Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Featured Post
The UK's Cyber Action Plan marks the end of compliance-led security

The UK's Cyber Action Plan marks the end of compliance-led security

Mar 31, 2026 By Dan Jones, Senior Security Advisor EMEA In Tanium
The UK government's new £210 million Cyber Action Plan signals an important shift in how cyber risk is being addressed at a national level. Designed to strengthen cyber defences across government departments and the wider public sector, the plan establishes a new Cyber Unit and introduces stronger expectations around resilience, accountability and operational capability.
Read Post
bitsight

AI Integration Security: Why the Biggest Risk Is Not the Model

Mar 31, 2026 By Emma Stevens In BitSight
When people talk about AI security risks, the conversation usually starts with the model. Can it be jailbroken? Can someone get around the guardrails? Can an attacker make it say or do something it should not? Those are fair questions, but they are not the most important ones. The bigger risk is not the model on its own: it’s everything the model is connected to.
Read Post
Feroot

Feroot Launches AI-Powered Digital Consent Audit to Prove CMP Enforcement

Mar 31, 2026 By Feroot In Feroot
Organizations have invested heavily in consent management. Consent Management Platforms (CMPs) are standard infrastructure for privacy programs, and for good reason. Regulations like GDPR, CCPA/CPRA, LGPD, PDPA, and HIPAA require organizations to obtain, record, and honor user consent before collecting or processing personal data. CMPs provide the framework to do that. Most organizations have done the right thing, they just don’t know if they’ve done the right thing right.
Read Post
cato networks

Mythos and Beyond: Cato Addresses the Generational Shift in Cyber Threats with Agentic Security Researchers

Mar 31, 2026 By Shlomo Kramer In Cato Networks
Anthropic’s upcoming Mythos model points to something far more consequential than another leap in artificial intelligence. It signals a shift that could redefine the balance between attackers and defenders in cyberspace.
Read Post
Tines

How intelligent workflows help MSSPs deliver customer outcomes at scale

Mar 31, 2026 By Thomas Kinsella In Tines
For managed security service providers (MSSPs), customer loyalty is the most critical indicator of business health. Unlike other metrics that you directly control, such as mean time to respond or mean time to detect, it can’t be gamed: customers will either stay with you or they’ll churn. This means that the top priority for any MSSP should be to deliver the specific customer outcomes they were hired to provide, like helping to stop threat actors before they cause damage.
Read Post

AI Bias Is More Dangerous Than You Think #shorts

Mar 31, 2026 By Protecto In Protecto
AI bias is a real problem. Bias can enter AI systems in many ways: That’s why governments and organizations are focusing on responsible AI policies to ensure AI benefits everyone equally, not just one group. Responsible AI means reducing discrimination and ensuring fairness across all communities. Watch The Full Podcast: Link Below.
View Video

When AI Stops Assisting and Starts Acting

Mar 31, 2026 By Tanium In Tanium
For decades, the service desk has operated on a simple assumption: humans must interpret every IT problem before action can be taken. A ticket is created. Teams investigate. Data is pulled from multiple tools. Eventually someone determines the root cause and decides what to do next. It works - but it's slow, reactive, and heavily manual. That assumption is starting to change. With Tanium AI agents in ServiceNow Now Assist for ITSM connected to Tanium's real-time endpoint intelligence, machines can now understand issues, analyze live telemetry, and recommend or execute remediation in seconds.
View Video
armo

eBPF for AI Agent Enforcement: What Kernel-Level Security Catches (and What It Misses)

Mar 31, 2026 By Yossi Ben Naim In ARMO
Your team deployed Tetragon six months ago. TracingPolicies are humming along—you’re catching unauthorized binary executions, blocking suspicious network connections, and generating seccomp profiles from observed behavior. Runtime security for your traditional workloads is solid. Then engineering ships their first autonomous AI agent into production. A LangChain agent connected to internal databases, external APIs through MCP tool runtimes, and a vector database for RAG.
Read Post
armo

Securing AI Agents on GKE: Where gVisor, Workload Identity, and VPC Service Controls Stop Working

Mar 31, 2026 By Shauli Rozen In ARMO
You enable GKE Sandbox on a dedicated node pool, bind Workload Identity Federation to your AI agent pods, wrap your data services in a VPC Service Controls perimeter, and deploy your agents with the Agent Sandbox CRD using warm pools for sub-second startup. Your security posture dashboard shows every control configured and active. And then an attacker uses prompt injection to trick an agent into exfiltrating sensitive data through API calls that every single one of those layers explicitly allows.
Read Post
appknox

4 Phases, 357 Crashes, 2 Bugs: What AFL++ Campaign Actually Looks Like

Mar 31, 2026 By Vinay Kumar Rasala In Appknox
357 crash files. 2 real bug sites. That’s the outcome of this AFL++ campaign after roughly 8.5 billion executions across multiple harnesses, binaries, and phases. At first glance, everything looked like success. Crashes were increasing steadily. New inputs were being generated every few seconds. Coverage appeared to improve over time. From a surface-level perspective, the campaign looked productive. Then triage began.
Read Post

AI Takes Over RSAC Conference (Now What?) with Dave Bittner

Mar 31, 2026 By Rubrik In Rubrik
In this RSAC 2026 Conference recap, Dave Bittner, Host of the CyberWire Daily podcast, joins Data Security Decoded host Caleb Tolin from the guest seat to discuss the biggest theme dominating the conference: artificial intelligence, and, more specifically, agentic AI. From wall-to-wall AI messaging across San Francisco to in-depth conversations with security leaders and analysts, one thing became clear: the industry has moved past debating whether AI will take hold. It already has. Now, the focus has shifted to making it safe.
View Video
appknox

Gemini XSS Vulnerability: When AI Executes Malicious Code

Mar 31, 2026 By Jeel Patel In Appknox
Artificial intelligence is no longer just generating text. It generates and executes code in real time. With tools like Google Gemini, features such as code canvases and live previews are turning AI systems into interactive execution environments. This shift introduces a new and rapidly growing category of risk: AI security vulnerabilities tied to real-time code execution.
Read Post

Is Your Patch Management Strategy Ready for AI-Powered Attacks? | Nishith Datta | Titan

Mar 31, 2026 By Indusface In Indusface
In this Episode of Guardians of the Enterprise, Ashish Tandon, Founder & CEO, Indusface and Nishith Datta, Head of Cybersecurity at Titan, discusses one of the most pressing challenges in modern security, vulnerability patching in the age of AI. As AI accelerates both the scale and sophistication of attacks, traditional patching cycles are no longer enough. Nishith shares his frontline perspective on how enterprises securing omnichannel consumers must rethink their approach to exposure management.
View Video
levelblue

7 Important Questions Facing CISOs on Bridging the Gap Between AI Threats, Supply Chain, and Cyber Resilience

Mar 31, 2026 By LevelBlue In LevelBlue
A CISO’s job never ends, and, according to a recent LevelBlue survey, the issues they are dealing with on a daily basis are piling up, causing some disconnect in priorities and a misunderstanding of how to accomplish specific cybersecurity goals. To help answer some of the more pressing questions CISOs face and to gain a different perspective on the survey’s results, we sat down with LevelBlue’s Chief Security & Trust Officer, Kory Daniels.
Read Post
Torq

The 2026 AI SOC Leadership Report: What 450 Security Leaders Told Us

Mar 31, 2026 By Ofer Smadari In Torq
See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo When we started building Torq four years ago, we had a thesis: the SOC was broken, and automation — real automation, not another tool bolted onto the stack — was the way to fix it. AI has since changed the game entirely. But has it streamlined the SOC, or introduced new complexity? We wanted to find out.
Read Post

Episode 29: When AI becomes a security problem ft. Tamaghna Basu

Mar 31, 2026 By ManageEngine In ManageEngine
AI has quietly moved from experiments to real-world systems that now write, decide, and reason alongside us. But as these systems scale, so do the risks. From hallucinations and data leakage to prompt injection and model abuse. In this episode of Server Room, we sit down with Tamaghna Basu, Founder of DeTaSECURE, to explore what it really takes to build and secure AI systems in production and why the future of AI will depend not just on intelligence, but on trust.
View Video

Kimi Found 40+ Security Issues in Our Code. Open Source AI Is Here | Michelle Chen

Mar 31, 2026 By Cloudflare In Cloudflare
In this episode of This Week in NET, host João Tomé is joined by Michelle Chen from Cloudflare’s AI product team to discuss the rise of open models, the launch of Kimi 2.5 on Workers AI, and why enterprises are rethinking the cost of proprietary AI.
View Video
Zenity

My First RSA: Agents, Challenges, and Community

Mar 31, 2026 By Kayla Underkoffler In Zenity
I am no stranger to conferences, and certainly no stranger to security conferences. Over the years, BlackHat and DEFCON have both become staples of my calendar. But this year brought a new one to the list: RSA, and it truly lived up to the hype. The show floor was full of bright lights, fancy booths, and yes, tattoos, if you knew where to find them.
Read Post
armo

AI Agent Security Framework on AWS EKS: Implementation Guide

Mar 30, 2026 By Yossi Ben Naim In ARMO
You’ve enabled GuardDuty EKS Runtime Monitoring across your clusters. You’ve configured IRSA for your Bedrock-calling agents. CloudTrail is logging every bedrock:InvokeModel event. And last Tuesday, one of your AI agents exfiltrated 12,000 customer records through a sequence of API calls that every one of those tools recorded as completely normal—because at the control plane level, they were.
Read Post
cultureai

AI Adoption Surging in Financial Services - But Control Lagging

Mar 30, 2026 By CultureAI Team In CultureAI
Artificial intelligence is moving rapidly from experimentation into everyday use across financial services. From client servicing and research to operations and risk analysis, AI is increasingly embedded in core workflows. This shift is widely recognised within the industry. Recent research indicates that 67% of financial services organisations report rapid AI adoption, with 93% ranking AI as a top security priority heading into 2026. At the same time, governance structures are being established.
Read Post
sophos

Where AI in the SOC is actually delivering - and where it isn't

Mar 30, 2026 By Jon Munshaw In Sophos
Where AI in the SOC is actually delivering — and where it isn’t“We’ll have a generation of security professionals who can supervise AI but can’t function without it." For all the noise surrounding “agentic AI” in cybersecurity, security operations centers are still wrestling with the same fundamental questions: What does AI genuinely improve today? Where does it fall short? How can organizations tell the difference?
Read Post

Cyberattacks tied to conflict in Iran, open source exploit & AI espionage / Intel Chat [#306]

Mar 30, 2026 By LimaCharlie In LimaCharlie
In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community. Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.
View Video
reach security

What is Configuration Drift? 5 Best Practices for Your Team's Security Posture

Mar 30, 2026 By CP Morey In Reach Security
Security configurations are not static. They evolve over time due to software updates, policy changes, emergency patches, and human intervention. While these changes are often necessary, they can lead to configuration drift, a gradual misalignment between an organization’s security controls and its intended security policies.
Read Post

Stop Fearing AI - Learn To Use It #shorts #ai

Mar 30, 2026 By Protecto In Protecto
Many people are afraid of Artificial Intelligence. Questions like: The truth is simple: AI is not going anywhere. Instead of fearing AI, the smarter approach is learning how to use AI tools responsibly in your daily work and career. Just like the internet and smartphones changed industries, AI is the next big technological shift. Start small, learn AI tools, and adapt to the future. Watch The Full Podcast: Link Below.
View Video
graylog

Understanding AI Compliance When Choosing AI-Enabled Solutions

Mar 30, 2026 By Jeff Darrington In Graylog
2001: A Space Odyssey introduced the world to HAL 9000, the fictional artificial intelligence (AI). HAL’s capabilities include everything from facial recognition to natural language processing and automated reasoning. As HAL malfunctions over time, the computer becomes violent to prevent the humans from disconnecting it. The story serves as a morality tale suggesting that without human oversight, AI is dangerous.
Read Post

Session on Ghost in the Machine: Attacking Non-Human Identities in the Age of AI Agents

Mar 30, 2026 By miniOrange In miniOrange
In this eye-opening talk - DEF CON Pune (DCG-9120) held at Indira Group of Institutes, Mr. Kalpesh Hiran, VP of Technology at miniOrange, exposes the hidden dangers of Non-Human Identities (NHIs) - the API keys, service accounts, OAuth tokens, and AI agents powering your infrastructure. He spoke on organizations create 92 NHIs for every human user, Yet 97% are over-privileged, lack MFA, and linger as "orphans" post-project, fueling 80% of cloud breaches.
View Video

Securing OpenClaw Access So It Can't Go Rogue

Mar 30, 2026 By Teleport In Teleport
In this video, we demonstrate how to securely grant an AI agent (OpenClaw) access to Teleport-protected Kubernetes resources using Teleport Machine Identity and tbot, without exposing secrets, API keys, or long-lived tokens. You’ll see how Teleport treats AI agents as first-class identities, enforcing strict RBAC controls so the agent can only do what it’s allowed to do, like reading logs, while being blocked from sensitive actions like deleting resources or accessing secrets.
View Video
apono

Claude Code Auto Mode: What It Means for AI Agent Privilege Management

Mar 30, 2026 By Gabriel Avner In Apono
Anthropic’s new Claude Code Auto Mode Auto Mode is generating well-deserved attention. It introduces a classifier that sits between the developer and every tool call, reviewing each action for potentially destructive behavior before it executes. It’s a real improvement over the only previous alternative to manual approval: the –dangerously-skip-permissions flag. But the announcement is also useful for a broader reason.
Read Post
armo

AI Workload Security on Azure: Evaluating Defender for Cloud Against Specialized Runtime Tools

Mar 30, 2026 By Ben Hirschberg In ARMO
Your SOC gets a Defender for Cloud alert: “Suspicious API call from AI workload pod.” You click through and find a LIST secrets call against the Kubernetes API server from a pod running your invoice-processing agent on AKS. The pod’s Workload Identity has Contributor access to your key vault. By the time your analyst opens the AKS Security Dashboard, the pod has been rescheduled.
Read Post
acronis

What MSP and IT leaders need to know about security, compliance and AI in 2026

Mar 29, 2026 By Lee Pender In Acronis
Artificial intelligence (AI) is transforming how organizations operate, but it’s also reshaping one of the most complex areas of IT: compliance. What was once a structured, checklist-driven process is now one that is continuous and fast-moving and that introduces new risks, dependencies and expectations. As AI adoption accelerates, so does the pressure on both managed service providers(MSPs) and IT professionals to interpret and comply with evolving regulations.
Read Post
cato networks

TeamPCP: Supply Chain Attack Targets Trivy, KICS GitHub Action, and LiteLLM

Mar 29, 2026 By Dr. Guy Waizel In Cato Networks
Security vendors have linked recent incidents involving trusted software components to a supply chain attack campaign by TeamPCP, a cloud-focused threat actor group. The reported activity involved three widely used types of development components, which include.
Read Post
knowbe4

How Adaptive Email Security Helps Navigate Threats in the Age of AI

Mar 27, 2026 By KnowBe4 Team In KnowBe4
A finance employee receives an email that appears to come from the CFO requesting urgent payment approval. The message references a current project, uses the correct tone, and arrives at a plausible time. However, the email wasn’t written by a colleague — it was generated by AI. And it contains a malicious link. These attacks are becoming more common as threat actors use AI to produce convincing phishing emails, automate impersonation attempts, and launch social engineering campaigns at scale.
Read Post
cultureai

RSA 2026: The Shift Toward Security FOR AI

Mar 27, 2026 By CultureAI Team In CultureAI
RSA Conference 2026 made one thing clear very quickly. Security leaders are done with generic AI pitches. After two years of relentless “AI everything,” the market is now pushing back. There is a growing fatigue with vague promises, surface-level features, and what many are calling outright AI washing. The result is a trust gap. What cut through this year was not another AI-powered detection claim. It was a much more grounded question.
Read Post

Trivy/LiteLLM Breach: How to Identify Your Exposure and Contain It - 20-min Live Demo

Mar 27, 2026 By GitGuardian In GitGuardian
In this 20-minute live demo with Eric Fourrier (CEO and Founder of GitGuardian), Guillaume Valadon (Staff Cybersecurity Researcher at GitGuardian), & Dwayne McDaniel (Principal Developer Advocate at GitGuardian), you'll see how to determine if your machines were compromised by the ongoing Trivy and LiteLLM supply chain attack (attributed to TeamPCP), then scan for exposed secrets and get moving on remediation - step by step.
View Video
1Password

RSA 2026: Leading the way to secure agentic AI

Mar 27, 2026 By Elaine Atwell In 1Password
Every year, security and tech leaders come to the RSA conference in San Francisco to take the industry’s pulse, and every RSAC tends to be dominated by a single, overarching theme. Last year, the theme was: “AI agents are coming, and governance isn’t ready.” And sure enough, the theme of RSAC 2026 was: “AI agents are here, and governance needs to catch up.”
Read Post
knowbe4

Custom Fonts Can Trick AI Assistants Into Approving Phishing Sites

Mar 27, 2026 By KnowBe4 Team In KnowBe4
Researchers at LayerX warn that custom fonts can fool AI web assistants into thinking phishing pages are benign, while the human user sees something completely different. “There is a structural disconnect between what an AI assistant analyzes in a page’s HTML and what a user sees rendered by the browser,” the researchers explain.
Read Post
knowbe4

Introducing Our KnowBe4 AI Agents

Mar 27, 2026 By Roger Grimes In KnowBe4
Although artificial intelligence (AI) seems relatively new to a lot of people, it was first officially created in 1956 and has been a large, improving branch of computer science ever since. The mass appeal of AI took off in late 2022 when OpenAI publicly released ChatGPTicial iintelligence (AI) seems relatively new to a lot of people, it was first officially created in 1956 and has been a large, improving branch of computer science ever since.
Read Post

Observability and Security for the AI Era

Mar 27, 2026 By Datadog In Datadog
Datadog has always been driven by a broader vision of helping teams understand and operate complex systems. In this session, you’ll hear from Yrieix Garnier, VP of Product, and Hugo Kaczmarek, Senior Director of Product, as they share the latest updates across the Datadog product suite and discuss how that vision continues to shape the platform’s evolution and support the next generation of AI-driven applications.
View Video

AI Agents Now Rank With the Top 3 Hacking Teams: Chema Alonso

Mar 27, 2026 By Cloudflare In Cloudflare
In this episode of This Week in NET, host João Tomé is joined by Chema Alonso, Vice President and Head of International Development at Cloudflare. Chema shares how a 1998 paper on SQL injection launched his career in hacking, his path from running a startup in Madrid to becoming a Microsoft MVP for 14 years, and how he ended up leading cybersecurity at Telefónica for more than a decade — after telling them “you don’t have enough money to make me work for you.” He also explains why he left Telefónica in 2025 to join Cloudflare, and what surprised him about the company’s technical depth.
View Video
protecto

RBAC vs CBAC: Key Differences, Benefits, and Which One Your Business Needs

Mar 27, 2026 By Protecto In Protecto
When businesses grow, managing who can access what becomes serious business. One wrong access permission can lead to data leaks, compliance penalties, or financial damage. In fact, IBM’s Cost of a Data Breach Report 2024 found that the average global data breach cost reached $4.88 million, the highest ever recorded. These numbers necessitate the requirement of having strong access control in place.
Read Post
cyberhaven

The Emerging Security Risks of Agentic AI

Mar 27, 2026 By Cyberhaven In Cyberhaven
AI is moving fast. But the transition from GenAI tools that respond to prompts to AI agents that execute workflows represents something qualitatively different for security leaders. The shift goes beyond just scale, and is a fundamental change in how data moves, who touches it, and what decisions get made, often without human review.
Read Post
How AI Dash Cams are Revolutionizing Fleet Safety in 2026

How AI Dash Cams are Revolutionizing Fleet Safety in 2026

Mar 27, 2026 By SecuritySenses In SecuritySenses
Road safety has changed a lot in the last few years. Trucks and vans now carry smart sensors that watch the road better than humans. This shift protects drivers and other people on the street. Managers can see what is happening in the cab and on the street at the same time - this new tech keeps drivers safe. It provides a clear view of daily operations. The data helps businesses save money and stay on schedule.
Read Post

Special Episode: A conversation with Sam, the AI SOC Analyst | Breach Ready Radio | Securonix

Mar 26, 2026 By Securonix In Securonix
In this special episode, Ben sits down with Sam, the AI SOC Analyst inside Securonix, to walk through what happens when a detection fires and a real investigation begins. From a suspicious login at 2 a.m. to building context across users, endpoints, identities, and cloud activity, the conversation focuses on how investigations are changing in practice. We dig into what Sam actually does. How telemetry is pulled together. How behavior is compared to baselines. How risk is calculated. And how findings are turned into clear, structured recommendations that analysts can act on.
View Video
cato networks

Securing Agentic AI: Why Visibility, Behavior, and Guardrails Matter

Mar 26, 2026 By Sangita Patel In Cato Networks
Agentic AI is quickly transitioning from experimentation to production. Enterprises are deploying AI agents to interpret goals, decide what actions to take, interact with business tools and APIs, and execute those actions autonomously, with limited or no human oversight. The promise is speed and efficiency, but the proverbial “blast radius” is bigger and fundamentally different from anything security teams have managed before.
Read Post
Forward Networks

Why Your AI Workflow Should Never Depend on a Single Model

Mar 26, 2026 By Forward Networks In Forward Networks
Network engineers have long understood redundancy. Redundant power, redundant links, redundant clusters. The reasoning is simple: any single component that can fail, will. But AI introduces a category of failure that most infrastructure teams have not yet built defenses against. Unlike hardware, AI models can become unavailable for reasons entirely outside your organization's control.
Read Post
Arctic Wolf

Setting a Higher Standard for Security Outcomes in the AI Era

Mar 26, 2026 By Dan Schiappa In Arctic Wolf
Customers do not experience AI as architecture. They experience it as outcomes. They experience it in the quality of the signal they receive, the speed of the investigation, the confidence behind the recommendation, and the amount of time their teams can spend being proactive instead of buried in noise. That is why the most important question in cybersecurity today is not whether a vendor has AI. It is whether that AI produces better outcomes. Security teams are not buying AI for its own sake.
Read Post

Episode 11 - The AI Maturity Journey: Data, Agents, and the Shift from Craft to Art

Mar 26, 2026 By Corelight In Corelight
Richard Bejtlich talks with Vijit Nair, VP of Product at Corelight, about the evolving "AI Maturity Journey" for modern security teams. Vijit outlines a three-level spectrum of AI adoption, moving from basic human-driven assistance to automated swarms of agents, and eventually toward fully autonomous systems. They discuss why high-quality, unopinionated data remains the essential foundation for building trust in AI and how technologies like the Model Context Protocol (MCP) are turning human language into the primary interface for tool integration.
View Video
bluevoyant

Four Excuses That Are Leaving Your Data Exposed to AI Risk

Mar 26, 2026 By Tara Ragan In BlueVoyant
The generative AI revolution isn't on the horizon. It's already reshaping the way your employees work. Across every industry, workers are adopting AI-powered productivity tools at a pace that far outstrips most organizations' security and governance programs. The question is no longer whether your organization will use AI, but whether you're prepared to use it securely. The challenge is real, but so are the misconceptions that keep organizations from taking action.
Read Post
1Password

How 1Password is building a culture of AI fluency through AI champions

Mar 26, 2026 By Liz Tam and Nadia Kasenda In 1Password
If 2025 was the year of AI adoption, 2026 is when AI evolves from a software story to a people story. Katya Laviolette, our Chief People Officer, explored this idea in a recent Forbes article about how 1Password’s internal network of AI Champions is shaping this evolution and helping us set the standard for how we use AI to drive impact across 1Password.
Read Post
sumologic

The AI SOC explained: Intelligent security for modern threats

Mar 26, 2026 By Michelle Beastall In Sumo Logic
The SOC was originally designed for a threat landscape that no longer exists. Today, the sheer number and speed of modern threats make it tough for even the best analysts to keep up. Manually sorting through huge amounts of data, dealing with alert fatigue, and relying on fixed rules make it harder to understand the full story behind each threat. The AI SOC addresses this problem, but not in the way most vendors describe. It’s not just a simple product or feature.
Read Post

See, Govern, and Secure All AI Usage in Your Enterprise

Mar 26, 2026 By Cato Networks In Cato Networks
Do you happen to know which AI tools your employees are using right now, or what data they're sending into them? Cato AI Security automatically discovers every AI application in your environment, provides security teams with session-level visibility into how those tools are being used, and enforces data policies in real time, so employees can keep working and sensitive data stays where it belongs.
View Video
protecto

AI Agent Data Leakage: Hidden Risks and How to Prevent Them

Mar 26, 2026 By Protecto In Protecto
AI or artificial intelligence has significantly altered how we work. From customer support bots to internal copilots, they help teams move faster and smarter. But there is a growing concern that many companies are still not ready for. It is data leakage in AI. When an AI agent accidentally or unknowingly shares private information with the wrong person or another system, it is called a data leak. When AI systems handle sensitive data, even a small mistake can expose private information.
Read Post
graylog

How to Gain Value from AI in Cybersecurity

Mar 26, 2026 By Jeff Darrington In Graylog
The Terminator is often people’s reference point for artificial intelligence (AI), especially when they worry that technology will be the end of civilization. However, on the other end of the AI spectrum is the beloved, marshmallow fluff Baymax, the helper robot providing assistance to those in his presence. The reality of AI sits somewhere between these two extremes. For security teams, AI initially seemed like a revolutionary technology that would offer faster detection and automated analysis.
Read Post
CrowdStrike

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

Mar 25, 2026 By Lucia Stanham In CrowdStrike
The era of human-speed defense is over. With eCrime breakout times collapsing to as fast as 27 seconds and attacks from AI-powered adversaries increasing 89% year-over-year, the traditional SOC has reached a breaking point. Manual processes, fragmented tools, and rule-based playbooks were built for a different era. Today, if your defense depends on human reaction time, you’re not just behind — you’re at risk.
Read Post
11:11 systems

Unify Kubernetes, VMs, and AI with VCF 9

Mar 25, 2026 By Justin Giardina In 11:11 Systems
Managing modern IT infrastructure often feels like balancing completely different ecosystems. For years, organizations have run separate, hand-built, Kubernetes stacks on top of legacy virtualization platforms. Due to security concerns, it just made sense to build a separate, tailored container environment that they could automate and schedule their exact needs. This fragmented approach leads to inconsistent security policies, fragile integrations between clusters, and operational silos.
Read Post
knowbe4

Why Your Human Risk Management Strategy Can't Ignore AI

Mar 25, 2026 By KnowBe4 Team In KnowBe4
AI isn’t just another technology wave—it’s a force multiplier for both innovation and risk. In a recent webinar featuring insights from Bryan Palma and guest speaker Jinan Budge, Vice President and Research Director at Forrester, one message came through clearly: the rise of AI and AI agents is fundamentally reshaping the human risk landscape—and security leaders need to move fast to keep up.
Read Post
cyberhaven

Top Generative AI Security Risks In The Enterprise

Mar 25, 2026 By Cyberhaven In Cyberhaven
Enterprise security teams spent years building data loss prevention (DLP) programs around a predictable set of egress channels: email, USB drives, cloud storage, and sanctioned SaaS apps. Generative AI has rewritten those assumptions almost overnight. Today, the same data those DLP controls were built to protect is flowing into AI interfaces that most organizations have no visibility into and no enforcement capability over.
Read Post
Snyk

From Discovery to Defense: Why AI Red Teaming Is the Next Step After AI-SPM

Mar 25, 2026 By Agnieszka Koc In Snyk
This week, we announced the general availability of Evo AI-SPM, the first operational layer of Snyk’s AI Security Fabric. AI-SPM gives security teams something they’ve never had before: a system of record for AI risk, with the ability to discover models, frameworks, datasets, and agent infrastructure embedded directly in code. For many organizations, that discovery step is a breakthrough.
Read Post
Arctic Wolf

Trustworthy AI Starts with Better Agents

Mar 25, 2026 By Dean Teffer In Arctic Wolf
The difference between an AI feature and an AI-led operating model becomes clear the moment a security problem becomes difficult. In real-world security operations — where the signal is ambiguous, the evidence spans multiple domains, and the attacker is behaving in unfamiliar ways — architecture matters much more.
Read Post
apono

Non-Human Identity Sprawl Is the Hidden Cost of AI Velocity

Mar 25, 2026 By The Apono Team In Apono
In the current AI boom, we race to use copilots, orchestration scripts, CI workflows, retrieval pipelines, and background jobs. Sometimes, we take for granted that every one of these things needs an identity. Service accounts. OAuth apps. API keys. Short-lived tokens. As AI velocity increases, so does the number of these non-human identities (NHIs). Instead of obsessing over model quality, latency, hallucinations, and GPU costs, we also need to consider how these identities impact security.
Read Post
persona

Agentic commerce is happening now. Here's what we've learned.

Mar 25, 2026 By Robin Gandhi In Persona
We’ve been collaborating with others to explore when and how agentic commerce will work. Robin Gandhi is the CPO of Lithic, a leading card issuer that’s already seeing agents use its cards to make purchases. Below, he shares his thoughts on what’s changed, and what needs to change, for agentic commerce to become mainstream. Last year, I wrote about the opportunity for agentic payments to revolutionize travel bookings, ad spend management, procurement, and more.
Read Post

AI can do what now?! - Detecting financial fraud with Elastic Security

Mar 25, 2026 By Elastic In Elastic
Financial fraud is increasingly cyber-enabled, requiring organizations to detect complex campaigns across transactions, identities, and digital systems faster and with greater accuracy. Join cybersecurity experts Lisa Jones-Huff and Joe Murin as they discuss how Elastic Security applies AI, machine learning, and generative AI to modern fraud detection. They’ll share how Elastic Security helps teams connect signals, reduce noise, accelerate investigations, and scale fraud prevention through emerging frameworks and standards across financial services organizations.
View Video
Arctic Wolf

The AI Malware Surge: Behavior, Attribution, and Defensive Readiness

Mar 24, 2026 By Arctic Wolf Labs In Arctic Wolf
Over the last year, AI-assisted malware development has evolved from an experimental practice into a common part of the attacker toolkit. In a rolling window from February 2025 to February 2026, Arctic Wolf Labs observed over 22,000 distinct files triggering AI-focused YARA rules across multiple malware repositories. These files included AI-generated code, large language model (LLM)-style scaffolding, runtime AI API integration, and DeepSeek-derived artifacts.
Read Post
protecto

Agentic Context Security Platform Protecto is Now Available on Google Cloud Marketplace

Mar 24, 2026 By Protecto In Protecto
Enterprise Agentic AI adoption faces a critical barrier: sensitive data exposure. AI agents perform tasks only as well as the context provided to them. However, context is precisely where enterprise data enters the workflow, introducing significant risk. Organizations need to deploy AI applications while maintaining strict data security, regulatory compliance, and privacy. This challenge stalls production deployments across enterprises, especially in healthcare and financial services.
Read Post

Ep 35: RSAC FOMO? Dojo AI Demo

Mar 24, 2026 By Sumo Logic, Inc. In Sumo Logic
As we gear up for RSA Conference, we give viewers a sneak peek at Sumo Logic's SOC analyst agent, which turns a 45-minute analyst investigation into a five-minute AI-powered sprint. We walk through live demos showing how the agent automatically generates queries, maps threats to MITRE ATT&CK, and hands you recommended remediation actions all without making you switch tabs or tools. We also show off MCP integration that lets teams collaborate on active investigations right from Slack, because no one should be chained to their war room when there's dinner to be had.
View Video
cato networks

WebPromptTrap - New Indirect Prompt Injection Vulnerability in BrowserOS

Mar 24, 2026 By Dr. Guy Waizel In Cato Networks
Cato researchers have discovered a new indirect prompt injection exploit pattern workflow in BrowserOS (an open-source agentic AI browser). We named it “WebPromptTrap” because the prompt originates from untrusted web content and it traps users into approving an authorization step through a trusted-looking AI summary.
Read Post
veracode

Spring 2026 GenAI Code Security Update: Despite Claims, AI Models Are Still Failing Security

Mar 24, 2026 By Felix Brombacher In Veracode
The last six months have been nothing short of revolutionary for AI-powered coding. OpenAI‘s “Code Red” release brought us GPT-5.1 and 5.2. Google unveiled Gemini 3 with its touted “unprecedented reasoning capabilities.” Anthropic rolled out Claude 4.5 and 4.6, powering the increasingly ubiquitous Claude Code features. Enterprise adoption of tools like OpenClaw has exploded, with developers praising unprecedented productivity gains.
Read Post
cultureai

The AI Control Gap: Why Partners Are Now on the Front Line

Mar 24, 2026 By CultureAI Team In CultureAI
For channel partners, AI has quickly moved from a future conversation to a current customer problem. Clients are already using AI across their organisations, often faster than governance can keep up. What’s emerging is not just another technology trend, but a new class of risk that customers cannot fully see or control. Our latest research, based on insights from senior security leaders in highly regulated industries, highlights the scale of the issue.
Read Post
armo

The Library That Holds All Your AI Keys Was Just Backdoored: The LiteLLM Supply Chain Compromise

Mar 24, 2026 By Ben Hirschberg In ARMO
We just published a deep breakdown of the Trivy supply chain attacks yesterday. Twenty-four hours later, we’re writing about the next one. Same threat actor. Different target. Worse implications. This time it’s LiteLLM, the Python library that acts as a universal API gateway for over 100 LLM providers. If you’re building anything with AI agents, MCP servers, or LLM orchestration, there’s a good chance LiteLLM is somewhere in your dependency tree.
Read Post
trustcloud

News: AI-native Security Assurance leads the GRC Transformation

Mar 24, 2026 By TrustCloud In TrustCloud
Enterprise CISOs are being asked to do more than ever. Their role is now two-fold: protector of the business and enabler of its growth. They need to reduce risk across a vast and changing digital environment, protect the business, satisfy customers, and meet compliance requirements. What’s more, they want to showcase the positive impacts of their security program to executive leadership and the board and support the growth of their organization.
Read Post
knowbe4

I Didn't Revoke my API Keys Because Claude Called Me An Idiot

Mar 24, 2026 By Javvad Malik In KnowBe4
I need to confess something. A few days ago whilst vibe coding at 2am (which can end up burning through tokens like they are going out of fashion) I accidentally pasted my API key directly into a Claude chat instead of the terminal window I had open. Claude told me off. It felt like a full, proper, disappointed parent tone; the AI equivalent of 'I'm not angry, just disappointed', except it absolutely was angry. There may have been paragraphs.
Read Post
knowbe4

Best Practices for Implementing AI Agents

Mar 24, 2026 By Martin Kraemer In KnowBe4
On March 9th, Codewall.ai disclosed how it had hacked McKinsey & Company’s AI platform called Lilli, a purpose-built system for 43,000+ employees to analyze documents, chat, and access decades of proprietary research. The researchers unleashed an AI agent which quickly scanned 200 endpoints, identified 22 that did not require authentication, and one that wrote user search queries into a database including non-parameterized JSON keys which were concatenated directly into SQL.
Read Post
Arctic Wolf

The Future of Superintelligent Security Operations Starts with Data Built for AI

Mar 24, 2026 By Jeff Green In Arctic Wolf
Every major shift in security operations starts with a shift in the underlying platform. The AI era is no different. As artificial intelligence moves from novelty to necessity, the real dividing line in cybersecurity will not be which vendor can add AI features the fastest. It will be which platforms are built on the right foundation to make AI useful in real operations and trustworthy when the stakes are high. That foundation is data, but not in the simplistic sense the market often uses the term.
Read Post
How Connected Vehicles and AI Are Redefining Insurance and Digital Security Risks

How Connected Vehicles and AI Are Redefining Insurance and Digital Security Risks

Mar 24, 2026 By SecuritySenses In SecuritySenses
The way we drive is changing. Cars are no longer just machines that take us from one place to another. They are now connected systems that collect data, communicate with networks, and use artificial intelligence to improve safety and performance. These connected vehicles are transforming industries like insurance and cybersecurity in ways we are only beginning to understand.
Read Post
cato networks

Where Cato Sits in the AI Economy

Mar 23, 2026 By Shlomo Kramer In Cato Networks
Every major technological shift reshapes the landscape, creating both winners and losers. AI will be no different. The key question is which companies are positioned to capture the value it generates, and which ones may fall behind as it unfolds. If you look at previous technology shifts, the winners were not always the companies building the most visible products. They were often the ones that enabled the shift to happen in the first place, or those that benefited from the structural changes it created.
Read Post
Zenity

OpenClaw Needs Real Security Controls; We Built Them Open Source

Mar 23, 2026 By Dina Durutlic In Zenity
AI agent adoption and development are evolving quickly. The tooling used to build agents is improving fast, but the security controls around those agents are often rigid, opaque, or difficult to adapt to real environments. As more teams experiment with OpenClaw, one challenge becomes clear: developers need ways to inspect what agents are doing, evaluate risky behavior, and intervene when necessary.
Read Post
Zenity

The Shift to Continuous Context and the Rise of Guardian Agents

Mar 23, 2026 By Dina Durutlic In Zenity
AI agent risk doesn’t emerge in a single moment. It develops over time across configuration changes, runtime behavior, long-horizon tasks, and interactions between agents, users, and enterprise systems. Their behavior and exposure can shift in real time as agents rewrite instructions, update memory, and dynamically alter execution.
Read Post

BewAIre: Detecting Malicious Pull Requests at Scale with LLMs

Mar 23, 2026 By Datadog In Datadog
As AI coding assistants accelerate software development, the volume of pull requests at Datadog has grown to nearly 10,000 per week, increasing the risk that malicious changes slip through due to review fatigue. To address this, Datadog built BewAIre, an LLM-powered code review system designed to identify malicious source code changes introduced by threat actors. By reducing approval fatigue for developers while increasing friction for attackers, BewAIre guides human reviewers to the areas where judgment matters most, without slowing developer velocity.
View Video
protecto

Homomorphic Encryption in LLM Pipelines: Why It Fails in 2026

Mar 23, 2026 By Amar Kanagaraj In Protecto
There’s a claim gaining traction in the market: homomorphic encryption can preserve data privacy in AI workflows. Encrypt your data, run it through a language model, and never expose a single token. Sounds bulletproof. It isn’t. Homomorphic encryption (HE) was built for math, not language. Applying it to LLM pipelines is like encrypting a book and asking someone to summarize it without reading a word. The problem isn’t efficiency.
Read Post
keeper

How to Manage Identity Sprawl in the Age of AI Agents and NHIs

Mar 23, 2026 By Aranza Trevino In Keeper
Non-human identities (NHIs) and AI Agents including service accounts, CI/CD credentials and cloud workload identities, now eclipse human identities in enterprise identity systems by 50:1 to 100:1. Modern identity security platforms must assign identities to these assets and furthermore, apply roles, access control policies, visibility and governance in order to secure the modern enterprise.
Read Post
teramind

How to Manage Unauthorized AI Tool Usage in Your Business

Mar 23, 2026 By Teramind In Teramind
In only a few years, artificial intelligence (AI) has changed almost every aspect of life, and especially so in business. Today, employees are using generative AI tools to draft emails, code software, and analyze data at lightning speed. However, there is a hidden side to this productivity boost: unauthorized AI use. Many employees are bypassing official IT channels and using shadow AI applications to get their work done.
Read Post
CrowdStrike

New CrowdStrike Innovations Secure AI Agents and Govern Shadow AI Across Endpoints, SaaS, and Cloud

Mar 23, 2026 By John Gamble In CrowdStrike
As organizations race to adopt new AI tools, deploy AI agents, and build AI-powered software, they create new attack surfaces that traditional security controls were never designed to protect. A key example is the prompt and agentic interaction layer, which faces novel threats like indirect prompt injection and agentic tool chain attacks.
Read Post

AI vs AI: Securing the Expanding Cyber Attack Surface | Mr. Anirban Mukherji at ET Studios

Mar 23, 2026 By miniOrange In miniOrange
In this exclusive interview byte at ET Studios, Our Founder & CEO Mr. Anirban Mukherji discusses how increasing enterprise connectivity through cloud applications, third-party integrations, and remote work is exploding the enterprise cyber attack surface making identity security and access control more critical than ever. He dives into key threats like traditional ransomware, zero-day supply chain attacks, hyper-personalized AI phishing, and systemic incidents.
View Video

Your AI Isn't Broken... Your Data Is #shorts #ai

Mar 23, 2026 By Protecto In Protecto
Your AI works perfectly during testing… but suddenly fails in production. Why? The problem usually isn’t the model — it’s the data. Synthetic data looks clean and structured. But real-world data is messy: typos, missing values, broken formats, and unexpected edge cases. When AI models train only on synthetic datasets, they never learn how to handle real-world complexity. In this video, we explain why synthetic data can break AI systems and how using real production data safely can make AI more reliable.
View Video
Arctic Wolf

Delivering the Agentic SOC as a Service: A Turnkey Approach to AI-Driven Cybersecurity

Mar 23, 2026 By Nick Schneider In Arctic Wolf
Every year at RSA Conference, I spend time with security leaders who are trying to solve the same fundamental challenge. They know what strong security operations should look like, but the path to building and sustaining that capability inside their own organization has become increasingly difficult. The market is shifting from buying tools to buying outcomes.
Read Post
teleport

The Complicating Factors of Deploying MCP in the Enterprise

Mar 20, 2026 By Boris Kurktchiev In Teleport
Boris Kurktchiev is a Field CTO at Teleport, known for his expertise in Zero-Trust identity solutions for cloud and AI, and for his contributions to the CNCF's Cloud Native AI working group. Doyensec dropped a piece last week called The MCP AuthN/Z Nightmare, and I think anyone deploying MCP in production needs to read it.
Read Post
mend

Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incident

Mar 20, 2026 By Tiffany Jennings In Mend
What happens when a $29 billion company forgets to rename a model ID, and what it means for every organization using open-source AI. On March 19, 2025, Cursor, the AI-powered coding tool valued at $29 billion and generating an estimated $2 billion in annual recurring revenue, launched Composer 2, its newest and most powerful coding model.
Read Post
protecto

Why NER models fail at PII detection in LLM workflows - 7 critical gaps

Mar 20, 2026 By Amar Kanagaraj In Protecto
In AI systems, PII detection is the first step. Not the most glamorous step. But the one that, when it fails, takes everything else down with it. Identifying sensitive data (names, Social Security numbers, financial records, health information) has to happen before any of it reaches an LLM. Get this wrong, and you’re looking at one of two bad outcomes: Traditional DLP systems could afford to be aggressive with detection. LLMs can’t. They depend on full context to generate correct outputs.
Read Post

Has AI structurally changed the cyber industry forever? #cybersecurity #podcast #ai

Mar 20, 2026 By LimaCharlie In LimaCharlie
On this week's episode of The Cybersecurity Defenders Podcast, Stel Valavanis, founder of onShore Networks, argues that AI is a significant milestone but does not change where security is headed. He puts AI alongside the Internet and TCP/IP and makes the case that the path forward is clear: fully embrace it as a tool, regardless of which side of the equation you are on. He also points out that agentic and automated AI was already being deployed well before LLMs arrived.
View Video
brivo

Meet Eeva, the new video agent in the Brivo Eagle Eye VMS

Mar 20, 2026 By Brivo In Brivo
The world of video surveillance is moving beyond simple recording and moving toward true intelligence. To get an inside look at our latest breakthrough in AI video surveillance technology, we sat down with Kyle Perkuhn, Sr. Product Marketing Manager at Brivo, to discuss Eeva. Unlike traditional systems which can only spot a person or a car, Eeva allows you to use natural language to define exactly what matters to your business.
Read Post
Data Integrity: Protecting Your Campaign's SMS Infrastructure

Data Integrity: Protecting Your Campaign's SMS Infrastructure

Mar 20, 2026 By SecuritySenses In SecuritySenses
Every political campaign relies on getting messages out to voters fast. A solid tech setup is the backbone of your efforts. Protecting the setup means keeping your data safe and accurate. It prevents small leaks from becoming massive problems later on.
Read Post
AI-Powered Freelancing Marketplace for Professionals and AI Agents

AI-Powered Freelancing Marketplace for Professionals and AI Agents

Mar 20, 2026 By SecuritySenses In SecuritySenses
The rise of AI-powered tools has completely changed the game for freelancers. It is not just a matter of having a polished profile or a good job title anymore. The companies now focus a lot on the problem-solving skills, quick delivery capabilities of the freelancers as well as their proficiency in using various AI tools like ChatGPT, Claude, and Copilot in day-to-day work scenarios. In that context, Ugig.net: The Marketplace for AI Agents fits naturally into the conversation, because it reflects a growing demand for faster execution, clearer communication, and a smoother path from idea to completed work.
Read Post
cultureai

6 Strategic Implications of AI for Security Leaders in 2026

Mar 19, 2026 By CultureAI Team In CultureAI
There is a structural shift happening in enterprise environments that most security leaders recognise, but few have fully adapted to. AI is now embedded, decentralised, and operating across core workflows. At the same time, governance models are still largely built on assumptions that no longer hold: that tools are known, data flows are observable, and behaviour follows policy. The result is a widening gap between perceived control and operational reality.
Read Post
bluevoyant

Microsoft Purview Brings AI Readiness, Data Security, and Continuous Compliance

Mar 19, 2026 By Dan Petrillo In BlueVoyant
Microsoft Purview is a powerful platform, but power without expertise can lead to underutilization, misconfiguration, and missed opportunities. Across industries, organizations are grappling with a common set of challenges: The stakes are high. A single compliance incident can cost organizations between $100,000 and $5 million in fines and penalties. And that figure doesn't account for the reputational damage, operational disruption, and remediation costs that follow.
Read Post
nucleus

Why More AI Doesn't Guarantee Better Vulnerability Management Outcomes

Mar 19, 2026 By Will Gorman In Nucleus
AI is everywhere in vulnerability management right now. Technology vendors in all areas are adding new features and making bold claims about revolutionary capabilities. But here's the reality, especially for vulnerability and exposure management: more AI doesn't automatically mean less risk. The gap between AI's promise and its practical impact in enterprise vulnerability management is wider than most organizations realize.
Read Post

Camille Stewart Gloster on how AI systems can help you wade through log data and get more done

Mar 19, 2026 By Rubrik In Rubrik
AI and machine learning are already being used in cybersecurity to help reduce the "noise of all the indicators" that security teams receive. These systems can serve as a "first line of defense" by setting up potential response actions. However, organizations need to ensure they keep human analysts in the loop because contextual knowledge and human judgment remain critical. Data Security Decoded is available on our YouTube channel!
View Video

Thinking long-term growth in an AI-dominated industry with Stel Valavanis of onShore Networks [302]

Mar 19, 2026 By LimaCharlie In LimaCharlie
Today we're speaking with Stel Valavanis, Founder and Chairman at onShore Networks and Co-Founder at The Gallery Building, about sustaining a security company over three decades of industry changes. We also dive into investing in start ups and how founders can think long term about governance and growth.
View Video

Thinking in pipelines for AI agents with David Burkett

Mar 19, 2026 By LimaCharlie In LimaCharlie
Join us for this session of Defender Fridays as we explore thinking in agent pipelines with David Burkett, Cloud Security Researcher at Corelight and Founder of Magonia Research. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
View Video
Snyk

AI Is Building Your Attack Surface. Are You Testing It?

Mar 19, 2026 By Manoj Nair In Snyk
The market is flooded with claims. One vendor tops a leaderboard. Another raises nine figures on a pitch deck. Meanwhile, your developers shipped three AI-generated services before lunch. Here's the conversation the industry isn't having, and the one we've been building toward for years. There's a version of this conversation happening inside every Security team right now. Someone demos an AI coding assistant. The speed is undeniable and the team is in awe. Still cautious, sometimes skeptical.
Read Post
apono

Apono Launches Agent Privilege Guard, Bringing Runtime Privilege Guardrails to Enterprise AI Agents

Mar 19, 2026 By Gabriel Avner In Apono
NEW YORK – March 18, 2026 – Apono, the agentic-forward cloud-native Privileged Access Management platform, today announced the launch of Agent Privilege Guard, a new product that gives enterprises the ability to deploy AI agents at full velocity without creating security risks they cannot control.
Read Post
CrowdStrike

Secure Homegrown AI Agents with CrowdStrike Falcon AIDR and NVIDIA NeMo Guardrails

Mar 19, 2026 By Bruce McCorkendale - Rob Truesdell In CrowdStrike
The biggest challenge for developers building AI applications is no longer the translation of user intent into action, but rather limiting its scope to stay within stated business goals and prevent abuse. This challenge has moved from theoretical to mission-critical as AI agents transition from experimental projects to mainstream business tools, where a single compromised agent can expose customer data, execute unauthorized transactions, or violate compliance requirements across thousands of interactions.
Read Post
strongestlayer

StrongestLayer Launches Next Iteration of Its Platform That Moves Email Triage Upstream, Cutting SOC Alert Volume by More Than 80%

Mar 18, 2026 By StrongestLayer
New Evidence Engine autonomously investigates every email threat and delivers decision-ready cases to security teams, eliminating the manual triage workflow that consumes up to 25% of analyst time.
Read Post
jfrog

Survive the AI Code Blizzard: Introducing Snippet Detection

Mar 18, 2026 By Dafna Zahger Bernanka In JFrog
In 2026, software development speed is an AI-solved problem. Yet, as AI-generated code volumes surge, organizations face a new kind of risk visibility gap. Developers are increasingly copying third-party snippets into their codebases—from both AI prompts and open-source software components—creating large security and compliance blind spots that lead to significant risks.
Read Post
acronis

RMM AI tools: Choosing AI-powered RMM software for MSPs and IT teams

Mar 18, 2026 By Acronis In Acronis
Modern managed service providers (MSPs) are increasingly adopting RMM AI tools — remote monitoring and management software enhanced with artificial intelligence — to keep pace with growing IT demands. Traditional RMM platforms allow MSPs to remotely monitor client endpoints, deploy patches, run scripts and troubleshoot issues from a central console. Now, AI-powered RMM software is taking this a step further.
Read Post
protecto

What Is Format-Preserving Encryption (FPE)?

Mar 18, 2026 By Sakshi In Protecto
Your database stores a credit card number: 4532 1234 5678 9010. You encrypt it for security. Now it looks like this: %Xk92@!mQz#Lp&7. Problem. Your payment system can’t process that. It expects a 16-digit number. Your billing software breaks. Your downstream analytics fail. Your whole pipeline comes to a halt. This is the exact problem that format-preserving encryption was built to solve.
Read Post
protecto

AI Guardrails: The Layer Between Your Model and a Mistake

Mar 18, 2026 By Sakshi In Protecto
An AI guardrail failure doesn’t come with a warning. One minute, a response goes out. Next minute, it’s a screenshot in the wrong hands, and the question isn’t how it happened. It’s why nobody had defined what the model was allowed to do in the first place. Most teams never asked what the model was actually permitted to do. Deployment happens fast. AI data privacy and leakage prevention aren’t configuration tasks.
Read Post
protecto

Synthetic Data for AI: 5 Reasons It Fails in Production

Mar 18, 2026 By Protecto In Protecto
Synthetic data for AI development has become the default shortcut for most engineering teams. It’s fast, sidesteps privacy headaches, and lets you move without touching production. I get why teams default to it. But there’s a problem: synthetic data for AI routinely breaks down the moment your system hits real-world enterprise data. The system demos great. It passes every internal test. Then it lands in production and falls apart in ways you didn’t see coming.
Read Post

Why Everyone Must Learn AI Skills in 2026 #shorts #ai

Mar 18, 2026 By Protecto In Protecto
AI skills are no longer optional. The US Department of Labor recently released an AI Literacy Framework, making AI knowledge a basic workforce skill for the future. This means every worker should understand: Basic AI principles AI use cases Prompting AI correctly Evaluating AI outputs Using AI responsibly AI literacy is quickly becoming a core job skill across all industries, not just tech.
View Video
salt security

Everyone Is Deploying AI Agents. Almost Nobody Knows What They're Doing.

Mar 18, 2026 By Roey Eliyahu In Salt Security
One constant I hear from CISOs I speak with is that AI agents are not coming. They are already inside organizations, reasoning through goals, selecting tools, and taking action through the same APIs that connect your most sensitive systems. And most security teams have no idea what those agents are doing.
Read Post
apono

Introducing Agent Privilege Guard: Runtime Privilege Controls for the Agentic Era

Mar 18, 2026 By Gabriel Avner In Apono
The question enterprises are asking is no longer whether to deploy AI agents. It is how to do it without creating security risk they cannot control. In December 2025, Amazon’s own AI coding tool Kiro triggered a 13-hour AWS outage after autonomously deciding to delete and recreate a production environment.
Read Post
jfrog

From Agentic Risk to Agentic Confidence: The JFrog MCP Registry is GA

Mar 18, 2026 By Ran Romano In JFrog
In an AI-native world where Model Context Protocol (MCP) is the universal standard for AI connectivity, the security and governance stakes have never been higher. AI’s ability to take autonomous action through MCPs means that a single breach of an MCP server can grant attackers control over mission-critical enterprise systems, putting enterprises in an immediate and escalating state of agentic risk that cannot be ignored.
Read Post
seemplicity

The Unsung AI Hero: Data Normalization

Mar 18, 2026 By Megan Horner In Seemplicity
AI agents are only as effective as the data they consume. In this post, we explore the unsung hero of the security stack: data normalization. This process serves as the deterministic guardrail that makes AI grounding possible. Without a structured data foundation, grounding is only as good as the often chaotic data being retrieved, leading to confident but incorrect AI responses.
Read Post
Torq

From Intent to Outcome: How Agentic Coding is Transforming the SOC

Mar 18, 2026 By Ofer Smadari In Torq
See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo Security teams are being asked to move faster and handle more complexity, while the threats they defend against are increasingly AI-assisted. When I wrote about VoidLink in January, my point was simple: you cannot fight machine-speed threats with human-speed defense. Attackers are using AI to code, adapt, and scale attacks while humans are still grinding away doing the heavy lifting in the SOC.
Read Post

Rethinking Application Delivery for the AI Era

Mar 18, 2026 By A10 Networks In A10 Networks
Rethinking Application Delivery for the AI Era Is your network strategy keeping up with the AI era? Jamison Utter, Field CISO at A10 Networks, challenges IT leaders to move beyond "piecemeal" infrastructure and rethink their approach to application delivery. As organizations face the dual pressure of integrating AI workloads and managing a vast "fleet" of hybrid devices, the old ways of operating are becoming a liability. Jamison discusses the true cost of administrative overhead and the urgent need for a more flexible, simple, and future-proof vendor strategy.
View Video

Secure Enterprise AI Apps and Agents: Visibility, Governance, Runtime Protection

Mar 18, 2026 By Cato Networks In Cato Networks
When you deploy an AI application, do you know what's being sent into it — or what's coming back out? Cato AI Security provides runtime protection for the AI applications your organization builds and deploys, with real-time enforcement, sensitive data anonymization, and a complete audit trail across every interaction. Learn more or request a demo at catonetworks.com.
View Video
11:11 systems

Unlock AI with GPU as a Service in VCF 9

Mar 18, 2026 By Justin Giardina In 11:11 Systems
Many IT professionals struggle to integrate artificial intelligence (AI) into their existing environments. You often find expensive hardware trapped in isolated clusters or dedicated hosts. Your infrastructure team manages access through manual ticket queues, which leads to low utilization and frustrating bottlenecks for developers. When you don’t have a standardized way to share and monitor accelerator resources, every hardware change risks downtime for your critical applications.
Read Post
AI Risk Isn't Just About Models. It's About Systems.

AI Risk Isn't Just About Models. It's About Systems.

Mar 18, 2026 By SecuritySenses In SecuritySenses
Most discussions about AI risk focus on the models themselves. Hallucinations. Bias. Data leakage. Unpredictable outputs. These are real concerns. But they only tell part of the story. Because in practice, AI doesn't operate in isolation. It operates inside systems - and that's where the real risk begins to emerge.
Read Post
virtue ai

Virtue AI Closes the AI Agent Security Gap with Agent ForgingGround: The First Enterprise-Scale Testing Ground for Autonomous AI

Mar 17, 2026 By Virtue AI
Agent ForgingGround with Built-In Red-Teaming Agents continuously evaluates and stress-tests AI agents across 50+ production-grade enterprise environments so enterprises can embrace AI agents without compromising security.
Read Post

Cato AI Security: Is Your Security Stack Built for How AI Works?

Mar 17, 2026 By Cato Networks In Cato Networks
AI adoption is accelerating across enterprises — often faster than security teams can respond. Employees are using AI tools and copilots across SaaS apps and workflows, creating new exposure around sensitive data, shadow AI, and attack surfaces that traditional tools weren't built to see. This video breaks down the four AI security challenges every enterprise is facing, where existing controls fall short, and how Cato AI Security gives you visibility, guardrails, and enforcement across the AI your employees use, the applications you build, and the agents acting on your behalf.
View Video
Zenity

Securing Homegrown Agents in Runtime: The Value of Zenity + Microsoft Foundry

Mar 17, 2026 By Andrew Silberman In Zenity
How the integration works: Zenity integrates with the Foundry control plane to inspect agent behavior and enforce security policies inline at runtime. Over the past year, Microsoft Foundry has emerged as a cornerstone for enterprises building and deploying homegrown agents at scale. Organizations across industries are using Foundry to move beyond experimentation and into production, creating AI agents that can reason, invoke tools, access enterprise data, and automate complex workflows.
Read Post

I Faked a Receipt with ChatGPT

Mar 17, 2026 By Razorthorn Security In Razorthorn
Generative AI can produce realistic taxi receipts, complete with stains and wear, which blend into digital expense workflows that expect only a quick photo upload. As more organisations move to app based reimbursement, synthetic documents slip through unless controls, audits and behavioural checks keep pace with these tools. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..
View Video
Snyk

I Read Cursor's Security Agent Prompts, So You Don't Have To

Mar 17, 2026 By Randall Degges In Snyk
Cursor's security team built four autonomous agents that review 3,000+ PRs per week, catch 200+ vulnerabilities, and open fix PRs automatically. The engineering is impressive, and the prompts are shockingly simple. But there's a meaningful gap between "LLM agents reviewing PRs" and "enterprise security program," and that gap is exactly where things get interesting.
Read Post
cato networks

Meet the Industry's First GPU-Powered SASE Platform with Native AI Security

Mar 17, 2026 By Sangita Patel In Cato Networks
AI has moved from experimentation to a strategic enterprise imperative. It’s no longer about whether organizations will adopt AI, but whether their security architecture can govern it at the speed and scale at which it is being embedded into the business. This is not a future concern. It is today’s operational mandate to: Securing AI is not limited to software applications and agents.
Read Post
mend

Introducing AI-powered Contextual Project Classification: From severity scores to business risk

Mar 17, 2026 By Tiffany Jennings In Mend
Today, Mend.io is launching Contextual Project Classification, an AI-native feature that automatically analyzes your codebase to identify which applications handle sensitive data like payments, healthcare records, and PII, enabling true risk-based security prioritization.
Read Post
knowbe4

From Phishing to AI Agents: Can We Design for Digital Mindfulness?

Mar 17, 2026 By Anna Collard In KnowBe4
Anyone who knows me knows I’m passionate about mindfulness. Because I genuinely believe it makes us better humans. But also, because I have one of those brains that desperately needs it. I’m easily distracted and I start new ideas before finishing old ones. My attention can scatter in a hundred directions. I wrote before how I clicked on a phishing test because I was multitasking and running on autopilot. And that moment really changed the direction of my career and my research.
Read Post
bitsight

Are AI Security Tools the New EDR? Attackers Are Treating Them That Way

Mar 17, 2026 By Emma Stevens In BitSight
AI security tools are no longer just defensive layers. They are high value targets being studied, fingerprinted, and bypassed much like traditional endpoint detection and response (EDR) platforms and antivirus solutions were in their early days. The speed and scale at which these tools are being deployed makes reactive defense increasingly unsustainable.
Read Post
protecto

Why Synthetic Data for AI Fails in Production

Mar 17, 2026 By Amar Kanagaraj In Protecto
Synthetic data has been fine for testing software for decades. Traditional apps follow rules. You check inputs, check outputs, file a bug when something breaks. AI is different. AI gets deployed into the situations where the rules aren’t clear and context is everything. The edge cases aren’t exceptions. They’re the whole point. That changes what your test data needs to look like.
Read Post
protecto

How a Fortune 50 Company Deployed Agentic AI at Scale Without Losing Control of Their Data

Mar 17, 2026 By Protecto In Protecto
In late 2025, a Fortune 50 enterprise decided to deploy autonomous AI agents across core business operations. Customer support that could reason through complex issues. Supply chain systems that could adapt in real time. Product managers with AI assistants pulling insights from dozens of data sources simultaneously. The capabilities that made the agents useful also introduced a problem nobody had a clean answer for. These weren’t chatbots locked inside a single application.
Read Post
armo

AI Workload Security for Financial Services: What CISOs Need to Know

Mar 17, 2026 By Shauli Rozen In ARMO
When your SOC alerts on “suspicious AI activity” in a production trading system, your response team faces a question that didn’t exist two years ago: can you explain to regulators exactly which function processed the malicious prompt, which internal tool it called, and how customer data ended up leaving your environment?
Read Post
armo

Why Generic Container Alerts Miss AI-Specific Threats

Mar 17, 2026 By Ben Hirschberg In ARMO
It’s 2:47 AM and your SOC dashboard lights up. Six alerts fire across three hours from a single Kubernetes cluster: an outbound HTTP fetch to an unfamiliar domain, a tool invocation inside a customer support agent, an API call to an internal service the agent has never contacted, a service account token read, a file write to a model artifact directory, and an outbound data transfer that looks like normal API usage.
Read Post
armo

AI Workload Security Tools: Runtime vs. Declarative Compared

Mar 17, 2026 By Shauli Rozen In ARMO
You’re forty-five minutes into a vendor demo for AI workload security. The dashboard looks polished—posture scores, misconfiguration findings, vulnerability counts, all tagged with an “AI workload” label that wasn’t there last quarter. You ask the obvious question: “Show me how this detects a prompt injection attack on our production agent.” Long pause. The SE pulls up a generic process anomaly rule.
Read Post
armo

Cloud-Native Security for AI Workloads: Why It Matters and What's Changed

Mar 17, 2026 By ARMO In ARMO
You’ve been securing Kubernetes workloads for years. Your CSPM is running, your CNAPP is configured, your team knows how to triage container alerts. Then an AI agent lands in your cluster — maybe from the data science team, maybe from a vendor integration, maybe from a tool you didn’t even know was running. Within a week, it’s making API calls nobody planned, accessing data stores that aren’t in the architecture diagram, and executing code it generated itself.
Read Post
acronis

Scale CMMC services without delivery chaos using ComplianceAide and Acronis integration

Mar 17, 2026 By Acronis In Acronis
By Randy Blasik, Founder, ComplianceAide The good news for managed service providers (MSPs) supporting defense contractors is that demand for Cybersecurity Maturity Model Certification (CMMC) and NIST 800-171 readiness services is surging. The downside, unfortunately, is that many MSPs have discovered that delivering compliance engagements at scale can be difficult and complex.
Read Post
Why Marketing Teams Are Rethinking the Way Customer Personas Are Built

Why Marketing Teams Are Rethinking the Way Customer Personas Are Built

Mar 17, 2026 By SecuritySenses In SecuritySenses
How well do marketing teams really understand their customers today? For years, businesses have relied on buyer personas (detailed profiles representing their ideal customers) to guide messaging, campaigns, and product positioning. And the concept has clearly gained traction: studies show that 44% of marketers already use buyer personas, while another 29% plan to adopt them soon.
Read Post

How to Protect Sensitive Data from LLMs | AI Data Privacy Demo

Mar 16, 2026 By Protecto In Protecto
AI tools like ChatGPT, Gemini and other LLMs are powerful — but what happens when sensitive data gets sent to them? In this video, we demonstrate how Protecto AI prevents sensitive information from reaching LLMs using Masking APIs and Unmasking APIs. You’ll see a real workflow where user prompts containing credit card details and personal data are automatically masked before being processed by an AI model like Gemini 2.5 Flash.
View Video
nightfall

WhatsApp Is the Latest Example Of Why Every New AI Feature Outpaces Legacy DLP

Mar 16, 2026 By Chris Martinez In Nightfall
Every new AI feature that ships into a platform your employees already use is a security question your stack probably can't answer yet. It sounds like hyperbole, but it's the structural reality of how AI adoption works in 2026. A recent update to WhatsApp is a useful illustration of why.
Read Post
armo

AI Workload Security on AWS: Evaluating Native Tools vs Third-Party Solutions

Mar 16, 2026 By Yossi Ben Naim In ARMO
Your Bedrock agent running on EKS receives a prompt through your RAG pipeline. CloudTrail logs it as a normal bedrock:InvokeModel event—status 200, authorized IAM role, expected endpoint. But inside the container, the agent’s response triggers a tool call that spawns curl to an external IP, exfiltrating the context window. GuardDuty doesn’t flag it because the connection routes through a permitted VPC endpoint. You open your AWS console and see a healthy API call.
Read Post
armo

How to Evaluate AI Workload Security Tools for Enterprise Teams

Mar 16, 2026 By Ben Hirschberg In ARMO
You’ve sat through three vendor demos this week. Vendor A showed you an AI-SPM dashboard with a pie chart of misconfigurations. Vendor B showed you a nearly identical dashboard with different branding and a slightly wider set of compliance frameworks. Vendor C showed you posture findings with an “AI workload” tag that wasn’t in their product last quarter.
Read Post
cato networks

Code Review That Learns: Inside Cato R&D's Self-Evolving PR Review Agent

Mar 16, 2026 By Dr. Guy Waizel In Cato Networks
Agentic AI promises to improve work processes in all domains and industries. R&D is no different. Recently, Cato R&D built an internal self-evolving pull request (PR) review agent that keeps reviewers in flow by commenting only on high-impact, high-confidence issues, validating every change against its spec from the PR and Jira, and learning continuously from developer feedback through long-term, episodic memory. What were the results?
Read Post
persona

See through document fraud with Document AI Enhanced Fraud Detection

Mar 16, 2026 By Kerwell Liao In Persona
On April 2, 1796, a full house packed the Drury Lane Theatre in London, eager to witness the first showing of a newly discovered Shakespeare play. The problem was that William Henry Ireland wrote the play, Vortigern, and the entire production was a hoax. Although there was some controversy before opening day, several experts reviewed the manuscript and supporting documents and confirmed that the play was a long-lost Shakespeare original.
Read Post
jfrog

Agent Skills are the New Packages of AI: It's Time to Manage Them Securely

Mar 16, 2026 By Yonatan Arbel In JFrog
Let’s talk about agent skills. As the AI agent ecosystem matures, we’re seeing a major shift in how users equip agents to run automated workflows. While robust protocols such as MCP exist to handle complex system integrations and authentication, skills have emerged as the go-to, low-friction way to shape an agent’s day-to-day behavior. Skills are extremely easy to adopt. In many cases, they are simply lightweight files that orchestrate scripts and commands.
Read Post

How Degenerative AI Exposes Deepfakes

Mar 16, 2026 By Razorthorn Security In Razorthorn
Detection tools now use so called degenerative AI to analyse every frame of a video, looking for traces of the models and methods used to generate or edit it. Generative AI produces the fake, degenerative AI hunts for subtle artefacts in pixels, giving investigators a way to flag manipulated content at scale. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..
View Video

AI in Cybersecurity Certification

Mar 15, 2026 By Cato Networks In Cato Networks
Positive feedback can lead to unintended consequences. A dog learned that saving kids from the River Seine earned food and praise. So he started dragging them in to “save” them. AI models optimize for feedback in a similar way. Cato’s AI in Cybersecurity course shows how to manage the risks. It’s free and earns you CPE credits.
View Video

You Can Create a Convincing Deepfake in Under an Hour

Mar 15, 2026 By Razorthorn Security In Razorthorn
A non technical user can produce a credible deepfake in under an hour using off the shelf tools and footage from normal video meetings. Common habits such as recording calls for later review give attackers enough material to train models, so every routine sales or onboarding call becomes potential training data. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..
View Video
Arctic Wolf

How Artificial Intelligence (AI) Can Increase Threat Detection and Response

Mar 13, 2026 By Arctic Wolf In Arctic Wolf
Security leaders are being squeezed from both sides. On one side, threat actors are scaling operations with AI automation, using it to craft more convincing social engineering attacks, accelerating reconnaissance, and improving lateral movement. On the other side, defenders are drowning in telemetry, suffering under staffing constraints, and facing the harsh reality that threat actors don’t keep business hours.
Read Post

How Governments Use AI Safely | AI Governance Explained

Mar 13, 2026 By Protecto In Protecto
How are governments using AI while protecting citizens’ data and privacy? In this episode of AI on the Edge, Ciara Maerowitz, Chief Privacy Officer for the City of Phoenix, explains how cities implement AI governance, manage bias, ensure transparency, and assess AI risks. Learn how responsible AI frameworks, policies, and risk management help governments safely adopt artificial intelligence.
View Video
Zenity

Why Soft Guardrails Get Us Hacked: The Case for Hard Boundaries in Agentic AI

Mar 13, 2026 By Chris Hughes In Zenity
One recurring theme in my research and writing on agentic AI security has been the distinction between soft guardrails and hard boundaries. As someone who serves on the Distinguished Review Board for the OWASP Agentic Top 10, and who spends every day thinking about how to secure agents across enterprise environments at Zenity, this distinction is not academic. It is potentially the single most important conceptual framework practitioners need to internalize right now.
Read Post
salt security

An AI Agent Didn't Hack McKinsey. Its Exposed APIs Did.

Mar 13, 2026 By Roey Eliyahu In Salt Security
This week’s McKinsey incident should be a wake-up call for every enterprise moving fast to deploy AI. Not because AI itself is inherently insecure. But because too many organizations are still thinking about AI security at the model layer, while the real enterprise risk sits in the action layer: the APIs, MCP servers, internal services, and shadow integrations that AI agents can reach, invoke, and manipulate. That is the part most companies still do not see.
Read Post

AppSec in the age of AI: An RSA Conference preview

Mar 13, 2026 By Wallarm In Wallarm
Application security is at a breaking point as development teams move faster than ever, aided by AI-powered coding assistants. While these tools boost productivity, they also introduce subtle errors and insecure patterns at scale. The result: a growing backlog of vulnerabilities that outpaces traditional AppSec models. This webcast examines the risks and opportunities of AI in AppSec and who will be addressing it at RSA Conference. We’ll explore how defenders can use AI to level the playing field with automated scanning, intelligent prioritization, and secure-by-design practices.
View Video
Zenity

AI Agent Governance: The CISO Checklist for the New AI Agent Reality

Mar 12, 2026 By Cinthia Portugal In Zenity
AI agents are rapidly becoming embedded in enterprise workflows, influencing revenue operations, customer engagement, development, and internal decision-making. As these systems gain autonomy and inherit access across SaaS, cloud, and endpoint environments, they introduce a new layer of operational and security risk that traditional controls cannot fully manage.
Read Post
veracode

AI, Application Security, and the Illusion of Control

Mar 12, 2026 By Chris Wysopal In Veracode
Over the past year, AI-generated code has moved from novelty to normal. Developers are shipping faster, prototyping faster, refactoring faster… sometimes without fully understanding what they just merged. From the outside, it looks like a productivity renaissance. From the inside, it feels like something else: a new kind of operational risk that doesn’t behave like the old kind.
Read Post
aikido

How Security Teams Fight Back Against AI-Powered Hackers

Mar 12, 2026 By Dania Durnas In Aikido
Last month, the Mexican government was hacked. 150GB of government data was stolen, including 195 million taxpayer records. This attack exploited a couple of dozen vulnerabilities across ten institutions. In the past, this would have likely taken a skilled team months to crack. But of course, we’re living in a new age. This attack was executed by one person and their Claude Code assistant.
Read Post
armo

Why Legacy Security Tools Fail to Protect Cloud AI Workloads

Mar 12, 2026 By Ben Hirschberg In ARMO
Your CNAPP flags a misconfigured service account. Your CSPM warns about an overly permissive IAM role. Your container scanner reports vulnerabilities in a model-serving image. But none of these tools can tell you that an AI agent just called an internal admin API it has never touched before — or that a prompt injection caused your LLM to leak customer data through a RAG connector.
Read Post
armo

AI Agent Escape Detection: How to Catch Agents Breaking Their Boundaries

Mar 12, 2026 By Yossi Ben Naim In ARMO
Your SOC gets three alerts in quick succession: an unusual outbound connection from a container, a file read on a Kubernetes service account token, and a process spawn that doesn’t match the workload’s baseline. Three different tools, three separate dashboards, three tickets.
Read Post
CrowdStrike

4 Ways Businesses Use CrowdStrike Charlotte AI to Transform Security Operations

Mar 12, 2026 By Scott Wotring In CrowdStrike
Security teams are being asked to do more than ever, often with fewer people and less time. As alert volumes continue to rise and adversaries automate their attacks, even mature SOCs struggle to keep pace. Legacy tools surface signals, but they still leave analysts responsible for triage, investigation, and response decisions that take time and experience to execute well. CrowdStrike Charlotte AI was built to change that model.
Read Post
LimaCharlie

Use Agentic SOC-as-Code to Right-Size Your AI Operations

Mar 12, 2026 By LimaCharlie In LimaCharlie
Let’s start by drawing a strong distinction between what LimaCharlie does and what others offer in their AI SOCs. LimaCharlie's Agentic SecOps Workspace is an architecture that integrates AI as part of the security fabric. It's agentic AI security you own and control, not a black box you subscribe to. We introduce an easily deployable SOC-as-code approach that increases your control and capabilities.
Read Post
reach security

A Comprehensive Guide to Continuous Threat Exposure Management (CTEM)

Mar 12, 2026 By John Dominguez In Reach Security
Continuous Threat Exposure Management is a continuous security framework for identifying, assessing, validating, and reducing the exposures that matter most to an organization. Rather than treating every exposure, alert, or control issue as equally urgent, CTEM helps organizations focus on the exposures that are actually reachable, relevant to likely attack paths, and meaningful in a business context.
Read Post
protecto

LLM Data Leakage Prevention: 10 Best Practices

Mar 12, 2026 By Ashish Kamathi In Protecto
Forget the breach notification email. Forget the security audit trail. A fintech user opened their chatbot last year, saw someone else’s account details staring back at them, and filed a support ticket. That’s how the team found out their LLM had been leaking customer PII for weeks. LLM data security isn’t a checkbox. It’s an architecture decision. Make it before the first model call, not after the first breach. Most teams get one expensive lesson before they understand that.
Read Post
kovrr

What Data Is Required for EU AI Act Compliance

Mar 12, 2026 By Kovrr In Kovrr
The EU AI Act places significant emphasis on documentation because regulatory oversight depends on an organization's ability to demonstrate how its AI systems operate and how associated risks are managed. Compliance is not determined solely by how an AI system performs, but by whether the organization can provide evidence that appropriate governance, risk controls, and oversight mechanisms are in place throughout the system lifecycle.
Read Post

Netskope One AI Guardrails and Netskope One AI Gateway Demo

Mar 11, 2026 By Netskope In Netskope
This is a demo of Netskope One AI Guardrails and the Netskope One AI Gateway. Netskope One AI Guardrails provides real-time content moderation for every interaction, securing the enterprise against emerging AI-specific threats including prompt injection and jailbreak attempts, and unsafe use. Netskope One AI Gateway secures the API traffic fueling your AI-powered applications. By centralizing authentication, traffic management, and content inspection between private apps and LLMs, we ensure autonomous agentic data flows remain governed and secure.
View Video

The hidden risks of AI rule conversion in SIEM migrations

Mar 11, 2026 By Elastic In Elastic
Uncover the hidden risks of AI-powered rule conversion during SIEM migrations and why clean inputs matter. Learn how to combine automation with human validation for secure migration success. Additional Resources: About Elastic Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale. Elastic’s solutions for search, observability, and security are built on the Elastic Search AI Platform — the development platform used by thousands of companies, including more than 50% of the Fortune 500.
View Video
wallarm

The CISO's Dilemma: How To Scale AI Securely

Mar 11, 2026 By Wallarm In Wallarm
Your board wants AI. Your developers are building with it. Your budget committee is asking for an ROI timeline. But as CISO, you're the one who has to answer when the inevitable question comes up: "How do we know this is secure?" If you're like most security leaders, you're caught between two impossible positions. Say yes to AI initiatives without proper security controls, and you're responsible when something goes wrong.
Read Post

Ep. 49 - Iran's AI-Powered Cyber Warfare: The Next Phase of the Global Cyber Threat

Mar 11, 2026 By SafeBreach In SafeBreach
Iranian cyber operations are entering a new era. In this final episode of our Iran cyber series, we explore how Iranian APT groups are evolving — leveraging AI, targeting supply chains, and bypassing the billion-dollar security stacks built to stop them. Hosts Tova Dvorin and Adrian Culley break down the emerging threats shaping 2026, including: The perimeter is gone. Your weakest vendor may now be your biggest risk.
View Video
cloudflare

AI Security for Apps is now generally available

Mar 11, 2026 By Liam Reese In Cloudflare
Cloudflare’s AI Security for Apps detects and mitigates threats to AI-powered applications. Today, we're announcing that it is generally available. We’re shipping with new capabilities like detection for custom topics, and we're making AI endpoint discovery free for every Cloudflare customer—including those on Free, Pro, and Business plans—to give everyone visibility into where AI is deployed across their Internet-facing apps.
Read Post

What is Agentic AI vs GenAI?

Mar 11, 2026 By Rubrik In Rubrik
Everyone knows ChatGPT, but Agentic AI is where the real work happens. In this Agentic AI vs GenAI breakdown, we explain why Agentic AI is the next major leap, and what it means for your business and career. Here’s the difference: Generative AI (GenAI): Creates content. You ask, it writes, summarizes, or creates. Agentic AI: Does work. It is built on three core components: a brain (reasons), memory (context), and tools (the key that lets agents touch real systems like APIs and databases).
View Video
cyberark

Identity governance gaps: How AI profiles move security beyond the label

Mar 10, 2026 By Brian Smits In CyberArk
If your identity governance program feels like a relic from a simpler time, you’re not alone. Traditional identity governance and automation (IGA) was built for a world where job titles told the whole story. A software engineer was a software engineer; a sales rep was a sales rep. Assigning access was intended to be as simple as slotting people into predefined roles.
Read Post
mend

Introducing System Prompt Hardening: production-ready protection for system prompts

Mar 10, 2026 By Tiffany Jennings In Mend
Today, we’re launching System Prompt Hardening, Mend.io’s new capability that defends the hidden instructions that control how your AI systems behave. Unlike user-facing prompts, system prompts live behind the scenes, and when attackers manipulate them, the result can be data leaks, policy bypasses, or unsafe model behavior. System prompt hardening stops those attacks at the source and gives security, engineering, and risk teams a practical, auditable way to secure AI in production.
Read Post
cyberhaven

Now Available: Cyberhaven's Free AI App Risk Checker

Mar 10, 2026 By Cyberhaven In Cyberhaven
Most security teams are being asked to "enable AI" before they have any real sense of which tools are safe to use. That gap is costing them. Cyberhaven's research found that the majority of AI tools in active enterprise use today fall into high or critical risk categories, and more than 80% of enterprise data flowing into AI is going to those risky tools, not to platforms built with serious security in mind. To help security teams cut through the noise, we built the Cyberhaven AI App Risk Checker.
Read Post
Torq

SOAR vs. AI SOC: The Category That Left SOAR Behind

Mar 10, 2026 By Bob Boyle In Torq
If you’ve been in security operations for more than a few years, you’ve lived through the automation hype cycle at least twice. First, it was SIEM that was going to solve everything. Then SOAR was supposed to fix what SIEM couldn’t. Now, AI SOC platforms are delivering what SOAR always promised but never actually could.
Read Post
LimaCharlie

What Frontier Models Can Actually Do in a SOC: Open-source Benchmark for Agentic SecOps Capabilities

Mar 10, 2026 By LimaCharlie In LimaCharlie
Maxime Lamothe-Brassard, founder and CEO of LimaCharlie, sought answers on AI’s current capabilities in the SecOps space. Plenty of benchmarks exist to test AI's knowledge of cybersecurity, but none test whether a model actually does the work. There's a significant difference between an AI that can answer trivia questions about CVEs and one that can pick up an alert, investigate it, and produce an incident report.That gap matters more now than ever.
Read Post
tanium

Why our AI world demands a remediation-first approach to exposure management

Mar 10, 2026 By Tanium In Tanium
Editor's note: This guest article by Tanium Senior Sirector, Product Management, Julia Grunewald was originally published in SC Media Exposure management has emerged as a powerful alternative to traditional vulnerability management for good reason. A proactive, always‑on security discipline that continuously identifies an organization’s exposures and prioritizes them based on risk helps us know where to best focus our limited resources.
Read Post
Tines

Futureproofing Tines: Designing AI infrastructure for scale

Mar 10, 2026 By Yannick Gloster In Tines
At Tines, we power important workflows for some of the most demanding teams in the world, and for years, that always meant supporting deterministic, auditable automation. But as reasoning models have matured, our customers have started asking a different question: what if the workflow itself could reason?
Read Post
knowbe4

Yes, You Need AI to Defeat AI

Mar 10, 2026 By Roger Grimes In KnowBe4
Long-time followers of mine know that I am not an AI hype person. Some people might even call me an AI critic. I prefer to call myself an AI realist. I do not think AI will kill us all (despite our best efforts to bypass all guardrails and common sense). I do not think AI will replace all jobs. I do not think AI will replace all cybersecurity jobs. But I do think AI allows improvements in many areas, including cyber defenses, over traditional tools and techniques.
Read Post
salt security

The Economic Argument: The Real Cost of Insecure APIs in the AI Era

Mar 10, 2026 By Eric Schwake In Salt Security
When cybersecurity teams talk about risk, they usually speak in technical terms like vulnerabilities, exploits, and attack vectors. But when they walk into the boardroom, they need to speak a different language. They need to speak about cost. In the era of AI, the cost of insecure APIs has shifted from a potential liability to a tangible line item on the balance sheet. It is no longer just about the cost of a data breach.
Read Post

How to migrate hundreds of Splunk SPL queries using AI

Mar 9, 2026 By Elastic In Elastic
Discover how AI can convert and migrate hundreds of Splunk SPL queries efficiently while providing detailed explanations for validation. Learn how to reduce manual effort and speed up SIEM transitions. Additional Resources: About Elastic Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale. Elastic’s solutions for search, observability, and security are built on the Elastic Search AI Platform — the development platform used by thousands of companies, including more than 50% of the Fortune 500.
View Video
knowbe4

AI-to-AI Communication and Secret AI Code Must Be Stopped At All Costs

Mar 9, 2026 By Roger Grimes In KnowBe4
As I wrote in my recent book, How AI and Quantum Impacts Cyber Threats and Defenses, as we humans use AI more and more, AI will begin to communicate with itself using new AI-only communication methods that humans cannot easily see or read. If there is no human-readable audit trail or code, this is a very, very bad thing. It must be stopped at all costs. Humans are absolutely beginning to use AI more and more to do things they used to do manually. Soon, we will all be using multiple AI agents.
Read Post
armo

Best AI Intrusion Detection for Kubernetes: Top 7 Tools in 2026

Mar 9, 2026 By Yossi Ben Naim In ARMO
Why do traditional intrusion detection systems fail in Kubernetes? Legacy IDS tools were built for static servers with fixed IPs and clear network perimeters—Kubernetes breaks all of those assumptions. Ephemeral pods, east-west traffic, encrypted service mesh communication, and dynamic IP addresses make perimeter-focused, signature-based detection effectively blind inside clusters.
Read Post
jfrog

Trusted AI Adoption (Part 1): Consolidation

Mar 9, 2026 By Ohad Shalev In JFrog
Imagine your lead Software Engineer walks into your office and says, “Good news! I just deployed that critical update to production. I wrote the code on my personal laptop, didn’t run it through CI/CD, skipped the security scan, and just copied the files directly to the server with a USB drive.” You would fire them. Or you would revoke their access immediately.
Read Post

Hackerbot-Claw Crosses the Line - The 443 Podcast - Episode 361

Mar 9, 2026 By WatchGuard Technologies In WatchGuard
This week on the podcast, we chat about an OpenClaw bot that moved beyond vulnerability research and into malicious activity. Before that, we cover an AI-discovered vulnerability in the pac4j-jwt authentication library before ending with a discussion on an upcoming California law designed to help make age verification in the digital age easier, but with massive consequences.
View Video
cyberhaven

Why AI-Native Endpoint DLP Is The Foundation of Modern Data Security

Mar 9, 2026 By Nishant Doshi In Cyberhaven
For a long time, data loss prevention (DLP) lived in the margins of security programs. It was something teams deployed to satisfy a requirement or reduce obvious risk. A handful of policies, some visibility into network traffic, maybe a scan of cloud storage. That was usually enough. That model reflected how work used to happen. Data moved more slowly, lived in fewer places, and followed more predictable paths. That is no longer true.
Read Post
reach security

Reach Recognized in Gartner Emerging Tech Report on Domain-Specific Language Models for SecOps

Mar 9, 2026 By John Dominguez In Reach Security
In its January 2026 report, Emerging Tech: Tech Innovators in Domain-Specific Language Models for SecOps, Gartner examines how domain-specific language models (DSLMs) are reshaping security operations. The report explains that DSLMs are designed to address the limitations of general-purpose language models by focusing on a particular task or use case – in this case, cybersecurity.
Read Post
protecto

Multi-Agent AI Systems: Beyond the Basics

Mar 9, 2026 By Ashish Kamathi In Protecto
Production deployments. That’s where multi-agent AI systems live now, not research labs. Salesforce, Microsoft, and Cognition Labs are all running agent pipelines that replaced what used to take entire ops teams. Most businesses still don’t fully understand what they’ve switched on. A multi-agent AI setup isn’t just one model doing more things.
Read Post
Beyond the Hype: Navigating the Security Risks and Safeguards of Generative AI Video

Beyond the Hype: Navigating the Security Risks and Safeguards of Generative AI Video

Mar 9, 2026 By SecuritySenses In SecuritySenses
The rapid evolution of generative AI video models, such as Seedance 2.0, Kling 3.0 and OpenAI's Sora, has unlocked unprecedented creative potential. However, for cybersecurity professionals, these advancements represent a significant expansion of the corporate attack surface. In an era where "seeing is no longer believing," the integration of synthetic media into the enterprise workflow demands a rigorous security framework. This article explores the dual nature of AI video: the sophisticated threats it enables and how modern, enterprise-grade platforms are architecting defenses to mitigate these risks.
Read Post

What is SIEM migration and how can AI automate the transfer?

Mar 6, 2026 By Elastic In Elastic
Understand what SIEM migration involves and how AI can automate rule conversion, data transfer, and validation processes. Learn how AI reduces migration time while maintaining accuracy and security. Additional Resources: About Elastic Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale. Elastic’s solutions for search, observability, and security are built on the Elastic Search AI Platform — the development platform used by thousands of companies, including more than 50% of the Fortune 500.
View Video
wallarm

Agent-to-Agent Attacks Are Coming: What API Security Teaches Us About Securing AI Systems

Mar 6, 2026 By Wallarm In Wallarm
AI systems are no longer just isolated models responding to human prompts. In modern production environments, they are increasingly chained together – delegating tasks, calling tools, and coordinating decisions with limited or no human oversight. Almost all that communication happens through APIs. This shift offers enormous productivity benefits. But it has also complicated security. Because as soon as systems can talk to each other, they can be attacked through each other.
Read Post

AI Deepfakes & Laptop Farms: Inside the 2026 Cloudflare Threat Report

Mar 6, 2026 By Cloudflare In Cloudflare
In this episode of This Week in NET, host João Tomé is joined by Cloudflare threat intelligence experts Brian Carter and Chris Pacey to break down the 2026 Cloudflare Threat Report and what it reveals about today’s cyber threat landscape. We discuss how threat intelligence helps organizations prioritize risks, how attackers are increasingly leveraging automation and AI tools, and why botnets, supply-chain attacks, and credential-theft campaigns continue to evolve.
View Video

AI Impact Summit 2026 Highlights | FinTech, AI & Data Security Insights #ai

Mar 6, 2026 By Protecto In Protecto
AI Impact Summit 2026 Highlights | AI, FinTech & Data Security Insights from Delhi This video covers our 5-day experience at AI Impact Summit 2026 in New Delhi, one of India's leading technology events focused on Artificial Intelligence, FinTech, Data Security, and Compliance. During the summit, we connected with industry leaders, CISOs, FinTech professionals, and AI innovators, discussing the latest developments in data protection, AI governance, cybersecurity, and enterprise AI adoption.
View Video
armo

AI Agent Security Framework for Cloud Environments

Mar 6, 2026 By Ben Hirschberg In ARMO
Your security team has done the homework. You’ve built a risk taxonomy covering agent escape, prompt injection, tool misuse, and data exfiltration. You’ve mapped those threats against your agent architecture’s seven layers. You’ve classified your agents by autonomy level — separating read-only chatbots from fully autonomous workflow agents that can book meetings, modify databases, and invoke other agents. The risk assessment is thorough.
Read Post
armo

What Is AI Agent Sandboxing? Kubernetes-Native Enforcement Explained

Mar 6, 2026 By Shauli Rozen In ARMO
You’re in a Slack thread at 9 AM on a Tuesday. A developer is asking why their LangChain agent can’t reach an external API anymore. You wrote the NetworkPolicy that blocked it. But you also can’t explain why you wrote that specific rule—because you wrote it based on what you guessed the agent would do, not what it actually does. You don’t have behavioral data. You don’t have an observation period.
Read Post

Access Your OpenClaw Web UI from Anywhere with Teleport

Mar 6, 2026 By Teleport In Teleport
OpenClaw’s web UI gives you full control over your personal AI agent, but exposing it publicly creates significant risk. In this video, I show how to securely access the OpenClaw web interface from anywhere using Teleport, without opening inbound ports or relying on public instances. You’ll see how to put the OpenClaw UI behind identity-based access, approve devices, and keep full admin control while staying locked down.
View Video
protecto

Entropy vs. Polymorphic Tokenization: Which One Actually Protects Your AI Pipeline?

Mar 6, 2026 By Protecto In Protecto
If you’re building AI applications that touch sensitive data, tokenization isn’t optional. It’s the layer that decides whether your pipeline leaks PHI, PII, or financial data to your LLM, or keeps it protected. But here’s where most teams stop thinking: not all tokenization is the same. Two approaches you’ll encounter most often are entropy-based tokenization and polymorphic tokenization. They sound similar. They serve completely different purposes.
Read Post
protecto

What is Data Masking

Mar 6, 2026 By Ashish Kamathi In Protecto
AI adoption is growing fast. But so are data risks. From Samsung’s internal code leak via ChatGPT to chatbot failures at global brands, recent incidents show one thing clearly: sensitive data can escape in unexpected ways. Most breaches today are not traditional hacks. They happen through AI tools, prompts, and automation workflows. This is why understanding what data masking is is critical. It helps organizations protect sensitive information without slowing innovation or breaking AI accuracy.
Read Post
exabeam

AI Access Without Add-Ons or Limits

Mar 6, 2026 By Exabeam In Exabeam
Artificial intelligence (AI) within security operations has shifted from basic summarization to fully agentic systems that participate in threat detection, investigation, and response (TDIR). As these capabilities evolve, many vendors restrict access through add-ons, credits, or gated previews. The result is predictable: Analysts use AI less, trust it less, and see less value from it. Agentic AI capabilities should be available the moment analysts need it, not controlled through tiers or metering.
Read Post
AI Usage Monitoring: Gaining Full Visibility Into GenAI Activity

AI Usage Monitoring: Gaining Full Visibility Into GenAI Activity

Mar 6, 2026 By SecuritySenses In SecuritySenses
Generative AI tools have entered the workplace through every possible channel. Employees use them to draft emails, summarize documents, and write code. This organic adoption creates a visibility gap for security and IT leaders. They must protect corporate data without blocking innovation. With these challenges in mind, this article explains how organizations can track GenAI use. To move from identifying risks to enabling secure adoption, it highlights practical steps to protect data while enabling productivity.
Read Post
armo

What to Look for in an AI Workload Security Tool: The Complete Buyer's Guide

Mar 5, 2026 By Ben Hirschberg In ARMO
You’re evaluating AI workload security tools and every demo looks the same. Vendor A shows you an AI-SPM dashboard. Vendor B shows you a nearly identical AI-SPM dashboard with slightly different branding. Vendor C shows you posture findings with an “AI workload” tag that wasn’t there last quarter.
Read Post
nightfall

100 SaaS Apps. One Query. Zero Alerts: How Glean and Claude Cowork Expose the Agentic AI Data Risk

Mar 5, 2026 By Chris Martinez In Nightfall
A sales rep opened Glean—an AI-powered enterprise search platform that connects to your company's SaaS apps and lets anyone query across all of them in natural language—typed "Who are my top 10 customers?" and got a clean, formatted list pulled from Salesforce, cross-referenced with HubSpot, and confirmed against data sitting in Google Drive. They copy-pasted that list into a personal Gmail draft. No alerts fired. No policies triggered. No one noticed. This isn't a hypothetical.
Read Post
indusface

Discover Exposed AI Infrastructure with Indusface WAS

Mar 5, 2026 By Gaurav Chauhan In Indusface
You track your web applications. You inventory your APIs. But is anybody monitoring your AI servers? Just last week research found that there were more than 175,000 exposed versions of Ollama, an AI server popular for self-hosting LLMs. Across enterprises, self-hosted model servers are being deployed on cloud VMs and GPU-backed instances to power copilots, internal automation, and experimental AI features.
Read Post
apono

Why Static Privilege Models Break Down in Agentic AI Security

Mar 5, 2026 By Ofir Stein In Apono
Earlier this year, AWS experienced a 13-hour outage that was reportedly linked to one of its own internal AI coding tools. Apparently, their Kiro agentic coding tool thought that there was an issue with the code in the environment, and that the best way to fix it was to simply burn it to the ground.
Read Post
LimaCharlie

Agentic AI Security: Automated False Positive Suppression

Mar 5, 2026 By LimaCharlie In LimaCharlie
LimaCharlie's Agentic SecOps Workspace (ASW) is a platform where AI doesn't just advise, it acts. By connecting to your security infrastructure via API, the ASW executes operations end-to-end at a fraction of the cost of traditional AI SOC platforms. The result is genuine AI security automation that operates independently and serves as a force multiplier, giving every analyst on your team access to senior-level expertise. Alert fatigue is one of the most persistent challenges in security operations.
Read Post
kovrr

EU AI Act Compliance Explained for CISOs and GRC Leaders

Mar 5, 2026 By Kovrr In Kovrr
‍The European Union's Artificial Intelligence Act (EU AI Act) represents the first comprehensive attempt by a major regulator to establish legal oversight of artificial intelligence. Its objective is to ensure that AI systems deployed across the EU operate safely, transparently, and in a manner that protects fundamental rights.
Read Post
1Password

IAM stops at sign-in. Your credentials do not.

Mar 5, 2026 By Chris Fowler In 1Password
AI and automation are embedded in daily work. Copilots draft content and pull in customer context. Agents triage tickets, update records, and trigger workflows across Slack, Salesforce, Jira, and GitHub. In engineering, this acceleration shows up in scripts, CI/CD pipelines, and infrastructure automation that depend on secrets to ship and operate software.
Read Post
seemplicity

The Future of the Cybersecurity Workforce in an AI-Driven Era

Mar 5, 2026 By Jessica Amado In Seemplicity
New research shows the cybersecurity workforce is undergoing a major shift as AI transforms security operations. While leaders remain deeply committed to the field, many are facing increasing burnout, evolving skill demands, and growing responsibility for governing AI-driven systems. The future cybersecurity leader will need to balance technical expertise with communication, business alignment, and AI oversight.
Read Post

AI SOC Automation with Explainable Results | Securonix Agentic Mesh

Mar 5, 2026 By Securonix In Securonix
Securonix Agentic Mesh introduces productivity-based AI for the SOC. Meet SAM, the AI SOC Analyst built into the Unified Defense SIEM. Security operations teams are under more pressure than ever. Alert volumes continue to rise. Data is fragmented across hybrid and multi-cloud environments. Compliance demands are increasing. At the same time, adversaries are using AI to move faster and with greater precision.
View Video
armo

Runtime Observability for AI Agents: See What Your AI Actually Does

Mar 5, 2026 By Shauli Rozen In ARMO
Last Tuesday, a platform security engineer at a mid-size fintech company ran a routine audit on their production Kubernetes clusters. The audit surfaced three LangChain-based agents, two vLLM inference servers, and a Model Context Protocol (MCP) tool runtime. None had been reported by the development teams. None appeared in any security inventory. All had been running for weeks. One of the agents had been making outbound API calls to a third-party data enrichment service every four minutes.
Read Post

Why AI Features Don't Equal Better Vulnerability Management

Mar 4, 2026 By Nucleus Security In Nucleus
AI is becoming table stakes in vulnerability and exposure management. In this candid webinar conversation, Chris Ray, Field CTO at GigaOm, and Will Gorman, CTO and leader of AI initiatives at Nucleus Security, challenge the assumption that more AI automatically leads to better outcomes.
View Video

AI certificate

Mar 4, 2026 By Cato Networks In Cato Networks
You can ask AI to create a song that sounds like a famous band sang it. But what happens if you use it or share it? Are there legal or other implications? AI tools must be visible and governed. Shadow AI isn’t. Take Cato’s AI in Cybersecurity course to understand the risks of unsanctioned AI tools. It’s free, comes with a downloadable cert, and earns CPE credits. Register now.
View Video

Your AI Just Became the Insider Threat | CrowdStrike Global Threat Report 2026

Mar 4, 2026 By CrowdStrike In CrowdStrike
Hackers can reach your critical systems in just 27 seconds. In 2025, AI-powered cyberattacks surged 89% as adversaries weaponized the same AI tools organizations use every day. From eCrime groups to China-nexus actors, North Korean operatives, and Russian intelligence, AI is accelerating and reshaping global threat activity. In this video, you’ll learn: Adversaries are not just using AI. They are weaponizing your AI against you.
View Video
Zenity

What a Rogue Vacuum Army Teaches Us About Securing AI

Mar 4, 2026 By Andrew Silberman In Zenity
If you’re like me, you’ve been enthralled with the recent story, expertly written by Sean Hollister at The Verge, about how Sammy Azdoufal built a remote control for his DJI Romo vacuum with a PlayStation controller, and ended up in control of 7,000+ robovacs all over the world. On the surface, it sounds like vibe coding gone slightly sideways. I mean, really, what could a vacuum possibly do? Turns out… a lot.
Read Post
Snyk

The 89% Problem: How LLMs Are Resurrecting the "Dormant Majority" of Open Source

Mar 4, 2026 By Noa Yaffe-Ermoza In Snyk
AI coding assistants are quietly resurrecting millions of abandoned open source packages. For the last decade, developers relied on a simple heuristic for open source security: Prevalence \= Trust. If a package was downloaded millions of times a week (lodash, react, requests), we assumed it was "safe enough" because thousands of eyes were on it. If it was obscure, we approached with caution.
Read Post
LimaCharlie

The Next Market Disruption: Agentic SOC

Mar 3, 2026 By LimaCharlie In LimaCharlie
Predicting a market disruption is difficult, but the vast rewards of being correct make it worthwhile. Unfortunately, prediction becomes tougher when marketing teams start labelling everything as a "market disruptor". Much like the stock market, if something is being sold to you as “the investment of a lifetime”, it almost certainly is not. Yet market disruptors do exist, and the organizations that identify them enjoy generational success.
Read Post
WatchGuard

The Machine War: Why MSPs Must Move from AI-Assistance to Autonomy

Mar 3, 2026 By Adam Winston In WatchGuard
In 2026, the digital landscape has shifted from a world of "AI assistants" to one of autonomous operators. For managed service providers (MSPs), this evolution marks the end of the traditional "land and expand" human services playbook and the beginning of a high-speed era of machine-on-machine warfare.
Read Post
protecto

What is a Prompt Injection Attack?

Mar 3, 2026 By Ashish Kamathi In Protecto
AI tools are quickly becoming part of everyday business workflows. From chatbots to automation tools, large language models now handle sensitive tasks and data. But with this growth comes new security risks. One of the biggest emerging threats is the prompt injection attack, in which attackers manipulate inputs to cause AI systems to ignore their original instructions. Unlike traditional cyberattacks, this method exploits weaknesses through language rather than code.
Read Post
mend

AI Compliance: 5 Key Frameworks, Challenges, and Best Practices

Mar 3, 2026 By Tiffany Jennings In Mend
AI compliance ensures AI systems follow laws, ethics, and standards by managing risks like bias, privacy violations, and lack of transparency through robust governance, documentation, and continuous monitoring, using frameworks like the EU AI Act and NIST AI Risk Management Framework (RMF) to build trust and avoid penalties in developing, deploying, and operating AI.
Read Post

AI Moves Fast, Privacy Has to Move Faster with Ojas Rege

Mar 3, 2026 By Rubrik In Rubrik
In this episode, Caleb Tolin welcomes Ojas Rege of OneTrust for a practical, wide-ranging conversation on how data privacy and governance must evolve alongside enterprise AI adoption. Ojas explains why AI fundamentally changes the privacy conversation: the same systems that enable organizations to move faster can also cause harm faster when guardrails aren’t in place. From agentic AI systems that dynamically repurpose data to general-purpose models that blur traditional notions of “intended use,” the challenge isn’t just compliance—it’s trust.
View Video
armo

AI Agent Sandboxing & Progressive Enforcement: The Complete Guide

Mar 3, 2026 By Ben Hirschberg In ARMO
Your CISO just got word that engineering is deploying AI agents into production Kubernetes clusters next quarter. Not chatbots—autonomous agents that generate and execute code, call external APIs through MCP tool runtimes, access internal databases, and make decisions without human review. The question lands on your security team: “How are we securing these?”
Read Post
armo

AI-Aware Threat Detection for Cloud Workloads: 4 Attack Chains Most Security Stacks Miss

Mar 3, 2026 By Yossi Ben Naim In ARMO
Your security stack was built for workloads that follow predictable code paths. AI agents don’t. They interpret prompts, generate code on the fly, invoke tools dynamically, and escalate privileges in ways no developer anticipated — all as part of normal operation. The signals that indicate a compromise in a traditional container are indistinguishable from an AI agent doing its job. And most detection tools can’t tell the difference. This isn’t a theoretical gap.
Read Post
armo

AI Security Posture Management (AI-SPM): The Complete Guide to Securing AI Workloads

Mar 3, 2026 By Shauli Rozen In ARMO
Every cloud security vendor now has an AI-SPM dashboard. Strip away the branding, though, and most of these dashboards are doing the same thing: checking IAM configurations, scanning for misconfigured network access, inventorying AI models across cloud accounts, and flagging compliance gaps. It’s cloud security posture management with an AI label applied. That’s a problem, because AI workloads don’t behave like other cloud workloads.
Read Post
nightfall

AI Can Scan Your Code. It Can't Secure Your Organization.

Mar 3, 2026 By Chris Martinez In Nightfall
When Anthropic announced Claude Code Security on February 20th—a tool that scans codebases for vulnerabilities and suggests patches for human review—the reaction from markets was swift and brutal. Major cybersecurity names watched their stock prices fall by double digits within days. The implied thesis behind the selling: AI can now do what these companies do, so why pay for them? It's a compelling fear and an inaccurate conclusion at the same time. The DLP space is a clear example of why.
Read Post
aikido

Rare Not Random: Using Token Efficiency for Secrets Scanning

Mar 3, 2026 By Zach Rice In Aikido
In Regex is (almost) All You Need, we learned that using a combination of regular expression patterns, entropy, and rule-based filters are an effective way to detect candidate secrets. Regex is used for casting a wide net to identify candidates. Entropy is used as a primary filter on the captured candidates and additional filters like presence of commonly used english words, or filtering on known “safe” files like go.sum are applied last.
Read Post
LimaCharlie

Agentic AI Security: Spin Up a Fully Configured Tenant in Minutes

Mar 2, 2026 By LimaCharlie In LimaCharlie
LimaCharlie built a SecOps Cloud Platform that connects every component, including agentic AI, via API. This architectural approach unlocks the full potential of AI, allowing it to do more than advise. We call it the Agentic SecOps Workspace. With LimaCharlie, AI can provision tenants, deploy rulesets, configure integrations, and manage infrastructure directly. Our bring-your-own-LLM approach makes AI a native part of your security stack, not a layer on top of it.
Read Post
Arctic Wolf

Who's Winning the AI Arms Race: Threat Actors or Cybersecurity Defenders?

Mar 2, 2026 By Arctic Wolf In Arctic Wolf
The modern threat landscape is an ever-evolving battlefield of innovation and escalation. Thanks to the rapid adoption of artificial intelligence, both attackers and defenders now have powerful new tools at their disposal. But who has the edge when it comes to the artificial intelligence (AI) arms race? Unsurprisingly, the answer is complicated.
Read Post
knowbe4

The Case for Behavioral AI in Legal Email Security

Mar 2, 2026 By KnowBe4 Team In KnowBe4
For legal organizations, the integrity of communication isn't just a business requirement, it’s a foundational pillar of the profession. Whether it’s a sensitive case strategy, a confidential merger agreement, or personal client data, the information contained within firm emails represents an immense amount of trust and significant liability. However, as law firms increasingly migrate to cloud environments like Microsoft 365, they face a double-edged sword.
Read Post

CrowdStrike Falcon AI Detection and Response

Mar 2, 2026 By CrowdStrike In CrowdStrike
Cyber threats are evolving faster than ever — and security teams need AI that doesn’t just detect threats, but understands and responds to them in real time. In this video, we explore CrowdStrike Falcon AI Detection and Response (AIDR) and how it transforms modern security operations. Powered by the CrowdStrike Falcon platform, AIDR leverages advanced artificial intelligence to automatically identify, categorize, and prioritize threats with speed and precision — helping SOC teams cut through alert noise and focus on what truly matters.
View Video

AI on the Radar: Securing AI Driven Development

Mar 2, 2026 By Snyk In Snyk
Join Vandana and Rob in this insightful webinar exploring the rapidly evolving landscape of AI security. As we shift from simple query-response models to complex autonomous agents that can plan, execute code, and access sensitive APIs, the traditional security "locks" are no longer sufficient. This session dives deep into the OWASP AI Exchange, a community-driven initiative providing practical guidance and technical controls for securing AI systems.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.