vector in LLM Security

Language Switching Attacks: The New Threat Vector in LLM Security In this clip from "Securing AI Part 4: The Rising Threat of Hidden Attacks in Multimodal AI," Diptanshu Purwar discusses the growing trend of language-switching attacks. These techniques exploit the ongoing development and training gaps in Large Language Models (LLMs). Diptanshu explains how attackers can evade an LLM's built-in filters and guardrails by rapidly shifting between different languages, particularly less common ones, to find weaknesses where the model's safety data is sparse.

AI Browsers Are Silently Exfiltrating Sensitive Data - and Legacy DLP Can't See It

A new class of AI-powered browsers are rewriting the rules of data security. While CISOs focus on traditional vectors, employees are unknowingly creating permanent backdoors to your most sensitive data through browsers that remember everything, sync everywhere, and share it all with AI models. The bottom line: If you're not actively protecting against AI browser exfiltration, you're already leaking data. Here's why it's happening, what it costs, and how to stop it today.

Detectify AI-Researcher Alfred gets smarter with threat actor intelligence

Six months after launch, Alfred, the AI Agent that autonomously builds security tests, has revolutionized our workflow. Alfred has delivered over 450 validated tests against high-priority threats (average CVSS 8.5) with 70% requiring zero manual adjustment, allowing our human security researchers to concentrate on more complex, high-impact issues. Now, we’re elevating Alfred’s capabilities by integrating real-world threat actor intelligence directly into its core system.

DPDP 2025: What Changed, Who's Affected, and How to Comply

India’s Digital Personal Data Protection Act, 2023 (DPDP Act) is finally moving toward activation. In January 2025 the government published the Draft Digital Personal Data Protection Rules, 2025 for public consultation to operationalize the Act. As of late 2025, the Act is enacted but core provisions still await final notification, so a phased rollout remains likely.

From Zero AI Background to GenAI Lead at Peloton #ai #shorts

Amar (Founder & CEO of Protecto) chats with Sabari Loganathan (Head of AI Strategy, Peloton) about how a chance project led to building world-class generative AI systems. From vector search to agentic AI and RAG, discover how Sabari turned technical breakthroughs into real enterprise outcomes.

The Role of AI Security Agents in Modern Exposure Management

AI security agents are reshaping how organizations manage exposure. This blog explores where they deliver the most impact — from smarter prioritization to faster ownership mapping and assisted remediation — and how this shift moves security teams from automation to autonomy.

Build SOAR Workflows Instantly with Charlotte AI

With Charlotte AI and Falcon NextGen SIEM, build SOAR workflows instantly from natural language. Create reliable, intelligent automation that helps SOC teams respond at machine speed. CrowdStrike Falcon Next-Gen SIEM: Consolidate security operations with the world’s most complete AI-native SOC platform.

How Insurity and Reach Built a Living Zero Trust Model - with Jay Wilson & Garrett Hamilton

Would you rather run a network where everyone trusts everything, or one where nothing moves without being continuously verified? Most would agree that the most secure is ideal. The real question is: how do you get there, and by what means? And where is "there"? That’s the spectrum of Zero Trust maturity most organizations find themselves navigating—from implicit trust and flat networks to real-time validation and least-privilege access that adjusts as environments change.

How MSSPs can automate their way to full-spectrum security

The end of October is here, which means it is time to ask: What have you, as a managed service provider (MSP), learned from Cybersecurity Awareness Month? The most critical lesson remains that human behaviour is the single greatest risk and the single greatest opportunity for defence. While no amount of training can eliminate every mistake (which is why we need automation), a security-aware technician acts as the final, critical filter that can spot novel social engineering attacks and enable fast incident response, but only if the back end is hyper-automated, so technicians know about these potential attacks immediately.

From Neural Networks to Threat Networks: How AI Development is Reinventing Security Intelligence

In the digital age, the landscape of cybersecurity is evolving faster than ever. Threat actors are becoming increasingly sophisticated, while traditional security measures struggle to keep pace. Enter Artificial Intelligence (AI)-an innovation that is transforming security intelligence by converting neural networks, traditionally used for pattern recognition, into threat networks capable of predicting, detecting, and mitigating cyberattacks in real time.

Seemplicity's AI Agents: Clarity

Meet Clarity, the first of Seemplicity’s four new AI Agents transforming how security teams understand and act on vulnerabilities. Instead of cryptic scanner outputs and confusing CVE text, Clarity turns dense technical data into clear, actionable narratives — explaining what happened, why it matters, and how to fix it. With Clarity, you can: Translate vulnerability data into plain language Improve collaboration between security, IT, and engineering Accelerate remediation and reduce exposure fatigue.

What is KeeperAI?

KeeperAITM is an agentic, AI-powered engine embedded within KeeperPAM that delivers real-time threat detection and response, as well as privileged session analysis. Built for Privileged Access Management (PAM), KeeperAI monitors user activity, providing behavioral insights and automated incident response in both live SSH sessions and post-session playback.

Experience Over Hype: How Reach Built AI for Real-World Security

Innovation comes from experience — and from taking a pragmatic, problem-driven approach. As Garrett Hamilton told Ed Amoroso, Reach’s foundation is built on the work of co-founder Colt Blackmore — whose experience building machine-learning models at Cylance and Proofpoint now drives how we apply AI to exposure management today. That experience shapes how Reach approaches AI: practical, proven, and focused on results — not trends.

The New Attack Surface: How to Break (and Defend) Large Language Models

Large Language Models now automate customer support, write code, classify emails, generate content, and - disturbingly - execute tasks through plugins and agents. Once an AI can act on your behalf, it becomes part of your operational infrastructure, not a toy. OWASP’s Top-10 for LLM Applications formalized the threat landscape, and quietly confirmed what security researchers have been yelling for two years.

Introduction to Linea AI by Cyberhaven

Resolve incidents 5x faster, detect 40% more critical incidents, and reduce future incidents by 90% with Linea AI by Cyberhaven. Linea AI thinks like the smartest security analyst, precisely spotting insider risks across billions of workflows and every piece of data. It understands how people work the way a human would, but it never loses focus and can apply human-like insight at an incredible scale.

AI as a Power Tool: How Windsurf and Devin Are Changing Secure Coding

We brought together Ian Moritz, Deployed Engineer at Cognition, and Mackenzie Jackson from Aikido Security for a live masterclass on AI-assisted coding. The goal wasn’t to hype new tools. It was to talk about how developers can stay in control while AI starts writing, testing, and securing code beside them.

From Detection to Protection: A Look at End-to-End AppSec Solutions

Modern application development moves at an incredible pace, but this speed often creates a gap between innovation and security. Effective AppSec Solutions close this gap by shifting security from a reactive bottleneck to a proactive, integrated part of the entire software development lifecycle (SDLC). This end-to-end approach doesn’t just detect flaws; it provides a unified framework to manage and reduce risk from the first line of code to the final cloud deployment.

How CIOs and CISOs are unlocking AI's full value: 5 real-world takeaways

Recent research from Forrester Consulting commissioned by Tines, Unlocking AI’s full value: How IT orchestrates secure, scalable innovation, underscores the essential role IT leaders must play in AI orchestration, as well as the challenges that stall adoption – and the opportunities that await those who overcome them. But how do these findings translate to real life, and what are leaders and practitioners doing to navigate this landscape?

Mastering LLM Privacy Audits: A Step-by-Step Framework

Language models now touch contracts, tickets, CRM notes, recordings, and code. That means personal data, trade secrets, and regulated content move through prompts, embeddings, caches, and third-party endpoints. If your audit still reads like a generic security review, you will miss the places where leaks actually happen. A modern LLM Privacy Audit Framework starts where the risk starts.

It's time to rethink shadow AI.

It's time to rethink shadow AI. We've been told it's a fringe activity. A risk from rogue employees. Our new research proves that wrong. This is, ironically, no longer a "shadow" problem. It's a universal workflow hiding in plain sight. The question is no longer "how do we stop it?" It's "how do we manage it?" Our new report lands next week with the date you need to start answering that important question.
Featured Post

The Shift Left of Boom: Making Cyber Threat Prevention Practical Again

The old saying "prevention is better than cure" has lost currency in today's cybersecurity industry. Instead, security teams are advised to assume that the business has been breached and focus on threat detection, investigation, response, and recovery. Yet, during cyber incident post-mortems, it is not uncommon to find that the business owned the tool that would have protected it against the breach. The problem arose because it wasn't correctly configured before the incident happened, and no one knew this - or if they did, they didn't have the time or resources to fix it.

Securing the AI Browser Revolution: How Cato Helps Mitigate Risks in OpenAI Atlas

The launch of OpenAI Atlas, an AI-powered browser that merges ChatGPT’s intelligence with a full web experience, marks a major leap in how people interact with the internet. Instead of typing queries or clicking through pages, users can now ask, act, and automate, delegating browsing tasks to AI agents capable of retrieving data, filling in forms, or performing actions on their behalf. For businesses, Atlas represents both opportunity and risk.

CrowdStrike Leads New Evolution of Security Automation with Charlotte Agentic SOAR

AI has transformed both how attackers operate and how defenders must respond. Today’s adversaries use AI to shift tactics in real time, forcing defenders to react at unprecedented speed. Many SOCs struggle to keep pace due to the limits of legacy automation. Even the most mature playbooks can’t anticipate every scenario or data variation, because playbooks are predictable — but adversaries aren’t.

Welcome to Agentic Park: What chaos theory teaches us about AI security

The first time it happened, nobody noticed. An automation reconciled a ledger, logged its success, and shut itself down. The token that made it possible looked harmless. Tidy, legacy, supposedly scoped “just enough.” But a week later, refunds ghosted, dashboards blinked, and audit logs told three different versions of the truth. And that token? Not a token at all. More like a Fabergé raptor egg sitting in a server room. Not decoration. Incubation. Of chaos.

The AI buzzword trap in compliance tools | Heard in the founder chat ft. Inflo's Tom Skelton

“AI-powered.” “AI-native.” “End-to-end AI.” At some point, it all sounds the same—but it’s not. In this “Heard in the Founder Group Chat” episode, Tom Skelton, Information Security and Technology Lead at Inflo, shares how to spot real AI that saves time (and risk)—and how to avoid platforms that just rebrand old features.

Survey: Holiday scammers are getting bolder with AI, and Americans are taking the bait

1Password surveyed 2,000 American adults to learn how people are protecting themselves from phishing scams this holiday season (“phishing” refers to all those scammy emails, shady texts, and fake ads, where hackers try to trick people into clicking a link that lets them steal money or information). What we learned is that holiday scams are getting bolder and harder to spot, thanks to the help of AI. Here are some of the other most eye-opening findings.

Essential LLM Privacy Compliance Steps for 2025

Large language models are no longer side projects. Sales teams rely on them for emails, support teams for ticket summaries, legal for first-draft reviews, and product teams for search and personalization. That ubiquity changes the risk math. Sensitive information flows through prompts, fine-tuning sets, retrieval indexes, analytics stores, and vendor logs. Regulators now expect the same discipline for LLM pipelines that they expect for core systems handling customer data.

No Time to Drift: How AI Is Changing the Way Security Teams Manage Configuration Drift

In this episode of No Time to Drift, Reach CEO Garrett Hamilton sits down with Sebastian Goodwin (Chief Trust Officer at Autodesk), John Rasmussen (Senior Analyst at TAG Infosphere, former CISO at Syneos Health), and Ed Amoroso (CEO, TAG Infosphere) to unpack one of security’s most persistent challenges — configuration drift. They explore why drift happens quietly, how it compounds into real risk, and how AI-driven automation is helping teams detect, manage, and prevent drift faster — without losing human oversight or control.

CyberArk Secure AI Agents: A closer look at new solution capabilities

We are excited to announce the launch of CyberArk’s new solution for securing AI agents, which will be generally available at the end of December 2025. CyberArk Secure AI Agents will extend CyberArk’s Identity Security Platform (ISP), which is a leading solution for securing human and machine identities.

Closing the Guardrail Gap: Runtime Protection for OpenAI AgentKit

OpenAI’s AgentKit has democratized AI agent development in a big way. Tools like Agent Builder, ChatKit, and the Connector Registry make it possible for teams to spin up autonomous agents without writing custom code. That kind of accessibility changes everything, including the AI agent security threat model. The easier it becomes to build agents, the harder it gets to secure them.

One Platform. One Agent. One Giant Leap for MSP Efficiency.

Managing security shouldn’t mean juggling a dozen tools, agents, and spreadsheets. WatchGuard is cutting through the noise with two major updates designed to give managed service providers (MSPs) the simplicity and control they’ve been asking for: expanded PSA integrations and the new WatchGuard Agent.

Snyk Studio: Now for All Customers, Powering Secure AI Development at Scale

The way we build software has fundamentally changed. AI code assistants are no longer a novelty; they are the new standard, creating a revolutionary leap in developer productivity. Back in May, we launched Snyk Studio with a focus on our partners, creating an open framework to build a vibrant ecosystem for securing AI-driven development. Our goal was to ensure that as the AI landscape evolved, Snyk’s market-leading security intelligence could be embedded into any AI-native tool.

How to monitor MCP server activity for security risks

The Model Context Protocol (MCP) is a popular framework for connecting AI agents to data sources, such as APIs and databases. Because this technology is still new and evolving, its security standards are also in the early stages. This means that MCP servers are susceptible to misuse, so teams building and running them internally need visibility into server interactions to keep their environments safe from attacks.

Report: AI Poisoning Attacks Are Easier Than Previously Thought

Attackers can more easily introduce malicious data into AI models than previously thought, according to a new study from Antropic. Poisoned AI models can produce malicious outputs, leading to follow-on attacks. For example, attackers can train an AI model to provide links to phishing sites or plant backdoors in AI-generated code.

Smarter SIEM starts here: Context, speed, and the power of MCP

Traditional SIEMs were built for a simpler time, when infrastructure was static, data was structured, and threats were easier to spot. Designed to collect logs and centralize alerts, they gave organizations a single pane of glass into their environment. Visibility isn’t enough anymore.

How Reach Security Works (Step-by-Step Breakdown by CRO Jared Phipps)

What does Reach actually do — and why does it matter? In this short breakdown, CRO Jared Phipps explains how Reach connects to your existing security tools — EDRs, firewalls, email gateways — to identify hidden exposures and guide real-world fixes. Reach doesn’t add another dashboard. It operationalizes the ones you already have — showing you what to fix, why it matters, and the impact each action has on risk and users.

Smarter Support, Safer Systems: How AI Service Desks and Intent Signals Boost Security & Revenue

Support isn't just about solving customer issues but it's about safeguarding every digital interaction. As remote work expands and customer expectations rise, service desks have quietly become the frontlines of both user experience and cybersecurity. Yet, many organizations still rely on outdated, manual workflows that leave room for breaches, data exposure, or simply delayed responses that frustrate users and erode trust.

Leveraging AI-Driven Diversity Hiring Software to Eliminate Bias in Recruitment

Building a diverse workforce is no longer just a goal; it's a proven strategy for success. Diverse teams are more innovative and achieve better financial results. However, creating a truly fair and inclusive hiring process can be challenging. Many companies lack the right tools to overcome hidden biases. This is where AI-powered diversity hiring software comes in, offering a powerful solution to level the playing field and help you build the strongest, most representative team possible.