Try THIS Prompt to Build a CRUD Note Taking App!
Try THIS Prompt to Build a CRUD Note Taking App!
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Supervised AI Is the Fastest Path to Better Threat Triage ROI
Security operations teams are under sustained pressure. Alert volumes continue to rise, environments grow more distributed, and experienced analysts remain scarce. Much of the industry conversation around AI focuses on autonomy and fully automated response. That focus skips the most reliable efficiency gains available right now.
Edge Security Is Not Enough: Why Agentic AI Moves the Risk Inside Your APIs
For the last twenty years, cybersecurity has been built around the edge: the belief that threats come from the outside, and that firewalls, WAFs, and API gateways can inspect and control what enters the environment. That model worked when applications were centralized, traffic was predictable, and most interactions followed a clear pattern: a user in a browser talking to an app inside a data center. Agentic AI breaks that model.
A New Model You Haven't Heard About (GitHub Raptor Mini)
Can an under-the-radar AI tool actually build a secure, functional CRUD note-taking app from scratch? In this video, I put GitHub Raptor Mini to the test to see if it can design, implement, and reason through a real-world CRUD application — including authentication, data handling, and basic security considerations.
How to Add Privacy to Your LangChain Agent in 3 Lines of Code
If you’re building with LangChain, you’re moving fast. That’s the point. Agents are pulling from tools, chaining prompts, summarizing documents, and responding to users in real time. But there’s a quiet truth many teams discover a little too late: Your agent is probably handling personal data—even if you didn’t design it to. Emails show up in prompts. Names appear in support tickets. Internal notes include phone numbers, IDs, or customer context.
No Snow Days for Security: How Reach Uses AI Agents to Find and Fix Hidden Risk
Security exposure doesn’t take a day off. Rain, snow or shine, environments keep changing. Controls drift. Configs break. Risk quietly piles up. Reach was founded to help organizations find and fix hidden risk and exposure. Traditional approaches surface issues — dashboards, alerts, findings — but stop short of actually fixing them.
How GenAI is Changing Data Security and What Enterprises Must Do
Generative AI (GenAI) is changing data security in today's businesses. It affects both cybersecurity defenses and the types of threats we face. Organizations encounter innovations that boost detection and automate tasks. However, these changes also create new avenues for attack. Security leaders must understand this duality to protect systems and information. This article examines the dual impact of GenAI on enterprise security. We cover the opportunities it creates for defense and the new risks it introduces. Finally, we outline actionable strategies to protect your organization.
What Are AI Browsers and Why Are They Becoming Essential?
AI browsers are a revolutionary change in our internet interaction. These web browsers use artificial intelligence as smart assistants. They understand user intent, summarize content, and automate tasks. Unlike traditional browsers, AI browsers provide a conversational and efficient experience. They move beyond one-time searches to offer a truly personalized interaction. This article explores their core features and concrete advantages. We'll examine how they save time, enhance security, and adapt to your unique needs. This makes a compelling case for why they are the new standard.
APT Teens, AI Voices and 2025 Helpdesk Attacks
The 2025 year in review episode shows how advanced threat groups rely on simple steps, from infostealer credentials to AI voice tools, to work through helpdesks. Native language, fake confusion and social engineering still unlock password resets in 2025, opening the door to ransomware and double extortion across networks.
AI Automation Dreams in the 2025 Security Budget Squeeze
The Razorwire Christmas Party 2025 review looks at rising expectations for AI and automation while security budgets stall in real terms. Automation in 2025 sits in a tug of war between cost cutting targets and the reality that attackers also use AI, so defensive upgrades have to match a live, adaptive threat.
The CISO Checklist for the New AI Agent Reality
AI agents are now acting across SaaS, cloud, and endpoint environments with identities and permissions that traditional controls cannot fully govern. Most enterprises already have more agents in production than they realize, many created without security review. Across the industry, the research aligns.
Attackers Aren't Hacking Anymore - How Misconfigurations Became the Front Door
Looking for the perfect easy listening experience to kick off the holidays? We just published a full conversation between Garrett Hamilton, CEO & Co-Founder of Reach Security, and Todd Graham, Managing Partner at Microsoft’s venture fund M12. They talk through what's limiting security programs today — not lack of tools, but lack of operational clarity.
Vibe check your vibe code: Adding human judgment to AI-driven development
Remember when open meant visible? When a bug in open-source code left breadcrumbs you could audit? When you could trace commits, contributors, timestamps, even heated 2:13 a.m. debates on tabs versus spaces? That kind of openness created confidence in the code and made it possible to hold contributors accountable when issues arose. Today, as AI changes how code is created and shared, those familiar markers of trust and transparency are becoming harder to find.
Unlocking AI's Potential: Network Trends and Challenges
Artificial intelligence is no longer just an overused buzzword; it’s a fundamental shift in how businesses operate. The Architects of AI were just named as Time’s person of the year for 2025. From generative AI creating code to machine learning algorithms optimizing supply chains, the demand for AI is reshaping the technology landscape. But here’s the thing: all that computational power is useless if your data can’t move fast enough.
When Agentic AI Becomes an Attack Surface: What the Ask Gordon Incident Reveals
Pillar Security’s recent analysis of Docker’s Agentic AI assistant, Ask Gordon, offers an early glimpse into the security challenges organizations will face as AI systems begin operating inside the development stack. Their researchers discovered that a single poisoned line of Docker Hub metadata caused the agent to run privileged tool calls and quietly exfiltrate internal data.
AI and Data Security: Why Your Data Security Model Is Hurting Innovation
Why Your Data Security Model Is Outdated For over 20 years, we’ve focused on the Data Envelope—securing the perimeter, the cloud, and the network. But in a world of AI and rapid data sharing, protecting the envelope is not enough. In this video, James Rice (VP of Product Marketing at Protegrity) explains why traditional security has become the biggest bottleneck for modern innovation. Whether you are a security leader, a data architect, or a business innovator, understanding this paradigm shift is essential for the next decade of growth.
Meet Our New MCP Server
See how customers can query our MCP server to sift through their threat intelligence and get contextual answers immediately.
Protecting the Language of AI: Why API Security is No Longer Optional
Protecting the Language of AI: Why API Security is No Longer Optional As AI continues to reshape the digital landscape, APIs have become the "language" of innovation—but they've also become a massive target for attackers. In this clip from the A10 Networks webinar, "APIs are the Language of AI: Protecting Them is Critical," security experts Jamison Utter and Carlo Alpuerto discuss the complexities of modern API security.
The Hidden Costs of Building Your Own Data Masking tool
Building an in-house data masking tool often starts as a practical decision. The logic feels sound. Your team understands the data, knows the systems, and can tailor masking logic exactly to your needs. On the surface, it looks like a short engineering project that saves licensing costs and avoids external dependencies. What we’ve learned, after observing many organizations take this path, is that the hidden costs of building your own data masking solution rarely appear during the initial build.
Why Preserving Data Structure Matters in De-Identification APIs
When it comes to data masking or de-identification, one often-overlooked detail is the importance of preserving the original data structure. While it might seem harmless to normalize extra spaces or convert unique newline characters into a standard format, these subtle changes can actually have a significant impact on downstream processing. Let’s explore why this matters, with a couple of concrete examples.
Expert Roundup -How to Prepare for AI Data Processing Under GDPR?
As AI adoption accelerates across business functions, December’s expert roundup focuses on a question many organizations are now confronting in practice rather than theory: how should companies prepare for AI related data processing under GDPR. Unlike traditional automation, AI systems often rely on large, dynamic datasets, continuous learning, and opaque decision logic.
Why Knowing ATT&CK Isn't Enough: Mapping Real Control Coverage with Reach
Security teams know the attack techniques. What they don’t always know is how those techniques actually land in their environment. Reach maps your existing controls to MITRE ATT&CK (and D3FEND) and shows—visually—︎ which techniques are covered︎ which tools provide that coverage︎ and where real gaps exist Because “we have the tool” isn’t the same as “the technique is stopped.”
Garrett Hamilton & Todd Graham on How AI Agents Change the Way We Think About Security
Garrett Hamilton, CEO and Co-Founder of Reach Security, sits down with Todd Graham, Managing Partner at Microsoft’s venture fund M12, to discuss why modern cybersecurity programs struggle to reduce real risk — despite massive spending on tools. Recorded at Black Hat, the conversation explores how misconfigurations, unused controls, and operational blind spots create exposure long before attackers need advanced techniques.
How to Add MCP Servers to Google's Antigravity IDE
In this video, I walk you step by step through the process of adding MCP servers to Google’s Antigravity. You’ll learn how they integrate with Antigravity and how to configure them correctly so everything runs smoothly.
Zenity 2025 Year in Review: Building AI Security for the Enterprise
For security teams, the adoption of agents showed up operationally before it showed up strategically - creating new expectations and requirements. Risk is no longer tied to prompts or the model alone. It shows up in what agents do once they are connected to critical systems - coming from permissions they inherit, tools they invoke, and data they move.
How CrowdStrike Trains GenAI Models at Scale Using Distributed Computing
Large language models (LLMs) have revolutionized artificial intelligence and are rapidly transforming the cybersecurity landscape. As these powerful models become commonly used among both attackers and defenders, developing specialized cybersecurity LLMs has become a strategic imperative. The CrowdStrike 2025 Global Threat Report highlights a concerning trend: Threat actors are increasingly enhancing social engineering and computer network operations campaigns with LLM capabilities.
From Code to Agents: Proactively Securing AI-Native Apps with Cursor and Snyk
The rapid adoption of AI agents for development is creating a critical security gap. We are moving from predictable logic, deterministic code paths, and human-driven workflows to non-deterministic agents that reason, plan, and act autonomously using large language models across the broader software development lifecycle. As enterprises adopt these autonomous AI agents, the core challenge isn’t just the new risks and attack vectors; it’s a loss of runtime control.
Exploring Icetana AI's Triage Agent for Enhanced Alert Prioritisation
Here is a quick look at how an AI-powered triage agent can transform your security.
The Best Use Cases for Photo-to-Video AI in Real Estate Marketing
The real estate business is pretty visual:images, videos and virtual tours are used to lure potential purchasers and tenants. With competition heating up and buyers expecting more dynamic and engaging content, real estate marketers are getting morecreative to keep ahead. Photo to Video AI is a revolutionary technology in this field, playing a key role in converting the stillimages of properties into video sequences. Using this technology, realestate agents can present homes more effectively, captivate audiences, and ultimately sell and rent faster.
Featured Post
Security Shifts in 2026: Risk Moves Beyond the CISO
In 2026, cybersecurity will shift from being seen as the security team's responsibility to being part of how the entire company operates. Every business function will share ownership of risk. Finance, engineering, product, and marketing will all have clear roles in protecting customer trust.
World Class AI-Enabled Cybersecurity Conference - IdentityShield Summit 2026
Discover the future of Cybersecurity at IdentityShield Summit 2026 We’re inviting you to be a part of one of the biggest and boldest AI-driven cyber events, where you’ll deep dive into innovations, witness panels. It's a premier two-day event that brings together 5000+ global IT leaders, CISOs, CTOs, developers, and cybersecurity professionals. Get ready for an action-packed 2-day event! At this event, you can.
Secure AI coding with the 1Password hook for Cursor Agentic Coding IDE
In this video to learn how the 1Password hook for Cursor keeps your environment files secure while using AI-powered development in Cursor. See how 1Password Environments prevent plaintext API keys, hardcoded tokens, and long-lived secrets from ever touching your repo or disk.
AI, DDoS, and the Internet in 2025 | Cloudflare Radar Year in Review
In this special Year in Review episode of This Week in NET, host João Tomé is joined by David Belson to break down the Cloudflare Radar 2025 Year in Review. Together, they explore what Cloudflare’s global network reveals about how the Internet evolved over the past year — from the rapid rise of AI crawlers and agent traffic, to record-breaking DDoS attacks, the spread of post-quantum encryption, and the growing impact of government-directed shutdowns and outages.
Bringing secure, just-in-time secrets to Cursor with 1Password
Developers are moving faster than ever with AI. Cursor is redefining how software gets built, and 1Password is redefining how teams secure access to SaaS and AI. Today, we are announcing a new integration that brings these two worlds together in a way that keeps development speed high and credential risk near zero.
Regulatory Compliance & Data Tokenization Standards
Organizations across finance, healthcare, retail, and especially AI-driven sectors are facing increasing pressure from global regulators. The rapid expansion of AI, the growth of cross-border data flows, and the rise of new privacy frameworks all contribute to a landscape that demands more structure and accountability. In this environment, regulatory compliance and data tokenization are becoming inseparable.
Agentic Era: The Myths and Realities of It All
After four sessions covering the technical realities, business imperatives, and security challenges of agentic AI, Salt Security’s Co-Founder and CEO Roey Eliyahu, and Salt's CMO Michael Callahan, come together for an unfiltered conversation about where the industry actually stands and where it's headed. The gap between AI ambition and operational readiness has never been wider.
The Agentic Era is Here: Announcing the 4th Edition of AI & API Security For Dummies
If you look at the headlines, the story is about Artificial Intelligence. But if you look at the architecture, the story is about APIs. The reality of modern tech is simple: You can’t have AI security without API security. As we move rapidly from simple chatbots to autonomous agents, the way we secure our infrastructure must evolve. That is why we are thrilled to announce the release of the 4th Edition of AI & API Security For Dummies, Salt Security Special Edition.
Cybersecurity Predictions for 2026: Human Risk, AI Data Leaks, and the Next Big Breach
Looking back at 2025, two mega-trends from the past have continued: First, data breaches remained a constant and continued to trend upward; and second, there was once again a headline disaster no one anticipated. The first point needs no elaboration; data breaches are like air pollution—an accepted nuisance that only occasionally becomes so severe that we wonder why we live like this. For the second point, I gesture toward the major incidents of recent years. MoveIt. Crowdstrike. Snowflake.
CultureAI Joins Microsoft's Agentic Launchpad: What This Means for the Future of AI Usage Control
News AI Usage AI Risk Ria Manzanero Head of Marketing 18 December 2025 3 min read Share.
Building a Multi-Agent Security Pipeline with Google's A2A Protocol and GitGuardian
I built a demo showing how to wire up multiple AI agents using Google's Agent Development Kit (ADK) and the A2A protocol, with GitGuardian scanning content for secrets.
2026 Cybersecurity Predictions by Teleport CEO Ev Kontsevoy
2025 was a turning point for identity security. Many professionals realized that traditional human and machine-focused identity solutions just don’t work for AI. AI is non-deterministic like a human, yet it’s still software. This creates an entirely new identity category. Traditional IAM tools would treat AI identities as yet another separate type, creating new silos.
Demo: Manage security posture of GenAI apps
See how Cloudflare One helps you manage the security posture of GenAI tools like ChatGPT, Claude, and Gemini. This demo highlights: API integrations: Available for ChatGPT, Gemini, and Claude, and most popular SaaS apps 0:18 Posture findings: Scan for misconfigurations, unauthorized activity, and other security issues 0:50 Shadow AI discovery: Find what third-party AI apps access your SaaS tools 1:15.
Demo: Prevent data exposure in AI
See how Cloudflare One helps protect sensitive data when users interact with generative AI apps. This demo highlights secure access service edge (SASE) capabilities including: Data loss prevention (DLP) detections for sensitive content (e.g., PII, source code, financials) 0:22 Detections for data at rest in AI tools like ChatGPT 1:00 Guardrails for user prompts based on intent / topic to block jailbreak attempts, code abuse, PII requests, and other risky behavior 2:12.
Demo: Discover workforce use of shadow AI
See how Cloudflare One helps restore visibility and controls over unsanctioned use of AI tools. This demo highlights secure access service edge (SASE) capabilities including: Shadow AI reporting: Analyze how AI apps are used across your environment 0:10 Application confidence scores: Evaluate the risks posed by specific AI apps 1:10 Access controls: Allow, block, redirect, isolate, and more based on an app’s approval status 1:45.
Demo: Access controls for GenAI and agentic AI
See how Cloudflare One simplifies access controls across both generative AI and agentic AI communication — all from one unified secure access service edge (SASE) dashboard. This demo highlights: Securing human-to-AI connections by as blocking or redirecting from unapproved tools and isolating AI apps to protect data (0:09) Streamlining access to MCP servers for AI-to-resource connections via Cloudflare’s MCP server portals (1:10)
Solving the AI Data Gap: Secure Enterprise File Access via Egnyte's MCP Server
Enterprise organizations face a fundamental challenge in AI adoption. While tools like ChatGPT and Claude offer transformative capabilities, their effectiveness is limited without secure access to organizational data. Critical business information often stays locked in secure repositories, limiting AI assistants from providing business-specific insights. Without secure access to mission-critical content, AI assistants fall short of their potential.
The top 6 AI security trends for 2026-and how companies can prepare
AI is changing the threat landscape faster than organizations can respond. AI-generated phishing and fraud have increased sharply year-over-year, and GenAI is enabling more sophisticated cyber attacks than ever before. Businesses are feeling the pain. Our team at Vanta surveyed 2,500 business and IT leaders across the globe and found that nearly three-quarters believe AI threats are outpacing their ability to manage them.
How to Detect and Eliminate Shadow AI in 5 Steps
The pressure to integrate AI is immense. Your developers need to move fast, and they’re finding ways to get the job done. But this rush for innovation often happens outside of established governance, creating a sprawling, invisible risk known as Shadow AI. To secure your organization, you must first understand what Shadow AI actually is. It’s not just a developer downloading a file to their laptop. Shadow AI is the totality of unmanaged AI assets within your supply chain.
DeepChat AI agent XSS-to-RCE via Mermaid and Electron IPC
In December 2025, a critical remote code execution vulnerability was disclosed in DeepChat, an open-source desktop AI agent platform built using Electron. The issue, tracked as CVE-2025-67744, affects all DeepChat versions prior to 0.5.3 and carries a CVSS score of 9.6. The vulnerability arises from the interaction between two separate weaknesses. The first allows attacker-controlled JavaScript execution through unsafe rendering of Mermaid diagrams.
AIOps in the Cato SASE Platform: Using Predictive AI Networking to Shift from Reactive to Proactive IT
It was a quiet Monday morning until John, head of IT, opened his laptop and saw 424 new support tickets. Users across the office were reporting issues like “apps won’t load” and “internet not working.” After hours of investigation that stretched into the next day, the team traced the problem to a branch router overwhelmed by malformed DNS queries from a misbehaving IoT device.
The 12 Months of Innovation: How Salt Security Helped Rewrite API & AI Security in 2025
As holiday lights go up and inboxes fill with year-in-review emails, it’s tempting to look back on 2025 as “the year of AI.” But for security teams, it was something more specific – the year APIs, AI agents, and MCP servers collided across the API fabric, expanding the attack surface faster than most organizations could keep up. At Salt Security, we spent 2025 focused on one thing: defending the API action layer where AI, applications, and data intersect.
Building a Real-Time Multiplayer Chess Game Inside ChatGPT (Agents SDK)
In this clip from This Week in NET, Systems Engineer Steve James gives a hands-on demo of a real-time multiplayer chess game running inside ChatGPT, built with the Agents SDK and Cloudflare Workers. Beyond the demo, we talk about what developers can build today with AI agents — and why, given the pace of innovation, it’s genuinely hard to predict what applications and experiences will emerge in 2026.
The SOC Analyst Agent: Bring an Agentic approach to work with your SOC team
For years, security teams have dealt with the challenges of alert fatigue, endless tools and data sources, and constant context switching. But, so far, we haven’t been able to significantly improve it with traditional tools. However, new agentic approaches can start providing improved gains. This begins to change the way SOC teams operate and approach managing their talent.
Egnyte Joins the New ChatGPT App Ecosystem
Today, ChatGPT customers can add the Egnyte app to their workspace, enabling users to interact with Egnyte content directly within the ChatGPT app, giving you a powerful and secure way to use AI with your Egnyte content while respecting Egnyte context and permissions.
Risk Acceptance vs Risk Exposure: Making Smarter Security Investments
Before investing in new security tools, it’s critical to understand what your current stack is actually delivering. Barmak Meftah spoke about the importance of baselining existing investments to truly grasp risk acceptance versus real risk exposure. Without that foundation, new acquisitions lack context and are often driven by trends rather than necessity. Smarter decisions come from understanding:︎ What is already deployed︎ How it is configured︎ Where exposure persists.
Agentic AI and Shadow APIs: Why SecOps Needs Specialization Now
Agentic AI and Shadow APIs: Why SecOps Needs Specialization Now APIs are rapidly becoming the core “language” of AI, and when agentic AI can generate its own APIs, the security stakes rise significantly. In this clip from the A10 Networks discussion, “APIs are the Language of AI – Protecting Them is Critical,” A10 security experts Jamison Utter and Carlo Alpuerto unpack why specialized skills and tools are now essential for modern security operations teams.
Exploring The Future Of AI In Cybersecurity Penetration Testing
In recent years, the role of Artificial Intelligence (AI) in various fields has grown tremendously, and cybersecurity is no exception. As cyber threats evolve in complexity, the need for innovative solutions like AI-driven penetration testing becomes more crucial. AI has the potential to revolutionize how businesses approach security, making penetration testing faster, more accurate, and more effective. This article delves into the increasing role of AI in cybersecurity, particularly in penetration testing, exploring its benefits, challenges, and future implications.
Link11 Identifies Five Cybersecurity Trends Set to Shape European Defense Strategies in 2026
Link11 releases new insights outlining five key cybersecurity developments expected to influence how organizations across Europe prepare for and respond to threats in 2026. The findings are based on analysis of current threat activity, industry research, and insights from the Link11 European Cyber Report, alongside broader market indicators such as PwC's Global Digital Trust Insights 2026.
Misconfigurations Are Still Owning Security Teams
Garrett Hamilton sat down with Todd Graham, Managing Partner at Microsoft’s venture fund, M12, to talk about why M12 invested in Reach and why our mission was a no-brainer for him. Nation-state attacks make the headlines—but most people are getting owned by misconfigured servers, networks, and controls hiding in plain sight. Turns out the problem isn’t what teams don’t own. It’s what they do own that isn’t, in most cases, even turned on.
Are LLMs becoming messengers for attackers? #ai #cybersecurity
AI assistants with broad enterprise access are creating a new attack vector. Chris Luft and Matt Bromiley discuss the Gemini Jack vulnerability, where attackers used prompt injection to turn Google's AI assistant into an unwitting accomplice in data exfiltration. The attack embedded hidden instructions in documents or emails. When employees asked Gemini normal questions like "show me our budgets," the AI retrieved the poisoned document and executed the attacker's commands without anyone clicking anything.
Security Visionaries | Agentic AI Threats: Hype or Reality
Are agentic AI threats just hype or reality? Security Visionaries host Max Havey digs into the world of agentic AI-enabled threats and cyber espionage with guests Neil Thacker, Global Privacy and Data Protection Officer at Netskope, and Ray Canzanese, Head of Netskope Threat Labs. IN THIS EPISODE.
Finding the Best AI Governance Software for Enterprises
AI governance software provides GRC leaders and security and risk managers (SRMs) with a dependable way to understand how AI is being used across the business and whether safeguards are functioning as intended. The software can translate a complex ecosystem of tools and models into concrete insights that stakeholders can evaluate.
Securing the AI Frontier: How API Posture Governance Enables NIST AI RMF Compliance
As organizations accelerate the adoption of Artificial Intelligence, from deploying Large Language Models (LLMs) to integrating autonomous agents and Model Context Protocol (MCP) servers, risk management has transitioned from a theoretical exercise to a critical business imperative. The NIST AI Risk Management Framework (AI RMF 1.0) has emerged as the standard for managing these risks, offering a structured approach to designing, developing, and deploying trustworthy AI systems.
GDPR Compliance for AI Agents: A Startup's Guide
AI agents are moving fast. They book meetings, draft emails, summarize calls, search internal knowledge bases, and increasingly act on behalf of users. And as more teams adopt these systems, a familiar question surfaces almost immediately: How does GDPR apply to AI agents? What we’ve learned—working with startups rolling out AI features across support, sales, HR, and engineering—is that GDPR is not a blocker.
Old AI Security vs Evo: Watch Agentic Security Replace Weeks of Manual Work
From intelligent chatbots to autonomous agents, innovation has never moved faster thanks to GenAI. But with the rate of velocity comes a massive new challenge: a class of complex, non-deterministic security risks that traditional cybersecurity methods are simply not equipped to handle. AI-native applications are already running in production. Across industries, teams are deploying copilots, RAG systems, autonomous agents, and AI-powered workflows faster than traditional security processes can keep up.
INETCO's Bijan Sanii on Conversations Live: 'Cybersecurity is an arms race. AI today, quantum tomorrow'
At the recent Conversations Live with Stuart McNish panel on cybersecurity — part of the thoughtful public affairs dialogue series produced in partnership with the Vancouver Sun — industry leaders gathered to unpack the real-world risks shaping organizational resilience and national security. The event, held on Dec. 10, 2025, brought together experts from across the cybersecurity landscape to go beyond headlines and explore strategies for responding to evolving threats.
How security leaders can safely and effectively implement agentic AI
2025 began with experts warning about the dangers of agentic AI use—but that didn’t slow adoption. Our annual State of Trust Report shows that nearly 80% of organizations are either actively using or planning to use agentic AI. That acceleration is outpacing the governance required to keep these systems safe: A level of machine autonomy that would’ve been unthinkable just a few years ago is quickly becoming normalized.
Stop Feeding Logs to LLMs: A Multi-Agent Approach to Security Investigation
See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo Noam Cohen is a serial entrepreneur building seriously cool data and AI companies since 2018. Noam’s insights are informed by a unique combination of data, product, and AI expertise — with a background that includes winning the Israel Defense Prize for his work in leveraging data to predict terror attacks.
Secure AI Agent Infrastructure with Zero-Code MCP
Learn how to secure AI and MCP infrastructure without writing authorization code, rewriting MCP servers, or limiting agent work with Teleport’s zero-code MCP integration. AI agents are becoming powerful participants in engineering workflows. But without meaningful authorization boundaries, they can quickly become an existential security risk. AI agents do not behave like traditional applications. Instead, they generate actions and chain together tools in unpredictable ways.
Proactive WAF Vulnerability Protection & Firewall for AI + Multiplayer Chess Demo in ChatGPT
In this episode of This Week in NET, we talk with Daniele Molteni, Director of Product Management for Cloudflare’s WAF, about how Cloudflare responded within hours to a newly disclosed React Server Components vulnerability — deploying global protection before the public advisory was even released.
Questions to ask before vetting an AI agent for your SOC
So you’re ready to “hire” an agent or two for security operations. While AI agents won’t replace your human analysts, they are quickly becoming indispensable team members. Choosing the right ones should resemble a typical hiring process: you need to determine if they possess the necessary skills to fill your team’s gaps, work effectively with others, and grow with your organization. Here are five questions worth asking before you bring an AI agent on board in your SOC.
Why "We Thought It Was On" Keeps Leading to Breaches
At UC Irvine’s Digital Leadership Agenda 2026, moderated by Nicole Perlroth, Garrett Hamilton illustrates what those blind spots can look like: “We believed it was deployed.”“It was turned on.”“It should have stopped this.” Except one exception, one policy gap, one control not applied at scale — and assumptions replace reality. The real problem isn’t visibility. It’s continuously validating intent against execution.
Bridging the Global Cybersecurity Language Gap: How MachineTranslation.com Empowers Security Professionals
In today's hyperconnected digital world, cybersecurity isn't local, it's global. Criminals and nation-state attackers operate across borders, publish in multiple languages, and exploit ambiguities that arise when technical details get lost in translation. Meanwhile, defenders rely on timely threat intelligence, vulnerability disclosures, compliance guidance, and incident response playbooks, often issued in dozens of languages by vendors, cybersecurity agencies, CERTs, and independent researchers.
2025 cloud security roundup: How attackers abused identities, supply chains, and AI
In 2025, many of the long-standing cloud security concerns remained, but new areas of focus also developed. The significant increase in AI adoption enabled organizations to deliver features faster but also introduced new attack surfaces, such as untrusted or unpredictable user input for large language model (LLM) applications. At the same time, long-lived credentials and vulnerabilities in third-party packages continued to expose cloud environments to risk.
OWASP Top 10 for Agentic Applications 2026: Key Takeaways & How to Take Action
AI agents connect to APIs, execute code, move data, and make decisions with real permissions in live production environments — introducing a new class of security risks. To help organizations stay ahead, the OWASP GenAI Security Project released the OWASP Top 10 for Agentic Applications 2026. In this post, we’ll provide a summary of each agentic AI risk category defined by OWASP, along with actionable next steps to begin securing your agentic AI projects in 2026 and beyond.
We Asked AI Security Experts to Explain Their Work Using Emojis #AISecurity #AI #AppSec
Can you explain AI Security using only emojis? We challenged AI Security professionals to do just that — no words, just symbols. Their creative combos reveal how experts really think about risks, models, and protection in today’s AI-driven world. From to to , each emoji tells a story about securing the systems behind the world’s most powerful models. Subscribe for more creative takes on AppSec, AI Security, and secure development from the Mend.io team.
Predictions 2026: Surge in Agentic AI for Attacks and Defenses
Over the years, cybersecurity predictions tend to all sound the same. Ransomware attacks will continue, supply-chain incidents will increase, and phishing will remain a problem. However, the tail end of 2025 and 2026 presented the cybersecurity industry with a new concern, Agentic AI. Agentic AI capabilities far exceed the basic AI concerns that were reported in the past. Its ability to make decisions and take actions on its own, without needing a human to approve every step, is a game-changer.
Privacy First vs. Privacy Later: The Cost of Delaying in the AI Era
In the startup world, speed is oxygen. The mantra is familiar: move fast, ship the MVP, and break things if you have to. When you are fighting for traction, especially when building generative AI applications, privacy usually feels like a “nice-to-have.” It’s something you bolt on later once you have actual users and revenue. But treating data protection as a post-launch feature creates a specific, dangerous kind of liability.
Deepfake & AI Defense for Digital Insurance | Dr.Pawan Chawla (CISO & DPPO, Tata AIA Life Insurance)
In Episode of Guardians of the Enterprise, Dr. Pawan Chawla (CISO and DPPO, Tata AIA Life Insurance) joins Ashish Tandon (Founder and CEO, Indusface) to discuss the emerging cyber challenges facing the insurance industry. He highlights how cybercrime marketplaces are lowering barriers for attackers, the rise in third-party and internal risks, and other evolving threats shaping security priorities for insurers.
AI Pentesting in Action: A TL;DV Recap of Our Live Demo
If you missed the live walkthrough of Aikido AI Pentesting, here is the short version of what happened. We set up a real application, configured the assessment, and watched the agents test live flows, explore the app, and surface confirmed findings with full traces.
The 2025 Cloudflare Radar Year in Review: The rise of AI, post-quantum, and record-breaking DDoS attacks
The 2025 Cloudflare Radar Year in Review is here: our sixth annual review of the Internet trends and patterns we observed throughout the year, based on Cloudflare’s expansive network view.
CrowdStrike Secures Growing AI Attack Surface with Falcon AI Detection and Response
Artificial intelligence is transforming how organizations operate, innovate, and compete. From employees using GenAI tools to boost productivity to engineering teams building sophisticated AI agents and applications, AI has become central to modern business operations. AI now operates across every part of the enterprise, spanning endpoints, applications, identities, cloud services, data, and SaaS platforms.
The Future of E-Commerce Payment Processing Worldwide
E-commerce is now central to how you sell. Still, cross-border growth often exposes familiar pain points: you juggle multiple payment providers, wrestle with unfamiliar regulations, and watch customers abandon full carts when their preferred payment method is unavailable or too slow. At the same time, you need to control fraud, reconcile data across channels, and keep checkout fast and trustworthy on every device. In this environment, choosing an international payment gateway that can handle global reach, local expectations, and rising risk is becoming one of the most important strategic decisions you make.
Gemini 3 Pro Generates 7 Code Security Issues
Gemini 3 Pro Generates 7 Code Security Issues.
OWASP Agentic AI Top 10: Why It Matters and How Protecto Reduces Real-World Risk
AI agents are rapidly moving from experimentation into production across finance, healthcare, enterprise IT, and critical infrastructure. Unlike traditional applications, agents plan, reason, delegate, and act autonomously across systems and data sources. This expanded autonomy dramatically increases the security blast radius. To address this shift, OWASP released the OWASP Top 10 for Agentic Applications.
Introducing MCP client: use MCP tools with the AI Agent action in Tines
Tines is vendor-agnostic and interoperability is core to our intelligent workflow platform. With each iteration of AI agents in Tines, we’re extending that interoperability. Today, that includes MCP support in the AI Agent action.
The future of AI in Identity Security, with Martin Kuppinger and One Identity CEO Praerit Garg
Join One Identity CEO Praerit Garg and KuppingerCole Founder and Principal Analyst Martin Kuppinger as they discuss the evolution of IAM and thefuture of AI in Identity Security.
INE Highlights Enterprise Shift Toward Hands-On Training Amid Widening Skills Gaps
As AI accelerates job transformation, INE supports organizations reallocating Q4 budgets to experiential, performance-driven upskilling.
AI-Native Browsers Demand AI-Native Security: Why Legacy DLP Can't Protect You
In our recent analysis of AI browser exfiltration risks, we exposed how OpenAI's Atlas and Perplexity's Comet create permanent backdoors to sensitive data through persistent memory, autonomous agents, and cross-platform sync. The challenges with AI native browsers strongly resonated with CISO’s and security leaders we speak with on a daily basis. But the threat extends far beyond Atlas and Comet.
PII Detection in Unstructured Text: Why Regex Fails (And What Works)
Let’s look at something many teams quietly struggle with. Detecting PII inside unstructured text. It feels like it should be simple. After all, we’ve used regular expressions for years to find emails, phone numbers, and ID formats. Yet when we deploy regex in real environments. ticket systems, chat logs, CRM notes, uploaded documents, support transcripts. something becomes clear very quickly. Regex isn’t enough.
Adversarial AI: The New Symmetric Threat Landscape
Adversarial AI is geometrically making cyber a symmetric threat, fundamentally altering the cybersecurity equation. However, there are leaders who have successfully navigated these emerging challenges and understand the implications. Join Dr. Aleksandr Yampolskiy (CEO & Co-Founder, SecurityScorecard) and Dr. Srinivas Mukkamala (CEO, Securin Inc.) as they dive into: SecurityScorecard monitors and scores over 12 million companies worldwide.
The problem? The people you're blocking are often top performers.
Banning AI seems logical. Our new report shows why it's failing. The problem? The people you're blocking are often top performers. They're confident, innovative, and willing to work around the rules to get value. This video explains why this paradox changes everything. You can't just block curiosity. You have to harness it. Download the complete (ungated) report.
Data Leakage: AI's Plumbing Problem
Sensitive information disclosure ranks on the OWASP Top 10 for LLM Applications, and for good reason. When AI-powered applications inadvertently expose private data like personally identifiable information (PII), financial records, health information, API keys, or proprietary business intelligence, the consequences cascade quickly: regulatory violations, competitive disadvantage, and shattered user trust.
It's 2 AM. Do You Know Which AIs Your MCP Server Is Talking To?
When Anthropic dropped the Model Context Protocol (MCP) in late 2024, it felt like the missing puzzle piece for AI tooling: a standard way for Large Language Models (LLMs) to talk to data sources, APIs, and pretty much anything else you can think of. Think of it as a USB-C port for AI, as the protocol’s creators like to say. But like most shiny new standards, the devil’s in the details.
2026 API and AI Security Predictions: What Experts Expect in the Year Ahead
This is a predictions blog. We know, we know; everyone does them, and they can get a bit same-y. Chances are, you’re already bored with reading them. So, we’ve decided to do things a little bit differently this year. Instead of bombarding you with just our own predictions, we’ve decided to cast the net far and wide. We’ve spoken to cybersecurity experts from around the world to answer what’s, for us, the most pressing question of all.
All things AI and malware with Randy Pargman
Join us for this week's Defender Fridays as we explore the reality of AI-powered malware threats with Randy Pargman, Senior Director of Threat Detection at Proofpoint. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
How to choose AI security tools that actually reduce false positives
Let’s be honest: if your SOC is drowning in noise, you’re not “doing security.” You’re babysitting tools that cry wolf. And the wolves? They’re doing just fine. Every vendor claims their AI magically cuts false positives. Most don’t. Why?
Charlotte AI - 2025 MITRE ATT&CK Enterprise Evaluations
The 2025 MITRE ATT&CK Enterprise Evaluations featured sophisticated cross-domain attacks from Scattered Spider, and CrowdStrike's Charlotte AI proved essential in delivering 100% detection and protection with zero false positives. Charlotte AI accelerated every stage of security operations with Agentic Detection Triage for instant verdicts, Agentic Response that investigates alerts like expert analysts, and command-line analysis in plain language.
Mitigating Credential Phishing in the Age of AI and Cloud Convergence
Phishing remains one of the most effective methods for stealing credentials and breaching enterprise environments. Despite advanced email and browser protections, attackers now leverage AI, and automation to outpace traditional defenses. The Verizon 2024 Data Breach Investigations Report found that 68% of breaches involve the human element, often triggered within seconds of a phishing lure, just 21 seconds to click and 28 seconds to submit credentials.
AI, Creators & Agentic Commerce - A Conversation with Cloudflare CSO Stephanie Cohen
In this episode of This Week in NET, host João Tomé sits down with Stephanie Cohen, Cloudflare’s Chief Strategy Officer, for a candid conversation about AI, content creators, financial services, partnerships, and the future of the Internet. Stephanie shares how Cloudflare is helping keep the Internet open and resilient — from giving creators transparency and control over AI scraping, to enabling new models of agentic commerce through partnerships with Visa and Mastercard, to empowering organizations of all sizes through Cloudflare’s global network.
The OWASP Top 10 for Agentic Applications: A Milestone for the Future of AI Security
The OWASP GenAI Security Project has officially released its Top 10 for Agentic Applications, the first industry-standard framework focused on the operational risks created by autonomous and semi-autonomous AI systems. AI has evolved in a way that directly changes how enterprises need to think about security. We started with machine learning systems designed to classify and predict.
OWASP Top 10 for Agentic Applications (2026): What Developers and Security Teams Need to Know
Agentic AI is moving into production in CI/CD pipelines, internal copilots, customer support workflows, and infrastructure automation. These systems no longer just call a model. They plan, decide, delegate, and take actions on behalf of users and other systems. This creates new attack surfaces that do not map cleanly to traditional application security or even the OWASP Top 10 2025.
How Insurity Cut Manual Security Work by 81%
95 hours back. Every. Single. Month. One of the many outcomes from our ZTA journey with Insurity. They didn’t just deploy Zero Trust — they operationalized it. Reach unified controls, automated remediation, and eliminated the manual effort slowing progress. Results:︎ 81% less manual work︎ 95 hours saved per employee per month︎ Months → days for rollout︎ Zero Trust that sticks.
Beyond the Firewall: Securing Antiquated Systems from Agentic AI
Beyond the Firewall: Securing Antiquated Systems from Agentic AI A10 Networks security experts Jamison Utter and Carlo Alpuerto delve into the critical need for contextual visibility in API security, particularly in the emerging landscape of Agentic AI.
Why AI Privacy is a Competitive Advantage (Not Just Compliance)
In most startups building or using AI, privacy often gets treated like a checkbox that legal or security will “handle later.” That mindset quietly kills deals, scares off enterprise buyers, and limits your access to the very data your models need. Here is the truth that more founders and CTOs are embracing. Privacy makes your product easier to buy, models better to train, and business more valuable.
AI at the inflection point: Reclaiming human creativity and productivity
Artificial intelligence is changing how businesses work and compete. In every corner of the market, organizations expect more productivity. The question facing today’s business leaders is no longer whether to embrace artificial intelligence but how to harness its full potential to drive meaningful and sustainable transformation.
API Security for AI Agents: What CISOs Need to See, Govern, and Protect
AI agents are moving into every part of the business, and each one runs on APIs. Salt Security Co-Founder and COO Michael Nicosia and CMO Michael Callahan walk through what that shift means for security leaders. A single AI agent can generate thousands of API calls, and once agents start talking to each other through MCP servers and agent-to-agent protocols, the number climbs into the millions. That growth widens the attack surface and turns prompt injection into a common entry point.
The role of credentials in the AI espionage campaign reported by Anthropic
Anthropic recently announced that the company has disrupted the first reported AI-orchestrated cyber espionage campaign. This attack used Claude Code to automate many steps, with AI handling up to 90% of the tasks, including web searches and the autonomous writing of exploit code. The attackers bypassed Claude’s guardrails by breaking each step into small tasks and role-playing as a red team member.
Transforming AI Risk Awareness Into Measurable AI Governance
Only a few years ago, after more than a decade of debate over how cybersecurity incidents affect the financial stability of public companies, the U.S. Securities and Exchange Commission (SEC) finally made cyber risk disclosure a formal requirement. The intent was to bring transparency and accountability to a category of risk that had long been treated as technical rather than financial. Now, albeit voluntarily, AI has entered that same conversation, but the speed of its arrival has been remarkable.
The Autonomous Shield: Cybersecurity in the Age of Automation and AI
As businesses adapt to an ever-evolving threat and regulatory landscape, it is widely accepted that the next big challenge lies in scaling cybersecurity to keep pace. In fact, organizations have never experienced the volume, velocity, and severity of attacks that we witnessed in 2024 and are continuing to see in 2025.
Insights Agent: From Data to Decisions
Vulnerability and exposure data is only as valuable as the insights you can extract from it. Seemplicity’s Insights Agent changes the game by turning dense vulnerability information into actionable insights, surfacing meaningful trends and generating visual insights. No configuration or guesswork–just fast, contextual analysis that helps security teams focus on what matters most.
How AI agent privileges are redefining cyber insurance expectations
When ransomware drove record losses, insurers began scrutinizing basic controls like multi-factor authentication (MFA), backups, and endpoint detection. Now, AI-driven automation is introducing a new category of risk—AI agents—and insurers are responding with heightened attention to privilege management. AI agents are non-human identities that can approve payments, access sensitive data, and execute commands using powerful API keys.
When Al Agents go Rogue: What you're Missing in your MCP Security
No Fluff, Just Real-World Threats This isn’t your typical marketing webinar. We cover what Agentic AI actually looks like in production, how MCP servers work to broker instructions, and what kind of new threats are emerging. Agentic AI isn’t coming. It’s already here. Autonomous agents are now operating in production environments, reasoning, remembering, and taking real actions across your systems. They’re not just generating content. They’re triggering workflows, modifying records, and making decisions. And they’re doing it over APIs.
Securing AI Agents: How to See MCP Servers and A2A Traffic with Salt Security
AI agents have moved past conversation into action. They book transactions, pull sensitive data, and chain tools together through the Model Context Protocol (MCP) and Agent-to-Agent (A2A) traffic. Every one of those actions runs on APIs, and that connective tissue is where the risk sits. Salt Security Co-Founder and CEO Roey Eliyahu and VP of Product Strategy Nick Rago walk through the risks in the agentic action layer and show what Salt does about them.
You Can't Have AI Security Without API Security: The Agentic Action Layer
AI agents run on APIs, and that is where most security programs have a gap. Salt Security Co-Founder and COO Michael Nicosia and CMO Michael Callahan explain why you cannot secure AI without securing the APIs underneath it. An AI agent uses an LLM to reason and an MCP server to broker calls out to other systems, and every one of those calls is an API interaction. Deploy one agent and the traffic multiplies. Deploy hundreds, and the internal east-west traffic climbs to several times what a pre-AI environment carried.
Secure Your AI Workflows with Protecto's Data Masking API #startup #n8n
AI is evolving fast, but are your workflows truly secure? Most teams rely on DLP or redaction tools that strip sensitive data or block it entirely — but that limits your AI's potential. In this video, learn how Protecto’s SaaS Masking & Unmasking APIs help you process sensitive data (PII, PHI, PCI) securely, while staying compliant with GDPR, HIPAA, DPDP. No more trade-offs between data protection and powerful AI.
AI Browsers Are Here-But Enterprises Aren't Ready. Why Obrela Advises Extreme Caution
The cybersecurity landscape is changing at a pace we haven’t experienced since the dawn of cloud computing. The newest disruptor, the rise of AI browsers such as Perplexity Comet and OpenAI’s ChatGPT Atlas, promises to revolutionize user interaction with the web. But behind the innovation lies a long list of risks that enterprises cannot afford to ignore.
Building Security With Customers, Not For Them - Jay Wilson x Garrett Hamilton | Insurity Case Study
Partnership over Procurement Why true collaboration between vendors and security teams is still rare — not because the intent isn’t there, but because most engagements stop at feature checklists. The alternative is more interesting: build together, solve together, and create solutions that fit how teams actually work rather than how tools assume they work. This mindset drove our work with Insurity — a real example of what happens when a security team engages deeply instead of treating tooling as a finished product.
Master Video Production: Leveraging AI for Efficient Workflows
In today's rapidly changing industry of video production, being ahead of the curve requires embracing new ideas which is why Artificial Intelligence (AI) has become a major force in the game. Artificial Intelligence-driven technology is changing conventional workflows in video production and making video production more efficient as well as smarter than it has ever been. If you're a content creator, filmmaker, or video editor, knowing the best ways to use AI will significantly improve your workflow as well as enhance the production quality.
Automation Without Risks: Staying Secure with AI Browsers
Let's keep this simple. Most people don't get "hacked" in a dramatic movie way: they are not attacked by a team of professional geniuses aiming for millions of dollars in profits. They lose access to accounts, get locked out of work platforms, or leak something sensitive because of small, boring mistakes: a rushed click, reused password, and a browser stuffed with old logins. That's the reality.
Agentic AI Security: The Emerging Fourth Pillar of Cybersecurity
For decades, cybersecurity has been organized around three dominant pillars: endpoint security, network security, and cloud security. These domains have shaped technology categories, vendor ecosystems, and enterprise budgets. They have matured into multi-billion-dollar markets, each responding to successive waves of digital transformation. However, a tectonic shift is underway.
New AMOS Infection Vector Highlights Risks around AI Adoption
During a recent investigation into AMOS InfoStealer, Kroll Threat Intelligence Team has discovered a troubling new delivery vector that leverages the growing trust users place in AI tools. In this case, attackers leveraged ChatGPT as the source of guidance, tricking victims into initiating the infection, presenting it as a legitimate solution to a common technical problem. Victims were tricked into believing they were running a harmless command to fix a sound issue on their Mac device.
Google Gemini 3 Pro Builds an App with ONE PROMPT...
Google announced Gemini 3 Pro, which they tout as their most intelligent model yet that's best for complex tasks and bringing creative concepts to life. We're going to put this model to the test and see how good it is at fulfilling our prompt with a production ready app and the security of the code it produces.
How strategic CISOs turn AI risks into competitive advantages
As the flurry of excitement over fresh AI innovation begins to fade, risk leaders, heads of GRC and CISOs have a new challenge to tackle. Regulators, customers, and boards are all asking harder questions about how AI is used, secured, and audited. For CISOs, AI governance is now a board-level expectation. Some organizations will be able to confidently show their measured and documented approach to AI governance.
APIs, AI, and the Amplification of Security Risk
APIs, AI, and the Amplification of Security Risk A10 Networks experts Jamison Utter and Carlo Alpuerto discuss how the rise of Agentic AI is dramatically scaling up existing API security problems, creating an "amplification effect" rather than introducing fundamentally new security challenges.
Information Overload to Strategic Insights: How Egnyte's Deep Research Agent Transforms Enterprise Knowledge Discovery
Every day, professionals and knowledge workers lose hours digging through files, reports, and systems. The information is out there, but it’s buried. Instead of shaping strategy, people get stuck chasing down data. Even with strong IT, time spent searching has only grown since 2002, now averaging 1.8 hours a day, according to a McKinsey study. Think about it: They all need clarity fast. But, what they get is fragments spread across disconnected sources and hours of searching.
Overcoming the Challenges and Limitations of Data Tokenization
Tokenization replaces sensitive data with non-sensitive stand-ins called tokens. The mapping between the token and the original value sits in a secure service or vault. If attackers steal a database full of tokens, the stolen data has little value. This is why tokenization is popular for payment card industry (PCI) workloads, customer PII, and healthcare records. Yet tokenization is not magic. Like any control, it has weak points and practical limits. Teams often learn about those limits the hard way.
Third-Party Vulnerability: What the Mixpanel Incident Means for Millions of ChatGPT and API Users
In late November 2025, developers and API users of ChatGPT and OpenAI’s platform received a note that felt personal: an alert about a data exposure linked not to OpenAI’s own servers but to a third-party analytics vendor. That vendor was Mixpanel.
Falcon Shield Evolves with AI Agent Visibility and Falcon Next-Gen SIEM Integration
CrowdStrike is introducing two powerful innovations in CrowdStrike Falcon Shield to stop identity-based attacks in the AI era: a centralized view of AI agents across platforms and the integration of first-party SaaS telemetry into CrowdStrike Falcon Next-Gen SIEM — the industry’s first native integration of SaaS security posture management (SSPM) and next-gen SIEM.
The Future of AI in the Crane Industry: Safety, Intelligence, and Industrial Upgrading
As artificial intelligence (AI) technologies continue to advance, their influence is rapidly expanding across a wide range of industries. The crane and lifting-equipment sector is no exception. AI is reshaping how cranes operate, how they are maintained, and how future industrial environments ensure safety and efficiency. This article explores the key development prospects of AI in crane machinery-focusing on intelligence, safety, efficiency, and industrial transformation-through a security-centric lens suitable for modern industrial operations.
Secure-by-Design: Best Practices for Integrating AI Features into Modern Apps
AI-driven features have rapidly shifted from experimental add-ons to core expectations inside modern applications. Whether the goal is automation, personalization, or advanced data visualization, users now assume that intelligent components will be woven into their daily tools. Even something as simple as an online AI chart maker can become a standard part of how teams interpret information inside secure platforms, pushing developers to think more critically about how these capabilities are planned and protected.
Featured Post
Cyber Resilience and AI Risk: Safeguarding Critical Infrastructure in a New Threat Landscape
In October, the UK put a spotlight on cyber resilience with the release of the NCSC's 2025 Annual Review. CEO Richard Horne warned that failing to prepare for cyberattacks risks a company's future. The urgency behind this statement is backed by data: the NCSC handled 204 major cyber incidents between September 2024 and 2025, and 43% of UK businesses reported a breach in the past year.
Beyond security theater: How automated trust closes the AI readiness gap
AI is transforming businesses at breakneck speed—but security isn’t keeping up. According to Vanta’s State of Trust Report 2025, which surveyed over 2,500 business and IT leaders around the world, 3 in 5 say AI-related security threats are outpacing their expertise. With a majority of organizations experiencing threats weekly, AI is not just driving the volume, but the precision of these attacks.
Critical vLLM Flaw Exposes the Soft Underbelly of AI Infrastructure
While the world worries about "jailbreaking" LLMs or preventing them from hallucinating, a critical new vulnerability has just reminded us of a fundamental truth: AI is just software, and software has bugs. A newly discovered critical flaw (CVE-2025-62164) in vLLM, one of the most popular libraries for serving large language models, allows attackers to achieve Remote Code Execution (RCE) or crash servers simply by sending a malicious API request. This isn't a failure of the AI model.
Hackers hijack Google Smart Home #aisecurity #mcpserver
Building AI agents that can think, act, and adapt securely isn't easy. From prompt design to deployment, every stage brings new challenges and new risks. In this session, Bar-El Tayouri, Head of Mend AI at Mend.io, and Yehoshua (Shuki) Cohen, VP of Data and AI Evangelist at AI21 Labs, shared practical strategies for designing and defending agentic systems that actually deliver. Key topics covered: Originally recorded: October 29, 2024.
Malicious AI Tools Assist in Phishing and Ransomware Attacks
Researchers at Palo Alto Networks’ Unit 42 are tracking two new malicious AI tools, WormGPT 4 and KawaiiGPT, that allow threat actors to craft phishing lures and generate ransomware code. These tools are criminal alternatives to mainstream AI tools like ChatGPT, with no safety guardrails to prevent users from using them for malicious activities. The latest version of WormGPT offers lifetime access for $220, or a monthly fee of $50.
AI vs Security Architects - Augmentation, Not Replacement
Are AI systems replacing security roles? Maybe not the way most people assume. AI isn't eliminating architects — it's augmenting them. Architects sit at the strategic layer: influence, prioritization, long-term posture. AI’s power isn’t replacing that judgment — it’s continuously surfacing what matters, validating configurations, and helping teams scale impact without hiring “more architects.” "If I say something should be done, I need a way to know whether it was done correctly — and continuously.".
We Built Protecto SaaS Because $50K/Month Privacy Tools Didn't Make Sense for Startups
Six months ago, we encountered a problem with no clear solution. We were building an AI agent inside a startup. When customer conversations were flowing in, we started looking for privacy tools that could keep up. Everything we found fell into one of three buckets: Somewhere in the middle of this, we caught ourselves looking for a simple, affordable way to mask data before it hits AI systems.
LLMs, Quantum Computing, and the Top Challenges for CISOs in 2026
Cybersecurity in 2026 is entering its most transformative and volatile phase yet. For CISOs, the landscape is no longer defined only by web, network, and cloud threats. Instead, attackers now target AI/LLM systems, APIs, identity platforms, SaaS ecosystems and supply chains. The surge in attacks across applications, APIs, and GenAI systems indicates that adversaries are scaling faster, using automation, AI-assisted exploitation, and new social engineering vectors.
Delivering Intelligent IT Foundations for Safe AI Usage
JumpCloud CTO Greg Keller explains why traditional, fragmented IT tools create a critical Zero Trust gap for AI agents, bots, and non-human identities (NHIs). The biggest inhibitor to innovation isn't restrictive policy—it's the internal lack of a unified identity foundation. Learn how to address "identity sprawl" and transform IT operations to deliver auditable trust, extend Zero Trust enforcement to machine-to-machine interactions, and build the Intelligent IT foundations required for safe, accelerated AI adoption.
APIs are the Language of AI. Protecting them is Critical.
APIs are the Language of AI. Protecting them is Critical. In this discussion, A10 Networks security experts Jamison Utter and Carlo Alpuerto explore the emerging impact of Agentic AI on the API security landscape. They delve into how AI agents, as new API consumers, are driving an explosion in endpoints and exacerbating existing security issues, pushing API protection higher up the security practitioners' priority list.
Indirect Prompt Injection Attacks: A Lurking Risk to AI Systems
The rapid adoption of AI has introduced a new, semantic attack vector that many organizations are ill-prepared to defend against: prompt injection. While many security teams understand the threat of direct prompt injection attacks against AI agents developed by their organizations, another more subtle threat lurks in the shadows: indirect prompt injection attacks.
Why AI Security Requires Context: Introducing Issues & the Correlation Agent
Data is never the problem. Security teams rarely complain about having too much of it. The real danger comes from data that sits unconnected and unexplained. What teams actually need is data that is actionable and converges into meaning. Data that cuts deeper than surface level signals. Data that reveals what is unfolding and what needs to happen next.
Safe Harbor: An Open Source "Abort Mission" Button for Your AI Agent
AI agents are increasingly connecting to more systems and workflows. They read structured data, follow multi-step instructions, and can reach deep into applications and developer environments. The same capabilities that make them powerful also create new opportunities for attackers. As Zenity Labs continued to study these emerging attack classes, we noticed a pattern starting to appear.
Your Browser is Becoming an Agent. Zenity Keeps It From Becoming a Threat.
Agentic browsers are quickly becoming part of everyday work. Tools like ATLAS, Comet, and Dia can read web content, navigate SaaS tools, interpret instructions, and act on behalf of a user. They promise faster execution and higher productivity but they also introduce new risks that traditional security tools are not designed to see. As these browser-based agents spread across both managed and unmanaged devices, the enterprise attack surface grows in ways that most teams can’t quantify.
SOAR in the AI era: How SAP uses intelligent workflows to build an AI SOC
SOAR was created to help security teams work faster and more consistently by automating and orchestrating core security operations. It has always had to adapt to new and evolving technologies, but our current AI era has brought about a turning point. As cloud environments scale, manual playbooks can’t keep up. Now, it’s not enough to automate. We need systems that can understand the context they’re running in and adapt accordingly.
The New AppSec Reality: AI Anxiety, Silent Flaws, and Supply Chains
We recently published a series of polls across our social channels to get a pulse on some of today’s application security concerns with AI. These recent conversations with our community reveal a clear and urgent shift in the application security landscape. Results show that while established challenges like software supply chain security remain top of mind, the rapid pace of AI has created a new center of gravity for anxiety.
Does Your Team Trust AI More Than You?
Managers: When your team needs answers, are they coming to you or to AI? Our new report found 27% of employees now trust AI more than their colleagues or managers. In this video, we break down why banning AI creates a trust vacuum that's fundamentally breaking team structures.
Prompt Injection Attacks in LLMs: Complete Guide for 2026
In February 2023, a Stanford University student conducted a study that turned into one of the most widely followed security tests in AI history. Kevin Liu performed a simple prompt-injection attack, tricking Microsoft Bing Chat into disclosing its internal codename, Sydney, and exposing the entire list of its system prompts. The attack utilized no high-end toolkit, no zero-day, and no privileges, only specially crafted natural language.
AI in IAM: How much value is it really providing?
Let’s face it, AI is everywhere now. It has moved from novelty to necessity, reshaping the way we work, make decisions and secure our organizations. It guides how we plan trips, shop for essentials and discover information – but one of its most profound impacts is happening across enterprise environments.
Best Practices for Implementing Data Tokenization
Data is no longer confined to a few clean relational systems. It now flows through microservices, data lakes, event streams, vector databases, and LLM pipelines. Sensitive information spreads quickly, and once it reaches ungoverned surfaces—logs, analytics exports, embeddings—it becomes extremely painful to unwind. Tokenization is one of the few controls that can both minimize data exposure and preserve business functionality.
The Mythical 1+1=3 Model in Cybersecurity
The mythical 1+1=3 model in security? It happens when the tools you already own stop working in isolation — and start working as a system. Jay Wilson and Garrett Hamilton dig into why Reach’s platform approach matters: not just enhancing individual controls, but creating compounding value across identity, endpoint, email, and network. When visibility, configuration, and enforcement align, the outcome isn’t incremental — it’s exponential.
The AI Answering Service Wake Up Call for Modern Businesses
Here is the 4 a.m. question almost no owner says out loud. What actually happens when a real customer calls your business and you do not pick up? You assume it is not that bad and maybe they leave a voicemail. You think maybe they call back or your AI answering service catches it next time. The truth from the inside is uglier and I should know because I helped build the systems that make those calls disappear. I have watched good businesses bleed out through their phone lines while everyone stares at the wrong metrics.
From manual to intelligent: How the Vanta AI Agent transforms compliance work
Since the launch of the Vanta AI Agent, teams using the Vanta AI Agent are saving an average of four hours a week—time they can reinvest in building, shipping, and scaling securely. According to a recent Vanta customer survey, 91% of Vanta AI Agent users say it’s improved their audit readiness, and 86% report faster audit preparation overall. Teams had less manual work, fewer last-minute scrambles, and more time to focus on meaningful security improvements.
Communicating AI Risk to the Board: Bridging the AI Governance Gap
AI is altering business operations and workflows at a pace that few leaders have experienced before. GenAI deployments are rising across every department, expanding their influence and maximizing business productivity and efficiency. However, the moment the conversation shifts from AI's advantages to its inherent risk, the dynamic changes.
Product Spotlight: Building an AI-driven SOC at scale, with Reddit
Your security team is one-of-a-kind. Your AI SOC should be too. Join Thomas Kinsella, Co-founder and Chief Customer Officer at Tines, and Nick Fohs, Senior Manager, Enterprise Systems & Security, at Reddit, for a conversation around building and scaling an AI SOC - one that’s adaptable to your evolving needs. They’ll share how you can maximize your investments and the efficiency of your SOC by combining predictable, rule-based workflows with fully autonomous agents.
The Shadow AI reality: Inside Cato's survey results
AI tools have proved their worth in the workplace. They help us write, research, code, plan, and automate. They’re making employees faster and more productive, and helping businesses move and innovate at a pace that wasn’t possible before. But AI’s rise wasn’t orchestrated by IT. It didn’t always arrive through formal adoption plans or procurement cycles. It turned up in shared links to popular GenAI and other tools, self-sanctioned and adopted by users in minutes.
Inside the Agent Stack: Securing Agents in Amazon Bedrock AgentCore
In the first installment of our Inside the Agent Stack series, we examined the design and security posture of agents built with Azure Foundry. Continuing the series, we now focus on Amazon Bedrock AgentCore, a managed service for building, deploying, and orchestrating AI agents on AWS.
Securing the New AI Edge: Why Salt Security Is Bringing MCP Protection to AWS WAF
The definition of the "edge" is changing. For years, security teams have focused on the traditional perimeter: web applications, public APIs, and user interfaces. We built firewalls, deployed WAFs, and established strict access controls to keep bad actors out. But with the rapid adoption of Agentic AI, the perimeter has expanded. Today, your "edge" isn't just where users connect to your apps; it's where AI agents connect to your data.
Run AutoMCP To Supercharge Your AI Agent with Libraries MCP Servers
Artificial Intelligence (AI) is transforming software development with agentic coding tools like GitHub Copilot and Cursor, leading the charge. These tools use AI to assist developers in writing code, automate repetitive tasks, and expedite the development process.
Is AI taking entry-level jobs a good thing? #cybersecurity #ai #podcast
There's growing concern that AI automation is removing the hands-on experience junior analysts need to develop into senior defenders. In this Intel Chat, Matt Bromiley and Chris Luft challenge that assumption. Matt breaks down why the traditional entry-level path of endless log review and alert triage was never the best training ground to begin with. Log detection, alert triage, and drift detection are often cited as how defenders learn the trade. But most analysts never had time to get to drift detection because they were buried in repetitive work.
Stop Gambling on Compliance: Why Near100% Recall Is the Only Standard for AI Data
LLMs, agents and retrieval‑augmented models are increasingly being adopted for product analytics, customer support and decision‑making workflows. With that scale comes exposure: AI privacy and security incidents incidents involving customer PII are more common than ever and becoming a compliance issue. Let’s look at the statistics: These underscore the importance of robust guardrails and why relying on privacy tools with mediocre recall is a gamble.
Vibe Code Prompt to Build an Application!
Vibe Code Prompt to Build an Application!
Fixing Shadow APIs: Why True Remediation is Critical in the Age of AI
Fixing Shadow APIs: Why True Remediation is Critical in the Age of AI Agentic AI is fundamentally changing the security landscape, transforming how we think about API protection. In this insightful discussion, A10 Networks security experts Jamison Utter and Carlo Alpuerto dive deep into the challenges presented by this new wave of automation and API consumers.
WatchGuard Threat Lab's top six cybersecurity predictions for 2026
WatchGuard has revealed its top six cybersecurity predictions for 2026, forecasting a year where AI-driven threats, regulatory pressures, and the decline of legacy tools will reshape the security landscape. Corey Nachreiner, chief security officer at WatchGuard Technologies, emphasises that organisations must prepare for rapid evolution in both attack methods and defensive strategies.
Reach Security Joins the Microsoft for Startups Pegasus Program to Accelerate Agentic AI for E3/E5 Security Optimization
Reach Security announces its acceptance into the Microsoft for Startups Pegasus Program. Through the Pegasus Program, Reach will collaborate with Microsoft to help enterprise customers optimize their use of Microsoft E3 and E5 security suites by addressing configuration, visibility, and operational gaps through agentic AI.
Cyber Startup Frenetik Launches with Patented Deception Technology That Bets Against the AI Arms Race
While most cybersecurity companies pour resources into AI models, massive compute, hoovering up all the data, and enhanced analytics to detect and prevent threats, Frenetik, a Maryland cyber startup, is betting on something simpler: making sure attackers don't know what defenders know. The company emerged today with a fundamentally different approach using novel cyber deception and a newly issued U.S. patent to back it.
AI Adoption Surges While Governance Lags - Report Warns of Growing Shadow Identity Risk
The 2025 State of AI Data Security Report reveals a widening contradiction in enterprise security: AI adoption is nearly universal, yet oversight remains limited. Eighty-three percent of organizations already use AI in daily operations, but only 13 percent say they have strong visibility into how these systems handle sensitive data. Produced by Cybersecurity Insiders with research support from Cyera Research Labs, the study reflects responses from 921 cybersecurity and IT professionals across industries and organization sizes.
From machine to intelligent identity: The AI security challenge #Shorts #SecurityMatters
From machine to intelligent identity: The AI security challenge.
Reco + Torq: Dynamic SaaS Security, Fully Automated
See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo Torq AMP spotlights the partners redefining what’s possible in security operations. Each partner brings a unique strength that seamlessly extends Torq’s autonomous SOC platform. Together, these partnerships help SOC teams achieve speed, accuracy, and scale that were once out of reach. Explore the future of SOC in the AMP’d Sessions video series.
Is AI a cost-effective solution to alert noise? #cybersecurity #AI #SOC #podcast
Security teams are drowning in alerts, and AI might not be the answer everyone thinks it is. In this episode, Erik Bloch, VP of Security at Illumio, breaks down the math on why AI-powered alert triage may be financially unfeasible for most organizations. With 85 to 90 percent of alerts being non-malicious, security teams are still sorting through massive volumes of noise to find the real threats. Many vendors are betting that AI will solve this problem by triaging alerts at scale. But the reality?
How Generative AI is Changing the DLP Landscape
Generative AI has revolutionized productivity, but it has also introduced a new class of data risk that legacy DLP tools simply can’t see. From engineers pasting source code into ChatGPT to marketers rewriting strategy docs, sensitive IP is leaving the browser through "Shadow AI" channels daily. Learn why traditional pattern matching fails against LLMs and how a data lineage approach secures AI usage without halting innovation.
Introducing Cloudflare AI Security Suite
Learn how Cloudflare helps you secure generative and agentic AI everywhere with visibility, controls, and data protections.
Reach Security Ranked #5 on the TechRound100 | Exposing and Fixing Real Security Risk
Honored to share that Reach Security has been named on the TechRound100, recognizing the most impactful and innovative startups of the year. This milestone reflects the problem we’re focused on solving: most organizations don’t lack tools—they lack visibility into how those tools are actually deployed. By exposing misconfigurations, shallow deployments, and missing protections, Reach helps teams fix the risks that matter most before they become incidents.
Types of Data Tokenization: Methods & Use Cases Explained
Tokenization isn’t new, but 2025 forced everyone to rethink it. You’ve got AI pipelines ingesting messy text, microservices flinging data around like confetti, and regulators asking for deletion receipts like they’re Starbucks orders. Most companies slap together a regex mask and call it “privacy.” Spoiler: it isn’t. Real data protection often hinges on choosing the right type of tokenization for the job.
Security Visionaries | Disrupt or Defend? An AI Grudge Match
What does the rise of generative AI mean for the mandates of a CIO and CISO? In this episode of Security Visionaries, host Emily Wearmouth is joined by Netskope's Chief Digital & Information Officer (CDIO) and Chief Information Security Officer (CISO) to discuss top tips for both disrupting and defending your organization in the age of generative AI.
AI Meets Kubernetes Security: Tigera CEO Reveals What Comes Next for Platform Teams
Platform teams are tasked with keeping clusters secure and observable while navigating a skills gap. At KubeCon + CloudNativeCon North America, The New Stack spoke with Ratan Tipirneni, President and CEO of Tigera, about the future of Kubernetes security, AI-driven operations, and emerging trends in enterprise networking. The highlights from that discussion are summarized below.
AI Browsers: A Security Nightmare Flipping the Board on Decades of Security Progress
Modern browsers are among the most hardened mass consumer applications that we have access to. Decades of work have produced strict isolation between sites, safer defaults for cookies, strong TLS enforcement, controlled permissions, and a user experience that steers people away from phishing and fraud. The result is a trustworthy gatekeeper that keeps untrusted sites and attacker payloads confined to their own sandboxes.
CrowdStrike Leverages NVIDIA Nemotron in Amazon Bedrock to Advance Agentic Security
Adversaries are increasingly adopting AI technology to make their cyber operations faster, more efficient, and harder to detect. To stay ahead, defenders need intelligent systems capable of reasoning and acting with the same speed and accuracy as the adversary. CrowdStrike empowers defenders with the CrowdStrike Falcon platform, our agentic security platform that is fueled by AI built and governed by experts who understand the mission of defense.
Say Hello to Ask Pepper AI: Turning API Security into a Conversation
In the world of cybersecurity, we have a "data" problem. We have more of it than ever before, more logs, more alerts, and definitely more APIs. But recently, this challenge has compounded. The rise of Agentic AI and Model Context Protocols (MCPs) has exploded the number of machine-to-machine connections in our environments. These agents spin up new pathways and access data in ways that are often invisible to traditional monitoring.
Navigating AI risks: understanding and mitigating prompt injection
AI is becoming a routine part of technical operations. Teams use models to support ticket triage, incident routing, knowledge retrieval, code analysis, and customer interactions. As these agents move closer to production workflows, the conversation about security becomes much more important. One of the most persistent and widely misunderstood issues is prompt injection. It is not a vulnerability that can be fully patched or trained away.
Can Claude Opus 4.5 Build a SECURE Note Taking App?
Can Claude Opus 4.5 actually build a secure, fully functional note-taking app? In this video, I challenge the latest Claude model to create an app with real features — create, edit, update, delete, plus basic security — and see if the code holds up in practice. This is a real test of how far AI can go in building usable software.
Secure your code at scale with AI-driven vulnerability management
As development teams adopt generative AI at an unprecedented pace, security teams face an evolving set of challenges in securing the software development life cycle. The increasing speed and scale of code changes make it more difficult for organizations to manage risk effectively. Legacy scanners often fail to keep up, returning slow results and noisy alerts that increase remediation time and leave organizations exposed to potential breaches.
Zero Trust That Actually Works: How Reach Maps NIST & CISA Frameworks Into Real Security Gains
Most organizations don’t lack intent; they lack a clear understanding of what’s deployed today, what gaps matter most, and how to turn guidance into enforceable baselines. Reach connects to your existing security tools and automatically maps configurations to established maturity models like CISA’s Zero Trust Maturity Model 2.0 — producing a real-time posture assessment across identity, device, endpoint, email, and network with no surveys or guesswork.
Torq HyperAgents: The Next Evolution of Agentic SecOps
See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo Tal Benyunes was one of the first engineers at Torq and now leads Product for HyperAgents, Torq’s agentic AI initiative. Shaped by early career roles in mission-critical cybersecurity environments and leading companies, Tal brings deep technical expertise and strategic insight to the development of AI Agents.
Release 783 Brings LLM Monitoring, ARM Support, Enhanced Rules, Mac Improvements and More
We are excited to announce Platform Release 783, a massive update with over 470 features and improvements, focusing on adapting to the modern digital workspace by delivering deep visibility, better protection, and higher privacy. Here is a summary of the new features and improvements available in this release. For an extensive list, please refer to the detailed Release Notes.