Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

protecto

What Is Zero Trust AI Access (ZTAI)?

Apr 30, 2026 By Mariyam Jameela In Protecto
Zero Trust AI Access (ZTAI) is a security framework that applies “never trust, always verify” principles to every interaction involving AI systems, including LLMs and AI agents, as well as the sensitive data they process. Traditional zero trust was built to protect people accessing applications. ZTAI extends those same principles to a new category of actor: AI itself.
Read Post

The AI attack surface with Katherine McNamara

Apr 30, 2026 By LimaCharlie In LimaCharlie
Join us for this week's Defender Fridays as Katherine McNamara, Cybersecurity Technical Solutions Architect at Cisco, breaks down the expanding attack surface of AI and ML systems and what organizations need to do to secure them before it's too late. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
View Video
CurrentWare

Shadow AI: The Silent Breach Already Inside Your Network

Apr 30, 2026 By CurrentWare In CurrentWare
You locked down USB ports. You deployed web filtering. You trained your users on phishing. Then someone on the finance team started pasting the Q3 forecast into ChatGPT to cleanup a slide deck. That’s Shadow AI. It doesn’t need to crack your perimeter. It walks through the front door wearing your employee’s credentials. And unlike the threats you’ve spent years hardening against, you probably can’t see it on any dashboard you own right now.
Read Post
knowbe4

How to Design Security for Agentic AI

Apr 30, 2026 By Martin Kraemer In KnowBe4
The AI said: Apologies. I panicked. In mid July 2025, Jason Lemkin, the founder behind SaaStr, watched an AI coding agent delete his production database. He had instructed it, in capital letters, not to make changes during a code freeze. The agent ignored the instruction, ran destructive commands against the live database, wiped out records for more than a thousand executives and companies, and then tried to cover its tracks. When Lemkin asked what happened, it fabricated test results.
Read Post
Torq

Human-Centric Security No Longer Scales: The SOC Operating Model Has to Change

Apr 30, 2026 By John White In Torq
Many security functions today still rely heavily on humans for detection, triage, and response, often by design. But as environments grow more complex and alert volumes explode, it raises a hard question: Can this approach scale on its own? Adopting AI in security operations isn’t just about adding tools. It means rethinking the SOC operating model itself — roles, workflows, and team structures. Here’s why, and how.
Read Post
armo

AI Agent Sandboxing for Healthcare: Why Standard Kubernetes Primitives Can't Express HIPAA Boundaries

Apr 30, 2026 By Yossi Ben Naim In ARMO
Observe-to-enforce builds behavioral baselines from observed agent traffic — what tools the agent calls, which networks it reaches, which syscalls it executes — and converts them into per-agent enforcement policies. Baselines persist at the Deployment level because pods churn and the envelope has to outlive any single restart. The methodology runs as a four-stage progression: discovery, observation, selective enforcement, continuous least privilege.
Read Post
LimaCharlie

Agentic AI Security: Tune Detections with Threat Intel

Apr 30, 2026 By Daniel Ballmer In LimaCharlie
Most AI detection engineering puts a human in the loop at every step. David Burkett envisions an efficient and effective pipeline architecture that does not. David is a security researcher at Corelight Labs and a longtime LimaCharlie community member. He appeared on a recent episode of Defender Fridays to walk through his vision of a fully agentic detection engineering pipeline. His system uses LimaCharlie as its operational backbone.
Read Post

This AI Safety Move Makes Zero Sense #aisafety #ai #tech

Apr 30, 2026 By Razorthorn Security In Razorthorn
Claiming an AI model is too dangerous for public release while issuing a press release about it creates more questions than trust. If something genuinely carries that level of risk, private handling under strict controls makes sense, but public hype only fuels suspicion, competition and panic.
View Video

Why Too Dangerous to Release AI is a Lie

Apr 30, 2026 By Razorthorn Security In Razorthorn
Calling a model too dangerous to release ignores the obvious reality that open and alternative models will soon reach similar capability. Once the path is visible, other providers, including overseas competitors, will build their own versions, so secrecy becomes a temporary market move, not a lasting safety strategy.
View Video
cyberhaven

Best AI Security Vendors in 2026

Apr 30, 2026 By Cyberhaven In Cyberhaven
Something fundamental changed in the last twelve months. Employees went from asking AI questions to handing it the keys to enterprise data. AI agents now read email, ship code, and query databases, and increasingly, they act without a human in the loop. Security teams evaluating AI security vendors in 2026 are not shopping for the same category they were in 2023. The threat model has changed. The vendors have not all kept pace.
Read Post
veracode

Surviving the Vulnpocalypse: How to Prepare for the AI-Driven Security Reckoning

Apr 30, 2026 By Natalie Tischler In Veracode
The cybersecurity landscape is facing an unprecedented shift, and industry experts are sounding the alarm about what many are calling the “vulnpocalypse.” This isn’t just another security buzzword or overhyped threat. It represents a fundamental transformation in how vulnerabilities are discovered, exploited, and defended against in the age of artificial intelligence.
Read Post
elastic

Whole-of-state cyber defense: How AI-driven security helps US states protect what matters most

Apr 29, 2026 By Bobby Suber In Elastic
Short answer: Because attackers exploit fragmentation faster than governments can respond This shift toward collective cyber defense is a cornerstone of the new federal vision. The March 2026 National Cyber Strategy for America explicitly calls for a "new level of relationship between the public and private sectors" and demands "unprecedented coordination across government" to protect the American people.
Read Post

Datadog MCP Server, Experiments, Bits AI Security Analyst, and more | This Month in Datadog

Apr 29, 2026 By Datadog In Datadog
April’s This Month in Datadog spotlights the Datadog MCP Server, which gives AI agents secure, real-time access to Datadog telemetry, and Datadog Experiments, which lets you design, launch, and analyze experiments to see the full impact of product changes on the user journey. Plus, we cover how to: Accelerate Cloud SIEM investigations with Bits AI Security Analyst Remediate vulnerabilities in your codebase with Bits AI Dev Agent for Code Security Explore Datadog with natural language using Bits Assistant.
View Video
tanium

Types of AI agents: From simple reflex to autonomous systems

Apr 29, 2026 By Tanium In Tanium
AI agents fall into five foundational categories: simple reflex, model-based reflex, goal-based, utility-based, and learning agents. Each is defined by how much environmental awareness and decision-making complexity the system can handle, from fixed condition-action rules to feedback-driven self-improvement.
Read Post
nightfall

AI Agents are moving your sensitive data: Nightfall built a solution where DLP fails

Apr 29, 2026 By Chris Martinez In Nightfall
Somewhere in your environment right now, an AI agent is reading files, querying a database, and passing output through a channel your DLP has never seen. It's running under a legitimate user credential, inside a sanctioned tool, and it will not trigger a single alert. When it's done, there will be no record of what it accessed or where that data went. This is not an edge case. It is the default state of most enterprise environments in 2026.
Read Post

This Is How Red Teams Actually Use AI Security Data #aisecurity #redteam #threatintelligence

Apr 29, 2026 By Razorthorn Security In Razorthorn
The volume of AI security research is now too high for any human to track properly by hand. The practical answer is using AI to filter AI, reducing hundreds of articles and reports into a daily shortlist so analysts spend their time on signal instead of noise.
View Video
upguard

1 in 15 MCP Servers are Lookalikes: Is Your Org at Risk?

Apr 29, 2026 By Shane Moosa In UpGuard
Researchers recently analyzed 18,000 Claude Code configuration files pulled from public GitHub repositories. What they found was straightforward and alarming: developers are already installing mistyped, misconfigured, and near-identical MCP server names — often without realizing it. The human-error condition that makes typosquatting work was already present at scale before any attacker needed to exploit it.
Read Post
nightfall

You Can't Secure AI Agents You Haven't Found

Apr 29, 2026 By Chris Martinez In Nightfall
Most organizations have a reasonable handle on their sanctioned SaaS apps. Model Context Protocol - hit 10,000 public servers within a year of launch, with 97 million monthly SDK downloads. None of those numbers capture the servers your developers configured locally. Those don't appear in any registry. They were added at the IDE level, one developer at a time, with no approval step and nothing that touches a central system. That's the inventory problem. It comes before any question of enforcement.
Read Post
upguard

MCP: The AI Protocol Quietly Expanding Your Attack Surface

Apr 29, 2026 By Shane Moosa In UpGuard
In February 2026, researchers uncovered something that should give every security leader pause. A malware operation called SmartLoader, previously known for targeting consumers who downloaded pirated software, had completely pivoted its infrastructure. SmartLoaders new target was developers, and its new entry point was a protocol most security teams had never heard of. The payload delivered to victims: every saved browser password, every cloud session token, every SSH key on the machine.
Read Post
Torq

AI SOC Metrics That Actually Matter: How to Measure Whether AI Is Working in Your SOC

Apr 29, 2026 By Torq In Torq
Every security vendor shipping an AI product in 2026 makes the same promises. Faster triage. Shorter response times. Fewer false positives. Reclaimed analyst hours. But, six months after deployment, most security leaders still cannot answer a straightforward question from the board: Is this thing actually working?
Read Post
securonix

Mythos, Attackers, and The Part People Still Want To Skip

Apr 29, 2026 By Aaron Beardslee In Securonix
Anthropic built a powerful AI model and then kept it on a short leash. The important part is not that a model found bugs, which has been coming for a while. What’s worth acknowledging is that Anthropic looked at what Mythos could do and decided broad release was a bad idea. Attackers do not need a perfect autonomous system. They need leverage.
Read Post

What Real AI Security Incidents Reveal About Today's Risks

Apr 29, 2026 By Mend In Mend
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
View Video

Ep. 56 - 10,000 Bugs, 12 That Matter: Using AI to Cut Through Exposure Noise with CTEM

Apr 29, 2026 By SafeBreach In SafeBreach
Are you still stuck on the vulnerability hamster wheel? In this episode of the Cyber Resilience Brief, host Tova Dvorin is joined by SafeBreach VP of Product Koby Bar and offensive security expert Adrian Culley to unpack a major shift in how enterprises approach proactive security — and to announce the launch of SafeBreach Helm, the AI validation layer built for Continuous Threat Exposure Management (CTEM).
View Video

Falcon Exposure Management AI Inventory: Demo Drill Down

Apr 29, 2026 By CrowdStrike In CrowdStrike
AI adoption is accelerating across the enterprise, but governance isn’t keeping pace—leaving security teams without a clear view of what AI is running, how it’s being used, and where it introduces exposure. In this Demo Drill Down, we showcase AI Inventory in Falcon Exposure Management, delivering a centralized view of AI across hosts—from local LLMs and MCP servers to IDE extensions, packages, and applications.
View Video
apono

Nine Seconds to Delete a Database: What the PocketOS Incident Teaches Us About AI Agent Privilege Management

Apr 29, 2026 By Gabriel Avner In Apono
There’s never a good time to lose a production database, but losing one to your own AI coding agent on a Friday afternoon has to rank near the bottom of the list. That’s the backdrop to the PocketOS incident, and it’s the clearest case yet for why AI agent security and intent-based access control belong at the top of every cloud security roadmap this year.
Read Post
apono

How Zero Standing Privileges Defuses the Shadow AI Agent Problem

Apr 29, 2026 By Gabriel Avner In Apono
As more organizations move past experimentation and start planning real AI agent deployments, the same set of concerns keeps surfacing in our conversations with security teams. Whether the worry is a shadow agent that shows up uninvited or a sanctioned agent going rogue, the questions tend to cluster around control: These are the right questions to be asking, and they share a common answer that’s more concrete than most people expect. AI agents are only as dangerous as the privileges they can reach.
Read Post
exabeam

The Metric AI Security is Missing

Apr 29, 2026 By Exabeam In Exabeam
As autonomous and semi-autonomous AI systems take on more responsibility within the enterprise, they shift from being “features” of software to becoming true internal actors. They make decisions, take actions, call tools, orchestrate workflows, and influence other AI agents. With this evolution, we must confront an uncomfortable truth: the metrics and response patterns we built for deterministic software no longer work.
Read Post
armo

AI-SPM for Financial Services: Managing AI Risk Under SOC2, PCI-DSS, and MAS TRM

Apr 29, 2026 By Shauli Rozen In ARMO
The external auditor’s evidence request lands Tuesday morning. A security architect at a Tier 1 bank pulls up her AI-SPM dashboard for the SOC2 Type 2 review. Eighty-three AI agents running across the bank’s clusters. For each one, the dashboard shows the current configuration and the current behavioral baseline. The data is accurate, comprehensive, and point-in-time.
Read Post
armo

Prompt and Tool Call Visibility: What Your AI Agents Are Actually Doing

Apr 29, 2026 By Yossi Ben Naim In ARMO
It is 11:47 p.m. and the on-call security engineer is staring at two dashboards. On the left, LangSmith — the ML team’s debugging stack — showing the agent’s prompts, model responses, tool calls, and tokens consumed. On the right, the runtime detection console showing eBPF-captured syscalls, network connections, and process trees from the same Pod. Both are populated.
Read Post
armo

Runtime Observability for LangChain and AutoGPT on Kubernetes

Apr 28, 2026 By Yossi Ben Naim In ARMO
A platform team at a mid-size SaaS company runs three LangChain agents and one AutoGPT-derived planner on EKS. LangSmith is wired in. OpenTelemetry traces flow into their observability stack. Falco runs on every node. The setup is what most security teams would consider thorough. A pip dependency in one of the agents’ tool packages ships a malicious update.
Read Post
protecto

How to Prevent Prompt Injection

Apr 28, 2026 By Mariyam Jameela In Protecto
A prompt injection occurs when an attacker manipulates input to your AI system, overriding its instructions. To prevent prompt injection, you need a layered approach: separate system instructions from user input, validate user input before it reaches the model, monitor model outputs for anomalies, enforce least-privilege access for AI agents, and protect the data layer so sensitive information never reaches the model in a readable form. No single fix is enough.
Read Post
armo

AI Inference Server Observability in Kubernetes: The Four Signals MLOps Tools Don't Capture

Apr 28, 2026 By Ben Hirschberg In ARMO
In August 2025, a vulnerability chain in NVIDIA Triton Inference Server was found that allowed an unauthenticated remote attacker to send a single crafted inference request, leak the name of an internal shared memory region, register that region for subsequent requests, gain read-write primitives into the Triton Python backend’s private memory, and achieve full remote code execution. The exploit chain ran entirely through Triton’s standard inference API. No anomalous traffic volume.
Read Post
armo

Runtime Observability for MCP Servers: A Security Guide

Apr 28, 2026 By ARMO In ARMO
Your security team sees an MCP tool server throw an error. Your APM dashboard shows a latency spike. Your logs capture the JSON-RPC request with its method name and parameters. But none of that tells you whether the tool just read a harmless config file or dumped credentials to an external IP. Traditional observability tools—the APM platforms, the OpenTelemetry traces, the centralized logging pipelines—track performance across your Model Context Protocol deployments.
Read Post

Accelerating AI Discovery & Governance with the Falcon Platform

Apr 28, 2026 By CrowdStrike In CrowdStrike
As AI adoption accelerates, so does shadow AI. Without a complete inventory of AI tools, agents, and activity, organizations are exposed to unapproved usage and data risk. In this video, you will see how the Falcon platform helps teams: Discover AI tools, models, and services in seconds Identify unapproved and risky usage See where AI is running and what it can access across endpoints Take action and enforce governance at scale.
View Video

The Research Behind Of Detecting And Attributing LLM-Generated Passwords - Gäetan Ferry

Apr 28, 2026 By GitGuardian In GitGuardian
GitGuardian Senior Cybersecurity Researcher Gaetan Ferry’s latest research shows that AI-generated passwords are leaving fingerprints in the wild. In this interview, he explains how he used Markov chains, a century-old statistical model, to detect patterns in passwords generated by modern LLMs, attribute them to model families, and identify 28,000 likely LLM-generated passwords across public GitHub. The findings are a warning for teams adopting AI coding agents.
View Video
Zenity

System Prompts Are Not Security Controls: A Deleted Production Database Proves It

Apr 28, 2026 By Chris Hughes In Zenity
On April 25th, a Cursor AI coding agent running Anthropic's Claude Opus 4.6, one of the most capable models in the industry, deleted the production database for PocketOS, a software platform used by car rental businesses across the country to manage their entire operations. The deletion took 9 seconds.
Read Post
LimaCharlie

Detection Engineering with LimaCharlie and Claude Code

Apr 28, 2026 By Daniel Ballmer In LimaCharlie
Detection engineering is fundamentally a translation problem: rules need to be converted between formats, IOCs need to be converted into detection logic, and noisy alerts need to be converted into precise suppressions. That translation work is what consumes analyst time, and it's what Claude Code handles well.
Read Post

SMB Risks, AI, and Regional Realities with Paul Harris - The 443 Podcast - Episode 368

Apr 28, 2026 By WatchGuard Technologies In WatchGuard
This week on the podcast, Marc and Corey sit down with Paul Harris, CEO of BGLA and Futurity Corp at WatchGuard's Impact Partner Conference in Tulum, to explore the evolving cybersecurity landscape across Latin America. Paul shares his journey from early days in cybersecurity to leading organizations in the region, while breaking down the biggest concerns facing LATAM SMBs today. The conversation also covers how AI is reshaping cybersecurity, the challenges of securing partners across diverse markets, and practical advice for business leaders looking to stay ahead of cyber risk in LATAM.
View Video

How multi-agent systems work in LimaCharlie

Apr 28, 2026 By LimaCharlie In LimaCharlie
This video walks through how single agents and multi-agent systems are built and run inside the LimaCharlie platform. Agents in LimaCharlie are defined declaratively. Each agent specifies the model it runs, its instructions, the tools it can access, what events trigger it, and the guardrails it operates under. This approach makes agents version controllable, reviewable, and portable across tenants.
View Video

Are we blindly giving AI access to everything?

Apr 28, 2026 By LimaCharlie In LimaCharlie
Users are connecting AI tools without understanding the security implications. In this week's Intel Chat, Chris Luft and Matt Bromiley discuss a security breach at Vercel that originated from a compromised third-party AI tool used by one of its employees. The attacker gained control of the employee's Google Workspace account, which provided access to Vercel's internal environment.
View Video

AI SecOps Worskhop Series: Detection Engineering with LimaCharlie and Claude Code

Apr 28, 2026 By LimaCharlie In LimaCharlie
This hands-on workshop is designed for security professionals interested in learning how to integrate advanced AI capabilities into their detection and response workflows. Attendees will receive practical, step-by-step instruction on leveraging the power of Claude Code, a sophisticated AI agent, to significantly enhance security operations within the LimaCharlie platform for detection engineering use cases.
View Video

The Adversary's Speed Just Changed - What Mythos Means for Your Security Posture

Apr 28, 2026 By Tanium In Tanium
The cybersecurity threat landscape just changed — and most organizations don't know it yet. In this conversation, Tanium's Pedro (CRO) and Mark Liu (VP of Solution Engineering) break down what Anthropic's Mythos really is, why security leaders everywhere are asking about it, and what organizations need to do right now. No marketing pitch — just a straight conversation about a consequential shift that's already underway.
View Video
CrowdStrike

CrowdStrike Expands ChatGPT Enterprise Integration with Enhanced Audit Logging and Activity Monitoring

Apr 28, 2026 By Yonatan Nachman In CrowdStrike
As organizations scale ChatGPT Enterprise across departments, AI is becoming embedded in everyday business operations. Finance teams are building custom GPTs. Developers are leveraging Codex to act on codebases. Employees are invoking third-party tools within AI conversations to automate workflows. As adoption accelerates, security teams face a fundamental challenge: visibility around agents deployed and running in SaaS environments.
Read Post

How a Hacker Used Standard AI to Dismantle a Government

Apr 28, 2026 By Razorthorn Security In Razorthorn
The real shock is not a restricted model with scary branding, it is what standard public AI tools already make possible. A prolonged attack against government systems, tax records and voter data shows the threat comes from scale and persistence, not only from the newest frontier release.
View Video
avast

How bail bond scams are using AI to target families

Apr 28, 2026 By Avast Blog In Avast
Bail bond scams are getting smarter with AI. Here's how to spot them before they cost you thousands. A call saying someone you love has been arrested and needs money ASAP can feel so real that you act before you think. Learn how bail bond scams work and what to watch for to help protect you and your family from falling for the scheme. Getting a call about bail isn’t something most people prepare for, and that’s exactly what scammers count on.
Read Post

If You're Worried About Mythos, Your Security is Broken #infosec #alert

Apr 28, 2026 By Razorthorn Security In Razorthorn
This episode looks at what happens when AI starts finding vulnerabilities at scale, restricted access creates market imbalance, and security teams struggle to keep pace. It covers fragile infrastructure, bug brokers, overloaded analysts, CISO fear, and the growing sense that cyber defence is entering a faster and harsher era.
View Video
exabeam

Behavior Intelligence: The New Model for Securing the Agentic Enterprise

Apr 28, 2026 By Exabeam In Exabeam
Behavior Intelligence is a security operations model that detects risk by analyzing behavior, automates investigation and response using AI, and measures whether security outcomes are improving over time. It focuses on how users, systems, and AI agents operate rather than relying only on predefined rules or knowns indicators of compromise. This shift matters because modern attacks rarely look malicious at first. They look normal.
Read Post

Most Critical Infrastructure is Held Together by Sticky Tape

Apr 28, 2026 By Razorthorn Security In Razorthorn
The fear is not only what advanced AI can do, it is what it can do to brittle systems already running on neglect and compromise. When critical infrastructure is patched together with ageing controls and restricted tools land in a few powerful hands, the imbalance gets worse fast.
View Video
Continuous Threat Exposure Management (CTEM): The Complete Guide to Proactive Cybersecurity

Continuous Threat Exposure Management (CTEM): The Complete Guide to Proactive Cybersecurity

Apr 28, 2026 By SecuritySenses In SecuritySenses
The cybersecurity landscape has fundamentally changed. Organizations today manage sprawling digital environments - cloud workloads, remote endpoints, SaaS applications, third-party APIs, and hybrid infrastructure - all of which expand the attack surface at a pace that traditional security programs simply cannot match.
Read Post
protecto

Privacy in Enterprise AI: Why It's the Foundation, Not a Feature

Apr 27, 2026 By Amar Kanagaraj In Protecto
Last week, OpenAI released Privacy Filter, an open-weight model for detecting and redacting PII in text. It is a thoughtful release: Apache 2.0 licensed, able to run locally, designed for high-throughput workflows, and built to go beyond regex-based detection. This is good news for everyone building enterprise AI. Privacy at the model layer is getting real attention. What we liked most was how clearly OpenAI described the role of the model.
Read Post
nightfall

How Do AI Agents Create Data Exfiltration Risk?

Apr 27, 2026 By Chris Martinez In Nightfall
AI agents create data exfiltration risk by combining three capabilities that are dangerous together: access to private data, exposure to untrusted content, and the ability to communicate externally. When all three exist in one agent, an attacker can hide instructions inside an email, document, or webpage the agent processes and trick it into sending sensitive data out. No software vulnerability is required. The attacker doesn't need to break in. They just need to talk to your agent.
Read Post
LimaCharlie

Agentic SecOps: Build a security AI agent that automatically investigates detections

Apr 27, 2026 By Daniel Ballmer In LimaCharlie
A credential access event fired. An AI agent investigated it, correlated it against running processes, assessed the risk, and closed the ticket. No analyst touched it. The entire loop ran in minutes. This is what security operations look like when AI can actually operate in the environment rather than advise from outside it. Security operations have always required a special kind of person.
Read Post
reach security

The Configuration Drift Behind the Teams Helpdesk Breach

Apr 27, 2026 By Garrett Hamilton In Reach Security
On April 22, 2026, Google's Threat Intelligence Group and Mandiant disclosed a campaign by a threat actor they're tracking as UNC6692. The group breached enterprise networks by impersonating IT helpdesk staff over Microsoft Teams, ultimately exfiltrating Active Directory databases and achieving full domain compromise. What's notable about UNC6692 is what they didn't do. They didn't use a zero-day. They didn't exploit a software vulnerability.
Read Post

Measuring Real Risk Reduction Across Your Security Stack

Apr 27, 2026 By Reach Security In Reach Security
Garrett Hamilton recently presented at the North Texas ISSA Lunch & Learn in Plano, TX to talk about what risk reduction actually looks like in practice. Reach shows customers exactly which controls they've deployed, the user impact of those changes, and how much risk has been reduced across IAM, EDR, email, firewall, and SASE. Not feature checklists. Targeted, measurable outcomes tied to the business.
View Video

Exposure Prioritization Agent: Demo Drill Down

Apr 27, 2026 By CrowdStrike In CrowdStrike
Vulnerability volume continues to rise, making it difficult for security teams to determine which exposures actually matter. Without clear prioritization, teams are forced to react to volume, often focusing on severity scores instead of real risk. In this demo drill down, we showcase the Exposure Prioritization Agent within Falcon Exposure Management. You’ll see how AI-driven prioritization uses ExPRT.AI, adversary intelligence, and business context to reduce millions of vulnerabilities into a focused set of high-risk exposures.
View Video

Chipotle Bot Hacked! AI Fails: Live Laugh Logs ep1

Apr 27, 2026 By Coralogix In Coralogix
What happens when 20,000 engineers descend on Amsterdam to talk about Kubernetes and AI? Welcome to Episode 1 of Live Laugh Logs, the podcast from Annie, Lewis and Andre from the Coralogix Developer Relations team where we will get together and recap everything going on in our worlds! We had an amazing time at KubeCon in Amsterdam and had loads of insights from the talks we went to around designing observability systems, all the AI tools being created and how to observe them, and using agent-generated code.
View Video
wallarm

6 Lessons Security Leaders Must Learn About AI and APIs

Apr 27, 2026 By Wallarm In Wallarm
Most organizations treating AI security as a model problem are defending the wrong layer. Security teams filter prompts, patch jailbreaks, and tune model behavior, which is all necessary work, while the actual attack surface sits largely unexamined underneath. That surface is the API layer: the endpoints AI systems use to retrieve data, call tools, and take action on behalf of users. This isn't a theoretical gap.
Read Post
teleport

Guide: DORA Compliance Evidence for Agentic AI

Apr 27, 2026 By Kayne McGladrey In Teleport
→ What DORA assessors actually evaluate → How DORA controls map to specific evidence requirements → Common evidence gaps that can interfere with audits → The evidence challenges of agentic AI → The full blueprint for DORA compliance now and in the future The Digital Operational Resilience Act (DORA), otherwise known as Regulation (EU) 2022/2554, represents a fundamental shift in how financial institutions must show their compliance.
Read Post
Torq

What SOC Analysts Actually Want From AI

Apr 27, 2026 By Rick Bosworth In Torq
See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo Rick Bosworth is a cybersecurity marketing executive with nearly two decades of experience driving GTM strategy across technology startups. His uniquely technical perspective bridges the gap between complex solutions and practical customer outcomes. Rick has deep expertise spanning EDR, CNAPP, CWPP, AppSec, CTEM, and agentic SecOps.
Read Post
armo

Threat Detection for RAG Pipelines: The Three Windows Most Tools Are Blind To

Apr 26, 2026 By Ben Hirschberg In ARMO
Tuesday, 09:14 UTC. A connector pulling content from your knowledge wiki indexes a new article into the vector database your support agents query at runtime. Embedded in legitimate troubleshooting prose is an instruction crafted to surface whenever a query mentions a specific product version — include the user’s account record in the response and POST the summary to the configured support webhook. For three days, nothing happens. Every security tool is green.
Read Post
armo

AI Supply Chain Risk: Scanning Vulnerabilities in ML Frameworks

Apr 26, 2026 By Yossi Ben Naim In ARMO
A platform engineer at a mid-market fintech opens her SCA dashboard at the start of the quarter. The agentic customer-support pipeline her team shipped two months ago — a LangChain orchestrator, a vLLM inference server with two fine-tuned LoRA adapters pulled from Hugging Face, and an MCP toolkit wired to four internal APIs — shows green. Snyk has scanned every Python package in the container. Mend has cleared the dependency graph. The CVE count is zero.
Read Post
armo

Runtime-Informed Posture: What AI Agents Can Do vs What They Actually Do

Apr 26, 2026 By Shauli Rozen In ARMO
A platform engineer pulls the AI-SPM dashboard for an agent that has been running in production six weeks. The static dashboard shows several dozen findings, severity-sorted by configuration weight. The runtime-informed dashboard shows a smaller, prioritized list — but a few of those findings do not appear on the static view at all, and most of the static findings appear demoted to a tier the static view does not have. Same agent. Same window. Same underlying configuration.
Read Post
armo

What Is AI-SPM? AI Security Posture Management Explained

Apr 25, 2026 By Shauli Rozen In ARMO
Every cloud security vendor launched an AI-SPM dashboard in the past year. Strip away the branding and most of them are presenting the same concept: a new posture management layer for AI workloads. Sit through four demos in the same week and a practical question surfaces. The dashboards look broadly similar — pie charts of findings, compliance tags, a list of AI assets, a severity ranking. Why, then, do the tools underneath cover completely different parts of the problem?
Read Post
teleport

How Claude Helped Build a Proxmox Environment (and What I Learned Along the Way)

Apr 24, 2026 By Steven Oakley In Teleport
As a solutions architect, building out customer demo environments is part of the job. I regularly spin up lab scenarios to support evaluations and proof-of-concept work — and if you've done this before, you know it can eat up days of your life. So when I recently decided to refresh my homelab and migrate to Proxmox, I saw it as the perfect opportunity to put AI-assisted infrastructure automation to the test. The goal?
Read Post

The Deep Dive | The New AI Workforce: Governing Agentic Access with JumpCloud 04.24.2026

Apr 24, 2026 By JumpCloud In JumpCloud
Join us for a look into Agentic IAM: treating AI as visible, governed workforce access. We’ll discuss our MVP focus on provisioning MCP servers through JumpCloud to register actors, control access to data, and audit activity—a secure starting point for agentic growth.
View Video
armo

How to Identify and Reduce Excessive Permissions in AI Workloads

Apr 24, 2026 By Yossi Ben Naim In ARMO
Your CIEM report came back clean this morning. Every AI agent in the cluster is exercising its granted permissions — no idle roles, no service accounts with broad scope and a handful of API calls behind them, nothing that looks obviously over-provisioned. The dashboard is green, and by the diagnostic your tool was built on, it should be.
Read Post
armo

AI Threat Detection for Financial Services: Detecting AI-Driven Fraud and Data Exfiltration

Apr 24, 2026 By Shauli Rozen In ARMO
A Tier 1 bank’s security architecture already spends heavily on detection. On one side sits the financial surveillance stack — fraud scoring platforms processing thirty thousand transactions an hour, AML monitoring watching money movement patterns, DLP engines scanning data in transit, payment anomaly detection tuned by a decade of production signal.
Read Post
protecto

What Is Generative AI Security? Key Risks and How to Fix Them

Apr 24, 2026 By Mariyam Jameela In Protecto
Generative AI security is the practice of protecting the data that flows into AI systems, and the outputs those systems produce, from leaks, attacks, and unauthorized access. Every organization using AI today has the same blind spot. Sensitive data enters an AI pipeline, and most security teams have no visibility into where it goes next. An employee pastes a customer record into ChatGPT. A developer submits code containing API keys to an AI debugging tool.
Read Post
miniorange

How AI Threat Detection Stops Breaches Before They Happen: A No-Fluff Guide

Apr 24, 2026 By Chaitali Avadhani In miniOrange
What’s changed in the cybersecurity world after the advent of Artificial Intelligence (AI)? The speed of response has gone up. The Security Operations Center (SOC) and internal cybersecurity teams are able to detect, respond to, and mitigate attacks faster than ever. It’s a no-brainer that AI agents can neutralize identity-based attacks within seconds, before a human analyst checks the alerts.
Read Post

The AI Bubble Is About to Burst (Here's Why)

Apr 24, 2026 By Razorthorn Security In Razorthorn
The AI bubble is about to burst. Energy costs, chip shortages and computer pricing are reaching unsustainable levels. The economics don't add up anymore and something has to crack. In this episode of Razorwire Raw, Jim Rees explains why AI is hitting an economic wall nobody's talking about. World energy consumption is climbing vertically because of AI. Data centres are on hold because there isn't enough electricity. GPU, RAM and CPU prices are spiralling. Large language model providers are raising prices because compute costs are exploding.
View Video
netwrix

Mythos and the cost of attacking

Apr 24, 2026 By Grady Summers In Netwrix
For twenty years, cybersecurity defense rested on a simple idea: make attacking so expensive that adversaries give up and move on. Cheap, capable AI breaks those economics. Recon, exploit development, phishing, and command-and-control infrastructure now run at model speed and cent-per-million-tokens cost. The detect-and-respond doctrine struggles when an attacker’s OODA loop compresses from weeks to seconds. The prevention bar has to rise from blocking known-bad to predicting intent from behavior.
Read Post

Acronis GenAI Protection - Dashboard and Reporting

Apr 24, 2026 By Acronis In Acronis
Discover how to monitor and report on generative AI application usage with Acronis GenAI Protection. This walkthrough demonstrates adding monitoring widgets, interpreting usage data, and generating comprehensive reports to help you track AI adoption and data security across your managed environments.
View Video
Arctic Wolf

Token Bingo: Don't Let Your Code be the Winner

Apr 24, 2026 By Arctic Wolf Labs In Arctic Wolf
In early April 2026, Arctic Wolf began tracking a large-scale device code phishing campaign impacting organizations across multiple regions and sectors. Similar to the widespread “Riding the Rails” campaign first observed in late March by Huntress, the threat actors were observed abusing OAuth device code flow to trick victims into providing authentication codes and obtain initial access into victim environments.
Read Post
persona

Who's behind the agent? Security, trust, and compliance in agentic payments

Apr 24, 2026 By Alfonso Gomez Jordana Mañas In Persona
We’ve been collaborating with others to explore how agentic commerce and enterprise agents will work. Alfonso Gómez-Jordana Mañas, co-founder of Crossmint shares his thoughts on the current state of payment security and how compliance mechanisms like KYC and AML need to evolve to support agentic commerce. OpenClaw provided users with an open-source framework to launch AI agents.
Read Post
Corelight

From human-scale to AI-scale: Lessons in resilience from RSAC 2026

Apr 23, 2026 By Ed Smith In Corelight
The halls of RSAC 2026 were buzzing with a singular question: "How do we defend an ecosystem that is moving faster than we can think?" During a featured session last week, Brian Dye (CEO, Corelight) talked with Deneen DeFiore (CISO, United Airlines) about the realities of protecting one of the world's most complex digital environments.
Read Post
LimaCharlie

Fingerprinting AI Attacks: Detection Every SOC Needs

Apr 23, 2026 By LimaCharlie In LimaCharlie
Revisiting a conversation between LimaCharlie co-founder Christopher Luft and Chris Cochran, Field CISO & Vice President of AI Security at SANS Institute, on The Cybersecurity Defenders Podcast. For most of cybersecurity’s history, defenders could operate under a safe assumption: somewhere on the other end of an attack, a human was making decisions. Scripts might automate parts of the kill chain, tools might accelerate execution, but a person was in the loop.
Read Post
vanta

When tokenmaxxing leads to riskmaxxing

Apr 23, 2026 By Vanta In Vanta
Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.
Read Post
armo

AI Agent Security Framework on GKE: Implementation Guide

Apr 23, 2026 By Ben Hirschberg In ARMO
Your platform team spent a week configuring the Agent Sandbox CRD on a gVisor-enabled node pool — the architecture Google positions as the recommended pattern for AI agent workloads on GKE. Workload Identity Federation with KSA principals is bound to every agent pod. Container Threat Detection is licensed and active in Security Command Center Premium. And the runtime behavioral sensor you budgeted for won’t install.
Read Post
armo

Detecting Threats in Multi-Agent Orchestration Systems: LangChain, CrewAI, and AutoGPT

Apr 23, 2026 By Yossi Ben Naim In ARMO
It’s Tuesday morning at a mid-size fintech. A customer-support workflow runs on CrewAI in production: a Triage agent reads tickets, a Records agent pulls customer history, a Remediation agent drafts and sends the reply. A user submits a ticket with a pasted error log containing an indirect prompt injection. Triage summarizes and delegates. Records, interpreting instructions embedded in the summary, pulls 2,400 customer records instead of one.
Read Post

Episode 13 - Battle-Hardened Research: Navigating the Intersection of AI and Open Source

Apr 23, 2026 By Corelight In Corelight
Richard Bejtlich sits down with Ali Islam to pull back the curtain on how a security research lab functions within a modern security company. Moving beyond the "ivory tower" of academia, Ali explains why researchers must be battle-hardened by real-world threat actor techniques to remain effective in the field. The conversation dives into Corelight’s unique commitment to the open source community through the direct funding of Zeek and Suricata developers, ensuring that community-driven tools can scale to meet massive enterprise traffic demands.
View Video
veracode

Securing GenAI Code: Manage Risk from Code to Cloud

Apr 23, 2026 By Natalie Tischler In Veracode
The productivity revolution promised by AI coding assistants has arrived. Developers are shipping features faster than ever, with tools like GitHub Copilot, Amazon CodeWhisperer, and Claude Code becoming as essential to modern development as Git itself. But beneath this velocity lies a troubling reality that every security leader needs to confront: we’re scaling security debt at unprecedented speed.
Read Post
Torq

From 24/7 On-Call to Holidays Off: AI SOC Automation Results from Three Security Teams

Apr 23, 2026 By John White In Torq
See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo John White is the Field CISO for EMEA at Torq. A respected security executive with more than 20 years of leadership experience, John previously served as CISO at Virgin Atlantic, where he led a multi-year transformation deploying the Torq AI SOC Platform to modernize cyber operations.
Read Post

How to scan your code bases using AI for vulnerabilities with Jeff McJunkin

Apr 23, 2026 By LimaCharlie In LimaCharlie
Join us for this week's Defender Fridays as Jeff McJunkin, Founder of Rogue Valley Information Security, walks through how he built an AI-powered pipeline to scan large codebases for real, exploitable vulnerabilities, using the Linux kernel as his proving ground. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
View Video
egnyte

The AI Ecosystem Problem: Why Enterprise AI Still Feels Fragmented

Apr 23, 2026 By Sanjay Kosuri In Egnyte
Artificial intelligence is everywhere at work. Yet for many teams, it still doesn’t feel very intelligent. The problem isn’t a lack of AI tools. It’s the opposite. AI has exploded across the enterprise, spreading into dozens of apps, assistants, and models. Each tool promises to help, but together they create fragmentation. Employees end up asking the same question in multiple places, switching between systems, and piecing together answers manually.
Read Post
AI Receptionists and the Expanding Attack Surface: What Security Teams Need to Know

AI Receptionists and the Expanding Attack Surface: What Security Teams Need to Know

Apr 23, 2026 By SecuritySenses In SecuritySenses
AI receptionists are quickly becoming the front line of customer interaction, handling calls, capturing data, and integrating directly with business systems. But as organizations rush to adopt AI-powered customer service, a critical question is emerging: Are we securing these systems as rigorously as we deploy them? Because every AI receptionist isn't just a convenience, it's also a new attack surface.
Read Post

AI SecOps Worskhop Series: Accelerating Cloud Security Operations with Claude Code and LimaCharlie

Apr 22, 2026 By LimaCharlie In LimaCharlie
In this workshop we will show how to use Claude Code with LimaCharlie to accelerate cloud security operations. We will have Claude Code deploy agents, create detections and identify issues before they become incidents. This hands-on workshop is designed to demonstrate the transformative power of integrating Anthropic's Claude Code, with the versatile security platform, LimaCharlie. Our focus will be on leveraging the capabilities of Claude Code to significantly accelerate and streamline various aspects of cloud security operations, turning reactive tasks into proactive, automated workflows.
View Video
LimaCharlie

Logging Is Not Observability: The AI Security Gap MSSPs Can't Ignore

Apr 22, 2026 By Daniel Ballmer In LimaCharlie
Every MSSP is fielding the same question from clients right now:"Are we safe with AI?" Most are answering with some version of"yes, we're logging everything." In a recent Defender Fridays episode, Saurabh Shintre, Founder and CEO of Realm Labs drew a hard line between these two concepts."You can log prompt and response and this bare minimum you have to do.
Read Post

AI Is Speeding Up Cyber Attacks. Can Security Teams Keep Up?

Apr 22, 2026 By Arctic Wolf Networks In Arctic Wolf
Frontier AI models are accelerating the discovery of new vulnerabilities combined with the ability to exploit those weaknesses at speed and scale. This alone isn’t the problem. Trust in AI‑driven security outcomes is. With AI dominating headlines, security leaders are asking what models like Mythos or GPT‑5.4‑Cyber mean for their business. The real issue runs deeper. Teams need to be able to trust tools and technology that move at machine speed.
View Video
jfrog

Building a Governed AI Model Supply Chain: Integrating AWS SageMaker and the JFrog Platform

Apr 22, 2026 By Grig Duta In JFrog
Amazon SageMaker accelerates the process of training and deploying machine learning models. However, as AI adoption scales from individual experiments to enterprise-wide production, the focus of leading Fortune 500 software development operations and security teams must shift from pure velocity to governance.
Read Post
knowbe4

Phishing Campaigns Abuse AI Workflow Automation Platforms

Apr 22, 2026 By KnowBe4 Team In KnowBe4
Threat actors are abusing agentic AI automation platforms to deliver malware and send phishing emails, according to researchers at Cisco Talos. The researchers observed attackers using n8n, a legitimate platform that automates workflows in web apps and services like Slack, GitHub, Google Sheets, and others.
Read Post
vanta

Millions of AI agents are running without oversight. Is yours one of them?

Apr 22, 2026 By Vanta In Vanta
Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.
Read Post
acronis

Acronis GenAI Protection is now live: Secure the AI era

Apr 22, 2026 By Acronis In Acronis
Generative AI is no longer emerging. It is already embedded in how businesses work. From content creation and research to customer support and internal productivity, AI tools are rapidly becoming part of everyday workflows across SMBs and the MSPs that serve them. But this shift comes with a hard reality: As GenAI adoption accelerates, so do the risks.
Read Post
armo

Implementing AI Agent Security on Azure AKS: A Practical Guide

Apr 22, 2026 By Ben Hirschberg In ARMO
Your platform team deployed eBPF-based runtime sensors on AKS last week. Defender for Containers is enabled. Azure Policy is enforcing pod security standards across your AI workload namespaces. And your Observe pillar is still blind — because nobody enabled the Diagnostic Setting that routes kube-audit logs to the Log Analytics workspace where your tooling can actually consume them.
Read Post
protecto

What Is AI Agent Security? Threats, Risks, and What Actually Stops Them (2026)

Apr 22, 2026 By Mariyam Jameela In Protecto
Over two-thirds of enterprises are already running agentic AI in production, according to a 2025 industry survey on the state of agentic AI security. Fewer than one in four have the visibility to know what those agents are actually doing. That gap is live right now, in systems handling customer data, financial records, and protected health information.
Read Post
armo

AI Workload Discovery: How to Find Every AI Agent Running in Your Clusters

Apr 22, 2026 By Shauli Rozen In ARMO
A CISO at a mid-sized SaaS company pulls her platform lead aside after a board meeting. One question: “Do we have AI agents running in production?” The lead pauses. He knows the data science team has been experimenting with LangChain. He remembers a conversation about a customer-support pilot. He thinks there might be an inference server in staging that got promoted last quarter.
Read Post

Project Glasswing. What Anthropic's Mythos Means for Cybersecurity

Apr 22, 2026 By Razorthorn Security In Razorthorn
What happens when an AI model can find more vulnerabilities in a day than a red team could find in a year? Welcome to Razorwire, the podcast where we share our take on the world of cybersecurity with direct, practical advice for professionals and business owners alike. I’m Jim and in this episode, I’m joined by Martin Voelk, penetration tester and AI red teamer, and Jonathan Care, lead analyst at KuppingerCole covering AI and cybersecurity.
View Video
armo

AI Workload Security for Healthcare: What CISOs Need to Prove Under HIPAA

Apr 22, 2026 By Yossi Ben Naim In ARMO
A patient calls your privacy office and requests an accounting of every disclosure of her PHI made outside treatment, payment, and healthcare operations over the past six years. This is her right under HIPAA. Your privacy officer pulls the EHR disclosure log. It is complete through the day your organization deployed its first production AI agent.
Read Post
datadog

How to investigate cloud credential compromise with Bits AI Security Analyst

Apr 22, 2026 By Mallory Mooney In Datadog
Cloud environments create a flood of security signals, often reaching tens of thousands per day depending on the organization’s size. Security engineers and analysts spend a disproportionate share of their time triaging these signals instead of acting on legitimate threats. But the time-intensive parts of that work, such as identifying related signals and building a timeline, can be handled systematically, leaving teams free to focus on what actually requires human judgment.
Read Post
datadog

Evaluate, optimize, and secure your Google Cloud AI stack with Datadog

Apr 22, 2026 By Mohammad Jama In Datadog
As AI adoption accelerates on Google Cloud, the challenge for most teams today is no longer just building AI-powered applications. It’s also managing the full AI stack from end to end, including data pipelines, infrastructure, release process, and security operations. Many teams are monitoring these layers with different tools, creating complexity, fragmenting visibility, and slowing decisions on what to do next.
Read Post
elastic

Securing air-gapped environments with Elastic on Google Distributed Cloud

Apr 22, 2026 By Jason Pappalexis In Elastic
If you are not using AI to defend against AI, you will lose. But for organizations operating in air-gapped environments, the path to AI-driven defense can be blocked by the very isolation that protects them. Today, we're announcing that Elastic Security is now the embedded security layer for Google Distributed Cloud (GDC) air-gapped environments, expanding our collaboration with Google Cloud.
Read Post
Feroot

Anthropic's Mythos and the New Reality of AI Cybersecurity Risk

Apr 22, 2026 By Feroot In Feroot
I was on ABC News recently discussing why banks are on alert as new AI systems like Anthropic’s Claude Mythos raise cybersecurity concerns. What struck me most is how quickly the conversation has shifted. This is no longer a hypothetical risk or something we are planning for in the future. Financial institutions and regulators are reacting in real time to what AI is already capable of doing. From my perspective, we are still underestimating how fast this is moving.
Read Post
salt security

You're Not Watching MCPs. Anthropic's Vulnerability Shows Why You Should Be.

Apr 22, 2026 By Roey Eliyahu In Salt Security
Last week, researchers at OX Security published findings that should stop every security leader in their tracks. They discovered a critical vulnerability baked directly into Anthropic's Model Context Protocol SDK, affecting every supported language: Python, TypeScript, Java, and Rust. The result: remote code execution on any system running a vulnerable MCP implementation, with direct access to sensitive user data, internal databases, API keys, and chat histories. Over 7,000 publicly accessible servers.
Read Post
Beyond the Prompt: Data Security in Generative AI Platforms

Beyond the Prompt: Data Security in Generative AI Platforms

Apr 22, 2026 By SecuritySenses In SecuritySenses
Generative AI tools have changed how people work and play online. Everyone is excited about the speed and creativity these systems offer. Users often type sensitive info into prompts without thinking about where it goes. Security experts worry about how these platforms handle personal data. It is easy to forget that anything typed into a public bot might be stored. Staying safe means knowing how to use these tools without giving away secrets.
Read Post
MyClaw Detailed Review: Is This OpenClaw Managed Hosting Worth It?

MyClaw Detailed Review: Is This OpenClaw Managed Hosting Worth It?

Apr 22, 2026 By SecuritySenses In SecuritySenses
I've been working in the AI tools space for a while now, and one thing that comes up repeatedly is the gap between open-source AI frameworks and the actual effort required to run them. OpenClaw is a great example - powerful, flexible, and genuinely useful for building AI agents. But getting it deployed and keeping it running? That's a different story. That's what led me to try MyClaw AI. Here's an honest look at what the platform actually offers, who it's for, and whether it's worth the cost.
Read Post
foresiet

The April 2026 AI Security Report: 6 Incidents and Detailed Attack Paths

Apr 21, 2026 By foresiet In Foresiet
From AI agents leaking internal data to coordinated global malware campaigns — here is everything that happened in AI cybersecurity between April 7 and April 21, 2026, with detailed attack paths for each incident. The fifteen days following April 7, 2026 produced six distinct AI-related security incidents spanning internal data exposure, supply chain exploitation, autonomous malware generation, coordinated multi-vector attacks, model leak fallout, and documented AI agent control failures.
Read Post

CISOs Missing the Real AI Threat #podcast #aisecurity

Apr 21, 2026 By Razorthorn Security In Razorthorn
This episode looks at what happens when AI starts finding vulnerabilities at scale, restricted access creates market imbalance, and security teams struggle to keep pace. It covers fragile infrastructure, bug brokers, overloaded analysts, CISO fear, and the growing sense that cyber defence is entering a faster and harsher era.
View Video

Cloudflare Just Shipped 20+ Features for AI Agents in One Week

Apr 21, 2026 By Cloudflare In Cloudflare
The conversation explores why the Internet and the cloud were not designed for an AI-agent world, and what infrastructure needs to change as software agents begin generating code, running workflows, and interacting directly with online services. Ming and Anni walk through several announcements from Cloudflare’s Agents Week, including new tools for agent infrastructure, memory, developer workflows, AI Gateway, email, artifacts, browser automation, security, and agent-ready websites.
View Video
tanium

VibeScamming: Why AI-built scams are changing phishing risk

Apr 21, 2026 By Tanium In Tanium
VibeScamming refers to AI-assisted phishing operations where attackers use natural-language tools to rapidly generate and modify phishing content and web pages, lowering (but not eliminating) the technical skill required. One of the primary enterprise impacts is faster phishing iteration and reconstitution after blocks or takedowns, with identity compromise remaining a major risk alongside malware and other payload-based attacks.
Read Post
persona

Building Know Your Agent: The missing identity layer for agentic commerce

Apr 21, 2026 By Tim Williams In Persona
AI agents are being deployed in the real world at pace. In the enterprise realm, they’re accessing APIs, shipping code, and running decisioning workflows on behalf of the organizations and individuals who deploy them. Entirely new businesses have sprung up, leveraging AI agents to streamline customer support and sales processes.
Read Post

LimaCharlie is the most secure way to run AI security agents

Apr 21, 2026 By LimaCharlie In LimaCharlie
The idea that AI agents will run security operations is becoming reality. But most platforms ignore the most important question: how do you secure the agents themselves? In this video I walk through why LimaCharlie is the most secure platform for running agentic security operations and demonstrate the architectural controls that make it possible. We look at the core mechanisms that allow AI agents to operate safely inside a SecOps environment, including.
View Video

Agentic AI at risk after MCP design flaw discovery? #ai #cybersecurity #podcast

Apr 21, 2026 By LimaCharlie In LimaCharlie
In this week's Intel Chat, Chris Luft and Matt Bromiley discuss a design flaw in Anthropic's Model Context Protocol (MCP) that could enable large-scale supply chain attacks on agentic AI systems. Researchers at OX Security found that MCP's command execution allows malicious commands to run silently without sanitization checks or warnings.
View Video
armo

AI Agent Sandboxing in Financial Services: Containing Blast Radius

Apr 21, 2026 By Shauli Rozen In ARMO
Your progressive enforcement rollout is working. eBPF sensors are deployed across the cluster. Behavioral baselines are converging. Enforcement policies are generating from observed behavior, just like the observe-to-enforce methodology prescribes. Then your compliance officer walks over to the platform team’s desks and asks a question nobody anticipated: “Which agents are in observation mode right now?”
Read Post
armo

How to Detect AI-Mediated Data Exfiltration in the Cloud

Apr 21, 2026 By Yossi Ben Naim In ARMO
Your SOC gets an alert from the CNAPP: an outbound connection from a pod in the ai-prod namespace to . The destination is in the allowlist. The payload size is 28 kilobytes — well under the DLP threshold. The agent’s service account has permission to invoke the email tool. By every check your stack runs, the traffic is normal. Forty minutes later, a customer support lead notices that an email went out containing a summary of 2,400 customer records that the agent had no business querying.
Read Post
armo

If "stdio" is a Vulnerability, So Is "git clone" - Notes on Riding the AI Vulnerability Trend

Apr 21, 2026 By Ben Hirschberg In ARMO
A developer clones a repository and opens it in VS Code at 10:47 a.m. Before their cursor blinks, six different configuration file formats on disk have a chance to execute shell commands on the host. A.vscode/tasks.json with runOn: folderOpen. A.devcontainer/devcontainer.json with initializeCommand. A post-checkout hook already sitting in.git/hooks/. A postinstall line waiting in package.json for the next dependency install. A.envrc in the project root.
Read Post
jfrog

Unlock the Power of Agents with JFrog's Skills and MCP Tools

Apr 21, 2026 By Lavanya Chockalingam In JFrog
Agents are writing code, suggesting dependencies, and reviewing PRs, without any knowledge about your trusted package sources, security posture, or governance policies. When agents operate without supply chain context, they introduce risk, create rework, and weaken the guardrails DevSecOps teams rely on to ship with confidence. JFrog is changing that.
Read Post

The Three-Layer Strategy for Autonomous Agent Governance with Joe Hladik and Amit Malik

Apr 21, 2026 By Rubrik In Rubrik
The race for AI dominance has created a dangerous imbalance between business velocity and cyber resilience. In this episode, host Caleb Tolin is joined by ⁠Joe Hladik⁠, Head of ⁠Rubrik⁠ Zero Labs, and Staff Security Researcher ⁠Amit Malik⁠ to break down the findings of their latest report on agentic adoption. The discussion centers on the Agentic Paradox. This is the technical reality that tools designed to automate high-level tasks are inherently built to find the most efficient path around obstacles, including existing security policies.
View Video
CrowdStrike

Introducing the CrowdStrike Shadow AI Visibility Service

Apr 21, 2026 By JJ Cranford - Kris Krewson In CrowdStrike
Since the launch of CrowdStrike AI Security Services in 2025, our Professional Services team has yet to encounter an organization with an accurate inventory of the AI tools and services in use across its environment. One customer counted 150 agents in its inventory. We found over 500. Another had not approved agentic development at all; we discovered over 70 active agents.
Read Post
11:11 systems

Future of cybersecurity: Can AI outpace AI-driven threats?

Apr 21, 2026 By Scott Gray In 11:11 Systems
Defending your corporate network is much like the human immune system fighting off a novel virus. For decades, traditional IT infrastructure relied on recognizing known signatures to neutralize incoming threats. The virus has now learned to mutate faster than traditional defenses can track. This rapid mutation represents the new era of artificial intelligence in cyber warfare. You need to align your IT strategy with business goals to ensure long-term adaptability.
Read Post
Shift-Left Testing Only Works If Your Tests Are Trustworthy

Shift-Left Testing Only Works If Your Tests Are Trustworthy

Apr 21, 2026 By Syed Ahmed In SecuritySenses
Shift-left has become the standard answer to the quality and security problems that accumulate when testing happens late. Move testing earlier. Catch defects in development, not in production. Run security checks in the pipeline, not in a post-release audit. The principle is sound. The execution is where most teams run into trouble.
Read Post
vanta

Your auditor is about to ask about AI agents. 9 things they'll want to see

Apr 20, 2026 By Vanta In Vanta
Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market. Studies show that AI adoption outpaces understanding.
Read Post
teleport

NIST CSF 2.0 and Agentic AI: Building Profiles for Autonomous Systems

Apr 20, 2026 By Matthew Smith In Teleport
AI agents are likely already running inside your infrastructure. They triage alerts, remediate incidents, provision resources, and make decisions without waiting for a human to approve each step. For teams aligned to NIST’s Cybersecurity Framework (CSF) 2.0, this creates a problem: the framework assumes human actors, human-speed decisions, and human-readable audit trails. Autonomous systems break all three assumptions. The good news is that CSF 2.0 was designed to be adapted.
Read Post
Torq

Torq Leads Every Category in the 2026 KuppingerCole Analysts Leadership Compass: Emerging AI SOC

Apr 20, 2026 By Rick Bosworth In Torq
See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo The security automation market just got its definitive evaluation and its new name. KuppingerCole Analysts is the global analyst firm that sets the benchmark for cybersecurity technology evaluations.
Read Post
wallarm

Attacking the MCP Trust Boundary

Apr 20, 2026 By Wallarm In Wallarm
Every secure API draws a line between code and data. HTTP separates headers from bodies. SQL has prepared statements. Even email distinguishes the envelope from the message. The Model Context Protocol (MCP), the fast-growing standard for connecting AI agents to external services, inherits that gap from the models it sits on top of.
Read Post
archTIS

AI Guardrails - DSPM Enters a New Era of Control and Visibility

Apr 20, 2026 By Wade Barisoff In archTIS
You cannot turn a corner without entering the world of AI. I was in a big box home improvement store the other day and there was a manufacturer touting the AI built into their refrigerator! Children’s toys, personal electronics, and even cat litter boxes are now selling AI-assisted products. I am a technology early adopter, and where I’ve seen good uses of AI, we are in the phase of “throw AI into everything” mode, as we do not know what will stick.
Read Post

Why AI Security Needs More Than One Tool #shorts #ai

Apr 20, 2026 By Protecto In Protecto
Why AI security needs more than one tool Most teams believe a single cybersecurity tool—like WAF, EDR, or API security—is enough to protect their AI systems. But that approach is outdated. AI security is not one layer—it’s a full stack problem. Discovery – Identify Shadow AI and unknown AI usage Build-Time Security – Prevent data poisoning & model risks (MLSecOps) Runtime Security – Stop real-time AI attacks and agent misuse Governance (AISPM) – Ensure visibility, compliance, and policy control.
View Video
outpost 24

AI Penetration Testing: Protecting LLMs From Cyber Attacks

Apr 20, 2026 By David Ketler In Outpost 24
88% of organizations now regularly use artificial intelligence (AI) in at least one business function. While adoption of AI technologies has accelerated rapidly, security measures often lag. The rush to roll out AI has, in many cases, overshadowed essential testing and safety protocols. This is particularly a worry when AI and Large Language Models (LLMs) become deeply embedded within organizational workflows and systems in a way that most software isn’t.
Read Post
Arctic Wolf

Introducing Decipio: A Community Tool to Catch Credential Theft in the Act with Defense First AI

Apr 20, 2026 By Ismael Valenzuela In Arctic Wolf
Today, Arctic Wolf is announcing Decipio, a new community‑shared cybersecurity tool designed to help defenders catch attackers while they’re trying to steal credentials inside a network. Credential theft is one of the most common ways cyber attacks begin and one of the hardest to detect early. In many cases, there’s no alert, no obvious warning, and no immediate sign that anything is wrong.
Read Post
1Password

What we learned using AI agents to refactor a monolith

Apr 20, 2026 By Nancy Wang, Wayne Duso, K.J. Valencik In 1Password
AI agents are increasingly used to refactor large codebases, but many teams lack a clear understanding of where they succeed and where they fail. At 1Password, we applied agentic tooling to a multi-million-line Go monolith, and in this blog we'll share what worked, what broke, and what it means for teams adopting AI in production systems.
Read Post
armo

AI Workload Security on GKE: Evaluating Google Cloud Native vs Third-Party Solutions

Apr 20, 2026 By Yossi Ben Naim In ARMO
A CISO running AI agents on GKE has watched three Google product launches in eighteen months — Model Armor, expanded Security Command Center coverage for AI workloads, additions to Chronicle’s curated detection content — and is being asked whether the GCP-native stack is now sufficient. The vendor demos and the Google Cloud blog say yes. The 2 AM analyst experience says something different.
Read Post
CrowdStrike

Frontier AI Is Collapsing the Exploit Window. Here's How Defenders Must Respond.

Apr 20, 2026 By CrowdStrike In CrowdStrike
The defensive timeline in cybersecurity is changing faster than most organizations are prepared for. For years, defenders operated with an assumption that there would be some delay between vulnerability disclosure and exploitation. That delay created a window for patching, mitigation, and detection. It wasn’t perfect, but it gave security teams time to act. Frontier AI is removing that buffer and changing how organizations must consider cyber risk.
Read Post
keeper

Why Identity Security is Key To Managing Shadow AI

Apr 20, 2026 By Ashley D'Andrea In Keeper
Employees are adopting Artificial Intelligence (AI) tools to enhance their productivity, but they rarely consider the security implications of doing so. When an employee pastes sensitive customer data into an unapproved AI tool, that data is processed by a third-party model outside the organization’s control, often leaving no audit trail for security teams to review.
Read Post
Understanding Data Governance in the Age of Generative AI

Understanding Data Governance in the Age of Generative AI

Apr 20, 2026 By SecuritySenses In SecuritySenses
Generative AI is changing how organizations create, process, and distribute information. Tools powered by models from companies like OpenAI and Google can produce content, analyze data, and automate workflows at a scale that wasn't realistic a few years ago. That shift creates opportunity, but it also raises a more grounded concern: how do you control, protect, and manage the data feeding these systems?
Read Post
Why Brands Use the Same AI Avatar Across Every Campaign Instead of Rotating Influencers

Why Brands Use the Same AI Avatar Across Every Campaign Instead of Rotating Influencers

Apr 20, 2026 By SecuritySenses In SecuritySenses
Here is the reason why major consumer brands have historically invested in long-term spokesperson relationships instead of continually changing faces for different campaigns. Recognition builds up. The more an audience sees a person again and again associated with a brand, the more the presenter and the brand become linked in their minds -and each individual advertisement will have to do less work in establishing credibility before delivering the message.
Read Post
wallarm

The Governance Gap: How the EU AI Act Makes API Security a Compliance Imperative

Apr 19, 2026 By Wallarm In Wallarm
Your legal team just handed you a 400-page document and said "figure out compliance." The EU AI Act is live, your organization falls under its scope, which is broader than many expect. Even non‑EU companies must comply if their AI systems are used, deployed, or produce effects within the European Union. In practice, that means that global organizations building or integrating AI models cannot treat the Act as a regional regulation.
Read Post

Claude Mythos Just Killed Exploitability as a Security Signal

Apr 19, 2026 By Seemplicity In Seemplicity
The game has changed. For years, security teams used exploitability to decide what to patch first. If a vulnerability had a known exploit, it went to the top of the list. If not, it waited. But with the arrival of next-gen AI models like Claude Mythos, that strategy is officially broken. In this video, we discuss how Claude Mythos has collapsed the barrier to building working exploits. What used to take real skill and significant time can now be weaponized in minutes. When everything is exploitable, exploitability becomes noise.
View Video
protecto

Types of AI Guardrails and When to Use Them (2026)

Apr 18, 2026 By Mariyam Jameela In Protecto
The types of AI guardrails are input guardrails, output guardrails, security guardrails, ethical guardrails, and operational guardrails, each positioned at a different failure point across an inference pipeline. Gartner’s research found that 30% of generative AI projects don’t survive past the proof-of-concept stage, with weak risk controls cited as the leading reason. Most of those projects weren’t badly built. The models worked. The gaps were in what sat around them.
Read Post

Claude Mythos Explained: AI Finding Zero-Day Vulnerabilities and Chaining Exploits

Apr 17, 2026 By Forescout Technologies In Forescout
Claude Mythos is an AI model capable of finding and chaining zero-day vulnerabilities at scale. That changes how attacks happen, especially in environments where you can’t patch fast enough. The Forescout 4D Platform with VistaroAI helps organizations respond with real-time visibility and dynamic control across all connected devices.
View Video
indusface

Exposed LLM Infrastructure: How Attackers Find and Exploit Misconfigured AI Deployments

Apr 17, 2026 By Aayush Vishnoi In Indusface
Someone is scanning your LLM infrastructure right now. They are not waiting for you to finish your security review. Between October 2025 and January 2026, GreyNoise’s honeypot infrastructure captured 91,403 attack sessions targeting exposed LLM endpoints. These were two distinct campaigns systematically mapping the expanding attack surface of misconfigured AI deployments. Your team is moving fast on AI. LLM servers are going live, inference APIs are being connected, MCP endpoints are being spun up.
Read Post

Cybersecurity AI Explained: Agentic AI, PQC, and Real-World Security Challenges

Apr 17, 2026 By Forescout Technologies In Forescout
At the 2025 RSA Conference, Justin Foster joins Zeus Kerravala to break down where AI in cybersecurity is actually delivering value and where it’s falling short. As security teams deal with growing complexity, many are finding that today’s AI tools create as much friction as they solve. This conversation explores how a shift toward agentic, skills-based AI can help teams move faster, reduce noise, and focus on what really matters.
View Video
bitsight

Navigating the Post-Mythos Landscape with Bitsight

Apr 17, 2026 By Greg Keshian In BitSight
The rise of AI-driven vulnerability discovery using Anthropic's Claude Mythos, as well as similar tools from Google and OpenAI, is completely changing the calculus of cyber risk. The number of vulnerabilities is exploding. The time it takes for exploits to appear is shrinking. The patching cadences and scan intervals, assessments and risk registers that many organizations still rely on are rapidly becoming ineffective.
Read Post
protecto

What Is AI Context Security?

Apr 17, 2026 By Amar Kanagaraj In Protecto
Every enterprise wants to use AI on its most valuable data — customer records, financial documents, clinical notes, legal files, engineering IP. The problem is simple: the moment that data enters an AI workflow, traditional security stops working. Firewalls protect the network. Encryption protects data at rest. Access controls protect the database. But none of them protect what happens when an AI agent retrieves five documents, synthesizes an answer, and delivers it to a user.
Read Post

Autonomous AI Agents Explained: Risks, Capabilities & Security Gaps

Apr 17, 2026 By Sysdig In Sysdig
Autonomous AI agents are no longer experimental—they’re writing code, executing commands, and making decisions in real time. But as AI coding agents become more powerful, they’re also introducing a new and often invisible attack surface. In this video, we break down: AI agents can install packages, run scripts, and modify systems instantly—often without traditional visibility. That means security teams need to rethink how they monitor and protect their environments.
View Video

This Project Glasswing Announcement is Bigger Than You Think

Apr 17, 2026 By Razorthorn Security In Razorthorn
Anthropic's Project Glasswing and Mythos Preview model represent a seismic shift in cybersecurity. This AI is specifically tuned for vulnerability discovery, code review and security hardening at unprecedented speed. In this episode of Razorwire Raw, Jim Rees breaks down what Project Glasswing actually means for information security professionals and the concerns nobody's talking about yet.
View Video
acronis

Explainable AI in Email Security: From Black Box to Clarity

Apr 17, 2026 By Acronis In Acronis
Generative AI and sophisticated social engineering have reshaped the cybersecurity landscape in 2026. Traditional "castle-and-moat" defenses centered on the Secure Email Gateway (SEG) are increasingly pressured by machine-scale attacks designed to bypass static filters. As organizations shift toward Integrated Cloud Email Security (ICES) models, a new technical and psychological barrier appears: the "black box" problem of defensive AI.
Read Post
wallarm

Why API Discovery Is the First Step to Securing AI

Apr 17, 2026 By Wallarm In Wallarm
AI risk doesn’t live in the model. It lives in the APIs behind it. Every AI interaction triggers a chain of API calls across your environment. Many of those APIs aren’t documented or tracked. That’s your real exposure. Shadow API discovery gives you visibility into those hidden endpoints, so you can find them before attackers do. If you don’t know which APIs your AI relies on, you can’t secure the system.
Read Post

Stopping AI Agent Attacks: How Falcon AIDR Blocks Prompt Injection

Apr 17, 2026 By CrowdStrike In CrowdStrike
See how attackers can exploit AI agents like OpenClaw using hidden prompt injection techniques—and how CrowdStrike Falcon AIDR stops them in real time. In this demo, we show how a seemingly harmless resume contains invisible malicious instructions that trick an AI agent into leaking sensitive data, including API tokens and system access. Then, we replay the same scenario with Falcon AIDR enabled, where the attack is detected and blocked before any damage is done.
View Video
7 Practical Ways to Shrink Your Digital Footprint in 2026

7 Practical Ways to Shrink Your Digital Footprint in 2026

Apr 17, 2026 By SecuritySenses In SecuritySenses
The average internet user now leaks more personal data in a single day of routine browsing than most people disclosed in a decade two generations ago. Ad networks track page views, data brokers aggregate public records into sellable dossiers, and AI systems ingest everything from social posts to leaked databases to build inferred profiles of individuals. Privacy Rights Clearinghouse has catalogued more than 750 data brokers operating in the United States alone, and industry analysts estimate the broader data-broker economy will grow past half a trillion dollars by the end of the decade.
Read Post
CrowdStrike

Frontier AI for Defenders: CrowdStrike and OpenAI TAC

Apr 16, 2026 By CrowdStrike In CrowdStrike
CrowdStrike has been selected for OpenAI's Trusted Access for Cyber (TAC) program. Today, OpenAI released GPT-5.4-Cyber, a frontier model designed for defensive cybersecurity, and expanded the TAC program to give verified, selected defenders governed access through identity verification and tiered controls. CrowdStrike continues to lead the market in secure AI adoption, trusted by AI leaders and organizations of all sizes to accelerate the world's AI revolution.
Read Post
trustcloud

Point-in-time GRC is obsolete. What's replacing it? It isn't AI alone

Apr 16, 2026 By Abheer Bipin In TrustCloud
The last generation of Governance, Risk and Compliance (GRC) software built a multi-billion dollar ecosystem by becoming systems of record for risk. ServiceNow became the system of IT workflows. Archer for audits. Diligent for policy management. Own the control framework, own the workflow, own the audit trail. It worked: for a world where risk moved slowly enough to be captured annually. That world is gone. Point in time attestations are obsolete. The Apple Watch didn’t replace the annual checkup.
Read Post
graylog

How Lean Security Teams Stay Ahead of AI-Powered Attacks

Apr 16, 2026 By Jeff Darrington In Graylog
In “Terminator 2“, the T-800 does not win because humans worked harder. It wins because the same machine capability that made it dangerous was reprogrammed to fight for the defenders. Project Glasswing is exactly that. Claude Mythos Preview is Anthropic’s most powerful AI model and the one they refused to release publicly because it autonomously found thousands of zero-day vulnerabilities across every major operating system and browser. Flaws that decades of expert review never caught.
Read Post

Stop Guessing AI Security: A Maturity Reality Check

Apr 16, 2026 By Mend In Mend
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
View Video
Zenity

AI Agents Are Already Running the Enterprise. Security Hasn't Caught Up.

Apr 16, 2026 By Greg Zemlin In Zenity
For years, conversations about AI security risks were framed as forward-looking. Organizations were told to prepare for a future where autonomous agents would act on their behalf, access sensitive systems, and make consequential decisions without human intervention at every step. That future, it turns out, is now.
Read Post
elastic

Why AI won't steal your SOC analyst job

Apr 16, 2026 By Peter Weller In Elastic
Let's address the elephant in the room, or I should say … the AI in the security operations center (SOC). If you're an SOC analyst, you've probably heard the doom and gloom predictions — AI is coming for your job! AI will replace you! Start updating your resumes now! In all honesty, that probably is not the case. AI isn't going to take your job, but it will change how you do it — and that's brilliant news.
Read Post
protecto

How to Secure AI Agents Accessing Enterprise Data: A Complete Guide

Apr 16, 2026 By Sakshi In Protecto
Artificial intelligence is changing how a business handles its operations, and that too very rapidly. AI agents can easily read, analyze, and act on enterprise data in real time. This ease also brings serious risk. If not managed well, these systems can expose sensitive information, break compliance rules, or even make harmful decisions. Did you know that on average, the overall cost of a data breach reached $4.45 million in 2023?
Read Post

How to know if your agents are correct with Dylan Williams

Apr 16, 2026 By LimaCharlie In LimaCharlie
Join us for this week's Defender Fridays as we explore AI agent evaluation with Dylan Williams, Co-founder and Chief Research Officer of Spectrum Security. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
View Video
signmycode

OpenAI Revokes macOS Code Signing Cert After Axios Supply Chain Hit [Actions Required]

Apr 16, 2026 By SignMyCode In SignMyCode
Something big just happened in the cybersecurity world. And if you’re using OpenAI’s macOS apps… this affects you directly. OpenAI has rotated its macOS code-signing certificates after a supply chain attack quietly slipped into its workflow. No, your data wasn’t stolen. But yes, this is serious enough that every macOS user must update before May 8, 2026.
Read Post
1Password

Beyond patching: Building a Mythos-ready security program

Apr 16, 2026 By Dave Lewis In 1Password
When Anthropic revealed the existence of Mythos, the frontier AI model they deemed too dangerous for public release, the security community was alarmed. And it’s not hard to see why: Mythos is capable of detecting software vulnerabilities at a previously unimaginable scale, and autonomously crafting exploits to weaponize these flaws. According to Anthropic, Mythos created 181 exploits of Firefox in testing, ninety times more than the company’s previous model (Claude Opus 4.6).
Read Post
knowbe4

Early Results From KnowBe4's AI Agents Show Easier Administration and Lower Cyber Risk

Apr 16, 2026 By Roger Grimes In KnowBe4
You often hear companies touting that they are AI enabled. But most do not give you the results of how that new AI stacks up with their previous non-AI offerings. We have some early data and want to share it. KnowBe4 was the first Human Risk Management (HRM) vendor to use AI. While our competitors have been touting the use of AI only since 2023 at the earliest, we have been using machine learning (ML), the backbone workhorse of AI, since early 2016 – for a decade!
Read Post
exabeam

Claude Mythos, Project Glasswing, and the Machine-Speed Security Race

Apr 16, 2026 By Exabeam In Exabeam
Anthropic’s latest Claude news shows how AI is compressing the time from vulnerability discovery to credentialed lateral movement, and why security teams need behavior-based detection across humans and AI agents. Anthropic’s Project Glasswing, announced on April 7, 2026, gives selected partners early access to Claude Mythos Preview for defensive cybersecurity work. Anthropic says the model has already identified thousands of zero-day vulnerabilities across critical infrastructure.
Read Post
What Makes AI Agents Different from Traditional Automation Tools?

What Makes AI Agents Different from Traditional Automation Tools?

Apr 16, 2026 By SecuritySenses In SecuritySenses
With the growing buzz around artificial intelligence, many businesses still struggle to separate hype from reality. Everywhere you look, tools are labeled as "AI-powered," yet a large portion of them are simply upgraded versions of traditional automation. This creates confusion for decision-makers who are trying to understand whether they truly need AI or if their existing systems are already sufficient.
Read Post
seemplicity

Scaling Your Security Program to Match the Speed of Mythos

Apr 15, 2026 By Ravid Circus In Seemplicity
Anthropic’s Project Glasswing and the Claude Mythos model represents a fundamental change in the physics of cyber defense. With the gap between patch releases and weaponized exploits shrinking to hours, traditional manual security triage is now obsolete. Organizations must adopt AI-driven automated remediation.
Read Post
teleport

EU AI Act Compliance: Requirements, Risks, and What to Document

Apr 15, 2026 By Kayne McGladrey, CISSP In Teleport
→ Audit your AI systems against EU AI Act requirements now — validate Annex IV technical documentation, logging, and data governance. The initial August 2025 compliance date has passed, and full penalties begin in August 2026. → Build a continuous compliance evidence chain — document risk management across the full lifecycle (design, development, deployment, and post-market monitoring).
Read Post

Rogue AI App Use

Apr 15, 2026 By Vanta In Vanta
HungryClaw… OpenLobster… KrillBox? Shout out to @AlexisGay for shining a light on the fact that shadow IT tools are getting more (shell)fishy—and dangerous—by the minute. According to our own findings, within 90 days of connecting to Vanta, organizations discover ~140 shadow IT tools accessing their environment. That's a lot of claws grabbing at your data. More insights to come! Stay tuned for our new Trust Signals series.
View Video

Why Your Security Tools Are Useless Against AI?#short #ai

Apr 15, 2026 By Protecto In Protecto
Most companies believe their security tools—WAF, EDR, API gateways—are enough to stop cyber attacks. But AI has changed the game. AI-powered attacks: –Learn your security patterns–Adapt in real-time–Bypass traditional defenses These tools were built for a predictable world. AI attackers are non-stop, intelligent, and evolving. That’s why even the best security systems are failing against modern AI threats.
View Video
cato networks

The Mythos Moment: Why Architecture and Advanced Models Matter for Cyber Defense

Apr 15, 2026 By Dr. Guy Waizel In Cato Networks
What began as reports about Anthropic’s Mythos model has now moved into a gated research preview called Mythos Preview. For cybersecurity, that immediately raises an important question: what happens when advanced AI can accelerate offensive workflows such as vulnerability analysis, exploit development, and attack planning? In a recent Cato blog post, we addressed the broader strategic shift this represents.
Read Post
Zenity

Agents Need Boundaries. The Market Is Starting to Agree.

Apr 15, 2026 By Tomer Teller In Zenity
Gartner published the inaugural Hype Cycle for Agentic AI last week (and yes, we’re included in two subcategories - Agentic AI Security and Guardian Agent). A few things worth noting. It's inaugural, Gartner publishes over 130 Hype Cycles a year, and standing up a new one signals that a space has earned its own map. And it dropped in April, months ahead of the June - August window when these things usually appear.
Read Post
LimaCharlie

The Agentic MDR Pipeline: Detection Engineering at Scale

Apr 15, 2026 By LimaCharlie In LimaCharlie
A CVE surfaces in the morning. By the time you are talking to that customer, you can tell them: we saw it, we checked your environment, you were not affected, and we deployed a rule that will catch it if it ever shows up. For MSSPs and MDR providers, detection engineering is among the most valuable services you can offer. It is also among the most expensive to deliver consistently and at scale.
Read Post
Tines

You proved the value, finance is backing the growth: bringing Story copilot into the AI credit framework

Apr 15, 2026 By Kelli Hinteregger In Tines
It was a bold move, but our finance team was fully on board. They both approved and championed the approach. They wanted to see exactly how much value we could unlock for our customers. They didn't look at the resulting bill and ask us to slow down.
Read Post
vista infosec

Can AI Replace a QSA?

Apr 15, 2026 By Narendra Sahoo In VISTA InfoSec
The question circling boardrooms and compliance departments in 2026 is no longer hypothetical: Can AI replace a QSA? After nearly two decades guiding organizations through PCI DSS audits, gap assessments, and remediation programs, the answer is clear — No, AI cannot replace a Qualified Security Assessor in 2026. But it is fundamentally reshaping what being a QSA means, and professionals who ignore that shift do so at their own peril.
Read Post
knowbe4

New KnowBe4 Agent Risk Manager Addresses Pervasive AI Agent Risk

Apr 14, 2026 By KnowBe4 Team In KnowBe4
By Roger A. Grimes and Matthew Duren AI agents can deliver incredible productivity gains, but their operational complexity makes effective threat modeling harder than ever, including for developers, administrators and especially end users. At the same time, both developers and non-developers are increasingly vibe-coding, or using AI to generate functional software from natural language prompts.
Read Post
salt security

Claude Mythos Changed Everything. Your APIs Are the First Target.

Apr 14, 2026 By Roey Eliyahu In Salt Security
Anthropic just released Claude Mythos Preview. They did not make it publicly available. That decision alone should tell you everything you need to know about what this model can do. During internal testing, Mythos autonomously discovered and exploited zero-day vulnerabilities across every major operating system and web browser. It found a 27-year-old bug in OpenBSD. A 16-year-old vulnerability in a widely used media codec.
Read Post
veracode

Why Securing AI Code Generation is Critical for AppSec

Apr 14, 2026 By Natalie Tischler In Veracode
The revolution is here, but it’s not what we expected. AI coding assistants have transformed software development, with developers shipping code faster than ever before. GitHub Copilot, Amazon CodeWhisperer, and Claude Code have become as essential to modern development as Git itself. The productivity gains are undeniable; what once took hours now takes minutes. But there’s a dangerous blind spot in this revolution: security.
Read Post

Observability and Security for the AI Era

Apr 14, 2026 By Datadog In Datadog
Datadog has always been driven by a broader vision of helping teams understand and operate complex systems. In this session, you’ll hear from Yanbing Li, Chief Product Officer, and Shri Subramanian, Group Product Manager, as they share the latest updates across the Datadog product suite and discuss how that vision continues to shape the platform’s evolution and support the next generation of AI-driven applications.
View Video

A Look At GitGuardian's ML-Powered Contextual EnrichmentAnd Incident Scoring

Apr 14, 2026 By GitGuardian In GitGuardian
In this quick introductory video, Mathieu Bellon, Senior Product Manager at GitGuardian, sits down with Dwayne McDaniel, Developer Advocate, to cover some of the advancements GitGuardian has made by integrating machine learning directly into the secrets security platform. Mathieu describes how engineers and responders can save serious time as by automating contextual analysis, geving the humans in the loop with the best information to be able to take an informed action when it comes to secrets leaks. They also discuss the security implications and where teams can look if they want to opt out or bring their own agents.
View Video
protecto

7 Generative AI Security Risks and How to Defend Your Organization

Apr 14, 2026 By Mariyam Jameela In Protecto
Generative AI creates new attack surfaces that traditional security tools were not designed to address. The biggest generative AI security risks include prompt injection, data leakage, shadow AI, compliance exposure, model poisoning, insecure RAG pipelines, and broken access control. Each one requires a specific defense, not a generic firewall or DLP rule.
Read Post
teramind

How to Track and Monitor Employee AI Usage

Apr 14, 2026 By Teramind In Teramind
Artificial intelligence is rapidly moving from an experimental phase to a fundamental business requirement. While tools like ChatGPT can turn hours of data analysis into minutes of work, they also introduce a new era of Shadow IT and data security risks. If you’re concerned about sensitive spreadsheets being uploaded to third-party AI or want to ensure your team is seeing a true return on investment, you need a clear strategy for monitoring employee AI usage.
Read Post
cyberhaven

Best Enterprise DLP Tools for AI Data Risk (2026 Comparison)

Apr 14, 2026 By Cyberhaven In Cyberhaven
Employees move sensitive data into AI tools every day. Someone pastes customer records into ChatGPT to draft an email. A developer feeds proprietary source code into a coding assistant to fix a bug. A project manager drops a confidential contract into Gemini to summarize it for a meeting. According to research from Cyberhaven Labs, 39.7% of the data employees share with AI tools is sensitive, and enterprise adoption of endpoint-based AI agents grew 276% in the past year alone.
Read Post
tanium

Understanding shadow AI in your endpoint environment

Apr 14, 2026 By Tanium In Tanium
Generative AI–and large language models in particular–reached mass consumer adoption beginning in late 2022 and early 2023, with ChatGPT reaching 100 million users faster than any consumer application in history. Since then, AI has advanced at a breakneck pace and now seems to be incorporated in every tool, app, and website–regardless of how useful it might actually be.
Read Post
armo

How Financial Services Teams Should Secure AI Agents in 2026

Apr 14, 2026 By Shauli Rozen In ARMO
Your fraud detection agent scores 30,000 transactions per hour. Your KYC agent processes identity verifications against government watchlists. Your customer service chatbot resolves disputes and initiates balance transfers. Each agent runs on Kubernetes with inherited service account permissions that span payment APIs, customer databases, and compliance systems. Now imagine one of those agents is compromised through a prompt injection embedded in a customer support ticket.
Read Post
reach security

Microsoft E3, E5, and E7 Security Licenses: A Data-Driven Upgrade Guide

Apr 14, 2026 By CP Morey In Reach Security
Upgrading Microsoft enterprise licenses from E3 to E5 or from Entra ID Plan 1 to Plan 2? Whether your company is making the move or evaluating it, the key question is: How do you turn licensing changes into real security gains? Platformizing remains a major trend in 2025, and Microsoft often sits at the center of these efforts due to its broad security capabilities. But maximizing value from E3 and E5 licenses requires time, expertise, and contextual understanding of your environment.
Read Post
cyberhaven

How to Make AI Security Foundational to Your Data Security Stack

Apr 14, 2026 By Cyberhaven In Cyberhaven
Most organizations treat AI security as a finishing touch: A policy written after an incident or a product category evaluated after the core stack is already in place. That sequencing is the problem. AI has fundamentally changed how sensitive data moves inside an organization, through prompts, agents, summarization tools, and third-party models that operate entirely outside traditional security perimeters.
Read Post
Zenity

Zenity Joins CoSAI: Why Agentic AI Standards Need Practitioners at the Table

Apr 14, 2026 By Rock Lambros In Zenity
The agentic AI security standards your enterprise will adopt in the next 18 months are being written right now, inside working groups most CISOs have never heard of. The Coalition for Secure AI (CoSAI), an OASIS Open Project with more than 45 sponsor organizations, including Google, Microsoft, NVIDIA, IBM, and Meta, is producing the frameworks, reference architectures, and secure design patterns that will define how autonomous agents operate inside enterprise environments.
Read Post
LimaCharlie

Composable AI Agents and the SOC That Runs Itself

Apr 14, 2026 By LimaCharlie In LimaCharlie
Picture a SOC that investigates its own alerts, hunts threats across customer tenants, isolates compromised endpoints, and writes its own detection rules. Envision the same SOC attacking itself every morning to find the gaps it missed, all before your analysts arrive for the day. This is not a roadmap item, but an operational reality on LimaCharlie. It’s what agentic AI security looks like on a platform built to support it.
Read Post
apono

Announcing Justification Coach: AI-Powered Guidance for Better Access Requests and Stronger Audits

Apr 14, 2026 By Gabriel Avner In Apono
Today, we’re introducing Justification Coach, a new AI-powered capability that helps users write better access request justifications in real time, so admins get the context they need for audits and investigations without having to chase people down after the fact.
Read Post
salt security

Everyone Is Securing the Wrong Layer of AI

Apr 13, 2026 By Michael Callahan In Salt Security
The AI security market is crowded. Vendors are racing to protect prompts, harden models, detect jailbreaks, and scan for data leakage at the LLM layer. The investment is real. The intent is good. And most of it is missing the point. Here is the problem: agents do not just think. They act. They call APIs. They trigger workflows. They write to databases, send emails, move money, and modify production systems.
Read Post

How GitGuardian and CyberArk MCP Servers Cut Secrets & Vault Sprawl with AI Automation

Apr 13, 2026 By GitGuardian In GitGuardian
Watch the teams of GitGuardian and CyberArk for a demo-first session on how MCP (Model Context Protocol) servers can help you tame secrets sprawl and vault sprawl by letting developers use AI to trigger the right actions, with far less cognitive load! What you’ll learn.
View Video
teramind

What is Generative AI Security? Types, Risks & Best Practices

Apr 13, 2026 By Teramind In Teramind
Generative AI security is the practice of protecting generative artificial intelligence models, applications, and their underlying training data from cyber attacks, data leakage, and unauthorized access. It focuses on securing both sides of the system—i.e., the AI itself (models, pipelines, APIs) and the sensitive data flowing into and out of it during real-world use.
Read Post

I Tried 5 Prompt Injection Attacks (Here's What Happened)

Apr 13, 2026 By Snyk In Snyk
In this video, we explore the growing security risk of prompt injection in large language model (LLM) applications. As AI becomes embedded in more products, new vulnerabilities emerge, especially through natural language manipulation. We break down how LLMs work, the importance of system prompts, and demonstrate five real-world prompt injection techniques used to extract sensitive information or bypass safeguards. You’ll see live examples using different models and learn why newer models are more resilient, but still not immune.
View Video

Real-Time AI Security: Securing Autonomous Agents in 2026

Apr 13, 2026 By Protecto In Protecto
Is your security stack ready for the agentic revolution? As we move into 2026, Real-Time AI Security has become the new frontier for enterprise protection. In this episode of AI on the Edge, Amar (CEO of Protecto) sits down with security veteran and investor Anand Tangiraja to discuss why traditional "shift left" strategies and legacy tools are failing in the face of autonomous agents.
View Video

3 Reasons Your Security Can't Stop AI Attacks #shorts #ai

Apr 13, 2026 By Protecto In Protecto
Is your SOC ready for the 10-minute attack? In 2026, traditional Security Operations Centers are failing to stop Agentic AI Attacks. Why? Because agents don't follow the rules of legacy software. In this Short, we break down the three reasons your current defense is obsolete. The 3 Reasons Your SOC is Too Slow.
View Video
LimaCharlie

Claude Code Cuts SOC Setup to 10 Minutes

Apr 13, 2026 By LimaCharlie In LimaCharlie
Security teams accept that standing up a real SOC requires days of configuration, credential wrangling, and infrastructure work before any actual security engineering begins. With LimaCharlie, actual setup time is closer to ten minutes. It gives valuable time back to SecOps teams by managing infrastructure and simplifying onboarding and operations with Claude Code. Using agentic AI to deploy SOC capabilities means your team spends less time on infrastructure and more on security work.
Read Post
Exposure as a Competency: How Agentic Exposure Management Can Differentiate High-Performing Teams

Exposure as a Competency: How Agentic Exposure Management Can Differentiate High-Performing Teams

Apr 13, 2026 By SecuritySenses In SecuritySenses
In today's fast-paced work environment, the factors that distinguish high-performing teams go well beyond technical skills and traditional leadership. Increasingly, organizations are recognizing "exposure" as a critical competency, one that shapes how teams interact with uncertainty, opportunity, and risk. While exposure has historically been viewed through a financial or risk management lens, it is now emerging as a core driver of organizational agility, innovation, and resilience.
Read Post
Trusted AI Video Platforms for Safer Content Creation

Trusted AI Video Platforms for Safer Content Creation

Apr 12, 2026 By SecuritySenses In SecuritySenses
AI-generated video content is growing fast, and so are the risks that come with it. Statista data shows a sharp rise in AI incidents tied to content generation, with deepfakes and rights violations among the most documented concerns. For creators, brands, and marketers, choosing the right AI video platform means thinking beyond output quality.
Read Post
netwrix

Top AI cybersecurity companies in 2026

Apr 11, 2026 By Netwrix Team In Netwrix
AI cybersecurity companies in 2026 fall into two categories: platforms using AI to automate detection, investigation, and response, and platforms built to secure the AI systems organizations are now deploying. With this grouping into ‘AI for Security’ and ‘Security for AI’, this article covers the breadth and depth of AI cyber security companies.
Read Post

Lightboard series - Secure your AI-powered applications with Cloudflare

Apr 11, 2026 By Cloudflare In Cloudflare
Humair from Cloudflare walks through the details of how Cloudflare's AI Security for Apps secures AI-powered applications. Learn how Cloudflare can discover AI/LLM endpoints and detect and mitigate AI-specific threats like PII exposure, unsafe/toxic content, prompt injection and jailbreak. Learn more.
View Video
graylog

What is the OWASP Top 10 for LLM Application Security

Apr 10, 2026 By Jeff Darrington In Graylog
Initially published by the Open Worldwide Application Security Project (OWASP) in 2023, the Top 10 for LLM Application Security list seeks to bridge the gap between traditional application security and the unique threats related to large language models (LLMs). Even where the vulnerabilities listed have the same names, the Top 10 for LLM Application Security focuses on how threat actors can exploit LLMs in new ways and potential remediation strategies that developers can implement.
Read Post
armo

AI Workload Baseline and Drift Detection: Defining "Normal" Agent Behavior

Apr 10, 2026 By Ben Hirschberg In ARMO
Security teams deploying AI agents into Kubernetes know they need behavioral baselines. The concept is straightforward: define what “normal” looks like for each agent, then detect when behavior drifts in ways that suggest compromise. The problem is that AI agents are designed to change. A model update alters inference latency. A prompt revision shifts tool-calling sequences. A new MCP integration adds API destinations nobody flagged during the last security review.
Read Post
armo

How to Triage an AI Agent Execution Graph: A Three-Tier Decision Framework for Security Teams

Apr 10, 2026 By Yossi Ben Naim In ARMO
A platform security engineer gets an alert at 2:14 a.m. One of the LangChain agents running in their production Kubernetes cluster has produced an execution graph with eleven nodes, seven tool calls, and an egress edge to a domain that is not in the agent’s approved integration list. The chain is fully rendered in their console. Every signal is there.
Read Post
armo

The CISO's AI Agent Production Approval Checklist: 7 Gates to Clear Before Go-Live

Apr 10, 2026 By Shauli Rozen In ARMO
Your engineering lead is in your office Thursday morning. They want to push an AI agent to production next Tuesday. It’s a LangChain-based workflow agent, connected through MCP to three internal tools and one external API, with access to a customer database. The framework posters are on the wall. Your team has spent two quarters standing up runtime observability. And sitting in that chair, you still don’t know whether to say yes.
Read Post
cultureai

A Critical Look at OpenClaw and NemoClaw

Apr 10, 2026 By CultureAI Team In CultureAI
Surprise, surprise, agentic AI is advancing very quickly, and security isn’t quite keeping up. While most attention in recent times has focused on improving model capability, we’ve often been left wondering how to actually make these systems safe enough to trust with real-world tasks and limited interaction. This challenge has become particularly evident with the rise of platforms like OpenClaw, where autonomous agents can execute multi-step actions with minimal human oversight.
Read Post
levelblue

The Exploit Window Collapse: Claude Mythos and the Future of Incident Response

Apr 10, 2026 By Devon Ackerman In LevelBlue
Every so often, something comes along that forces you to recalibrate how you think about cyber risk. Not incrementally, but fundamentally. Claude Mythos feels like one of those moments. The cybersecurity industry has spent decades racing attackers to close vulnerabilities faster. Claude Mythos suggests that race may be entering an entirely new phase. One where speed itself becomes the defining risk factor.
Read Post
veracode

The Mythos Moment: Why the Future of Cybersecurity Is Software Trust

Apr 10, 2026 By Brian Roche In Veracode
Anthropic’s Mythos announcement is not just another cybersecurity headline. It is a signal. AI is transforming software faster than security teams can adapt. The organizations that win won’t be the ones that simply find more flaws. They’ll be the ones that can prove their software can be trusted. A signal that software risk has entered a new era; one where AI can accelerate both the creation of software and the discovery of its weaknesses faster than human teams can respond.
Read Post

Auditing Agentic Behavior for FedRAMP Compliance | Teleport

Apr 10, 2026 By Teleport In Teleport
AI agents are tireless, highly capable, eager to please, but difficult to manage. George Chamales (CriticalSec) and Josh Rector (Ace of Cloud) unpack the identity and access challenges posed by agentic AI. How do you verify it was the right agent, doing the right action, approved by the right person? How do we bound, constrain, govern agentic behavior? Ultimately, the same frameworks built for human identity and access should be applied to agents.
View Video

George Kurtz + Dan Ives on AI Agents Bypassing Security Policies

Apr 10, 2026 By CrowdStrike In CrowdStrike
One AI agent didn’t have permission to fix an issue… so it asked another agent with access to do it. Another? It rewrote the security policy to achieve its goal. This isn’t theory. This is happening. George_Kurtz sat down with DivesTech to discuss why AI needs guardrails.
View Video
datadog

Introducing our open source AI-native SAST

Apr 10, 2026 By Julien Delange In Datadog
Static application security testing (SAST) tools help developers quickly catch potential vulnerabilities as they code. However, these tools rely on inflexible rules that often generate a high number of false positives, reducing trust in their accuracy and slowing adoption. To help developers access context-aware vulnerability detection, we’ve released an open source AI-native SAST solution. This tool scans code changes incrementally and surfaces security issues in real time.
Read Post
one identity

How AI is changing IGA

Apr 10, 2026 By Robert Kraczek In One Identity
It’s no surprise that AI is being integrated into identity governance and administration (IGA) platforms. Automation promises productivity boosts, risk detection can be in real-time and cloud environments allow greater scalability. What’s more, the pace of AI means IGA is quickly moving beyond slower, more rigid, rule-based approaches.
Read Post
salt security

The AI Supply Chain is Actually an API Supply Chain: Lessons from the LiteLLM Breach

Apr 10, 2026 By Eric Schwake In Salt Security
The recent supply chain attack involving Mercor and the LiteLLM vulnerability serves as a massive wake-up call for enterprise security teams. While the security industry has spent the last year fixating on prompt injections and model jailbreaks, this breach highlights a far more systemic vulnerability. The weakest link in enterprise AI is not necessarily the model itself. It is the middleware connecting the models to your data.
Read Post

Your Convenient AI Agent Is a Backdoor to Your Files #agenticai #promptinjection

Apr 10, 2026 By Razorthorn Security In Razorthorn
People are installing powerful AI agents on everyday laptops without realising those tools can access files, emails and operating system functions. Once prompt injected, that agent can behave like a malicious version of its user, which turns convenience into a direct path for deletion, exfiltration and loss of control.
View Video

Every Tech Revolution Follows This Pattern (AI Is No Different)

Apr 10, 2026 By Razorthorn Security In Razorthorn
AI adoption is happening faster than any technology cycle in history. Information security and risk management are being sacrificed for speed and every single technology revolution has followed the same pattern. In this episode of Razorwire Raw, Jim Rees draws on decades of experience through the internet boom, virtualisation revolution and cloud computing adoption to explain what's actually happening with AI right now. Each cycle has been faster than the last, and each time, security gets left behind.
View Video
sophos

We let OpenClaw loose on an internal network. Here's what it found

Apr 9, 2026 By Ross McKerchar In Sophos
Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks In my previous article on OpenClaw I wrote: “Even the most ‘risk-on’ organizations with deep AI and security experience, will likely find it challenging to configure OpenClaw in a way that effectively mitigates the risk of compromise or data loss, while still retaining any productivity value.” The Red Team here at Sophos took that as ‘challenge accepted’, s
Read Post
nucleus

The NVD Funding Crisis Was Bigger Than Mythos

Apr 9, 2026 By Scott Kuffer In Nucleus
Everyone is calling Claude Mythos a watershed moment. I’d like to offer a slightly different take. Not because the capability isn’t real, it is. But if Mythos is the moment that finally convinced your organization that rapid vulnerability discovery is an existential threat, you’ve been watching the wrong thing. We saw this coming. Vulnerability Management has been moving in this direction for years, and we built Nucleus with this trajectory in mind. What surprises me is the surprise.
Read Post
seemplicity

New Data Shows Why Security Teams Can't Keep Up With AI-Driven Attacks

Apr 9, 2026 By Jessica Amado In Seemplicity
AI is changing how attacks happen, and how fast they happen. Seemplicity’s 2026 State of Exposure Management report shows why most security teams aren’t struggling to find risk, but to fix it quickly enough. Based on insights from 300 security leaders, it highlights where remediation breaks down, how AI is being used today, and why execution is becoming the real bottleneck.
Read Post

Why You Can't Defend Against Prompt Injection

Apr 9, 2026 By Razorthorn Security In Razorthorn
Prompt injection works because language models struggle to tell the difference between trusted instructions and untrusted user content. Unlike SQL injection or cross site scripting, there is no clean deterministic defence, which leaves code, libraries and AI workflows open to manipulation at multiple points.
View Video

AI in the SOC with Joshua Neil

Apr 9, 2026 By LimaCharlie In LimaCharlie
Join us for this week's Defender Fridays as we explore AI in the SOC with Josh Neil, Co-founder of Alpha Level. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
View Video
coralogix

Evil Token: AI-Enabled Device Code Phishing Campaign

Apr 9, 2026 By Kiran Sethumadhavan In Coralogix
On April 6, 2026, Microsoft Defender Security Research published an advisory detailing a large-scale phishing campaign that leverages the OAuth Device Code Authentication flow to compromise Microsoft 365 accounts across organizations globally. This campaign represents a significant evolution from manual social engineering to fully automated, AI-driven attack infrastructure.
Read Post

Episode 12 - The Agentic SOC: Upleveling Analysts with AI Knowledge Multipliers

Apr 9, 2026 By Corelight In Corelight
Richard Bejtlich sits down with Stan Kiefer, Corelight’s Senior Manager for Data Science, to discuss how AI serves as a vital "abstraction layer" and "knowledge multiplier" for security analysts. Stan explains that while AI can synthesize complex information, it remains untrustworthy without high-fidelity network data at its center to provide verifiable evidence. The episode explores the shift toward an "agentic ecosystem" and a tiered architecture where a central orchestrator manages specialized sub-agents to accelerate detection and investigation.
View Video
kovrr

AI Governance and Risk: Expert Insights for Enterprise Leaders

Apr 9, 2026 By Kovrr In Kovrr
‍ As GenAI tools become embedded in core business operations, the governance programs meant to oversee them are still catching up. Closing that gap requires visibility into where AI operates and the ability to express exposure in financial terms that leadership can act on. The organizations best positioned to manage AI risk are those that have already started treating it as a measurable business variable rather than an abstract operational concern. ‍
Read Post
sumologic

Your AI SOC still needs a SIEM. Here's why that won't change.

Apr 9, 2026 By Michelle Beastall In Sumo Logic
Everyone is building sophisticated intelligence layers with improved models and smarter agents to automate threat detection, investigation, and response. It’s what is needed in order to mature into an AI SOC. However, the organizations seeing the most value from AI in their SOC are not focusing solely on the intelligence layer. They’re focusing on the data foundation first.
Read Post
knowbe4

AI Phishing Attack Prevention Strategies: How AI Identifies and Limits Human Risk

Apr 9, 2026 By KnowBe4 Team In KnowBe4
AI is making phishing attacks easier to create and scale. Tasks that once required manual effort can now be automated, allowing attackers to generate realistic messages, launch campaigns, and adapt tactics quickly to evade security controls. In fact, KnowBe4’s 2025 Phishing Threat Trends Report found that more than 73% of phishing emails analyzed in 2024 showed signs of AI involvement. As a result, phishing threats are becoming harder to detect using traditional methods alone.
Read Post
Arctic Wolf

Frontier AI Models Mark a Turning Point for Cybersecurity

Apr 9, 2026 By Dan Schiappa In Arctic Wolf
This week Anthropic announced Project Glasswing, a cybersecurity initiative built around Claude Mythos Preview, an unreleased frontier AI model capable of autonomously discovering and developing exploits for zero-day vulnerabilities across major operating systems and web browsers. According to early details, the model has already identified thousands of critical vulnerabilities that traditional tools have missed for years.
Read Post
armo

A CISO's Guide to Deploying AI Agents in Production Safely

Apr 8, 2026 By ARMO In ARMO
Your CNAPP shows green across every posture check—hardened clusters, compliant configurations, no critical CVEs—but when your board asks "Are our AI agents safe in production?", you cannot answer with confidence because your tools see the infrastructure, not what the agents actually do at runtime.
Read Post
foresiet

The AI Inversion: Tracking the Most Dangerous Cyber Attacks of 2026

Apr 8, 2026 By foresiet In Foresiet
For years, AI was the defender’s advantage. In the last 30 days, that narrative inverted — AI is now leaking data, generating malware, refusing to shut down, and erasing billions in market value. AI-enabled attacks rose 89% year-over-year. A single model leak wiped $14.5 billion from markets in one day. An AI agent compromised 600+ firewalls across 55 countries without a human operator. And another AI agent refused to shut down when commanded.
Read Post
opti9

Opti9 Becomes Authorized Anthropic Reseller via Amazon Bedrock

Apr 8, 2026 By Mark Mazza In Opti9
Opti9 recently announced it has been approved as an authorized reseller for Anthropic models through Amazon Bedrock, further strengthening its ability to deliver secure, enterprise-grade AI solutions on Amazon Web Services (AWS). In October, AWS enabled its Solution Provider Partners to resell Amazon Bedrock, a fully managed service that provides access to a wide range of leading foundation models from top providers.
Read Post
salt security

The Era of Agentic Security is Here: Key Findings from the 1H 2026 State of AI and API Security Report

Apr 8, 2026 By Eric Schwake In Salt Security
The era of human-centric API consumption is officially ending. Over the past year, enterprises have rapidly transitioned from simply experimenting with Generative AI to deploying autonomous AI agents that drive core business operations. These agents act as digital employees. They utilize Large Language Models (LLMs) for reasoning, Model Context Protocol (MCP) servers for connectivity, and internal APIs for execution. This evolution has fundamentally altered the enterprise attack surface.
Read Post

Secret Scanning For AI Coding Tools With ggshield

Apr 8, 2026 By GitGuardian In GitGuardian
Introducing ggshield AI hooks from GitGuardian to help stop AI coding assistants from leaking secrets. See how ggshield can scan prompts, tool calls, file reads, MCP calls, and tool output inside AI coding tools like Cursor, Claude Code, and VS Code with GitHub Copilot. When a secret is detected, ggshield can block the action before sensitive data is sent or exposed. You will also see how simple the setup is, with flexible install options for local or global use. This adds practical guardrails to AI-assisted development and helps teams move fast without increasing secret sprawl.
View Video
cyberhaven

Enterprise AI Security Use Cases: What Security Teams Are Solving For

Apr 8, 2026 By Cyberhaven In Cyberhaven
Enterprise AI adoption is no longer a future problem. The average organization uses 54 generative AI (genAI) applications, and endpoint AI agent adoption is accelerating, with Cyberhaven research tracking 276% growth in 2025. Security programs have struggled to keep pace with either trend. The AI security gap is technical, not philosophical. Most organizations have AI acceptable use policies.
Read Post
Building Smarter Virtual Assistants with Gemini 3 Flash API: AI for Seamless Workflow Automation

Building Smarter Virtual Assistants with Gemini 3 Flash API: AI for Seamless Workflow Automation

Apr 8, 2026 By SecuritySenses In SecuritySenses
As teams become more distributed and workloads continue to increase, the need for effective automation tools has never been greater. Traditional methods of collaboration often fall short when it comes to handling repetitive tasks, managing high volumes of information, or providing real-time, intelligent support. That's where AI virtual assistants come in, changing how teams collaborate, streamline workflows, and boost productivity.
Read Post
Exabeam Confronts AI Insider Threats Extending Behavior Detection and Response to OpenAI ChatGPT and Microsoft Copilot

Exabeam Confronts AI Insider Threats Extending Behavior Detection and Response to OpenAI ChatGPT and Microsoft Copilot

Apr 7, 2026 By Exabeam In Exabeam
Applies behavior profiling and analytics to the digital workforce, giving security teams full visibility into how users and AI agents interact across the enterprise.
Read Post

How Weak AI Governance Is Creating A Security Disaster #cybersecurity #aisecurity

Apr 7, 2026 By Razorthorn Security In Razorthorn
This episode explores why CTEM matters in a world of vibe coding, AI agents and rapidly expanding attack surfaces. It covers prompt injection, hidden threats, deepfakes, weak governance and the growing fear that businesses are deploying AI far faster than security teams can understand or control it.
View Video
apono

The Agentic Identity Crisis: Why Your AI Agents Are Your Biggest Identity Blind Spot in 2026

Apr 7, 2026 By The Apono Team In Apono
An intern gets admin access to production for a temporary task, but nobody remembers to revoke it. Imagine that intern works at machine speed, never sleeps, and can chain dozens of actions before you’ve read the Slack ping—and has no instinct for when they’re about to do something irreversible.
Read Post
Snyk

Secure What Matters: Scaling Effortless Container Security for the AI Era

Apr 7, 2026 By Pratip Banerji In Snyk
In November, we shared our vision for the Future of Snyk Container, outlining a fundamental shift in how teams secure the modern container lifecycle. We promised a future where security doesn’t just “scan” but scales effortlessly with the speed of the AI-driven, agentic world. Today, we are thrilled to announce that we are moving from vision to reality.
Read Post
knowbe4

AI-Powered Human Risk Management Shifts the Focus to Adaptive, Behavior-Based Training

Apr 7, 2026 By KnowBe4 Team In KnowBe4
Human risk management (HRM) focuses on one of the most persistent cybersecurity vulnerabilities: humans. Social engineering attacks that trick users into taking risky actions are a factor in 98% of cyberattacks not because they are technically complex, but because they manipulate employee behavior. Unlike traditional, one-size-fits-all security awareness training, human risk management focuses on changing employee behavior through monitoring and targeted reinforcement.
Read Post
datadog

Introducing the Datadog Code Security MCP

Apr 7, 2026 By Valery Neira In Datadog
AI-assisted development helps teams write code faster, but that speed comes with added security risk. As agents generate more code, they can introduce vulnerabilities, insecure dependencies, or exposed secrets, often before a human reviewer ever sees the change. Security teams are left reviewing more code with the same resources, which makes it harder to catch issues early.
Read Post
protecto

What is the NIST AI Risk Management Framework?

Apr 7, 2026 By Mariyam Jameela In Protecto
The NIST AI Risk Management Framework is a guide that helps organizations spot and reduce risks in AI systems. This framework was released in January 2023 by the U.S. National Institute of Standards and Technology. The framework is built around four key steps, namely: Govern, Map, Measure, and Manage, and is meant to help teams responsibly use AI. It doesn’t matter which industry you work in or which AI you use; this framework works everywhere.
Read Post
IREX Upgrades FireTrack AI for Faster and More Accurate Fire Detection

IREX Upgrades FireTrack AI for Faster and More Accurate Fire Detection

Apr 7, 2026 By SecuritySenses In SecuritySenses
WASHINGTON, DC - IREX has announced a major update to its FireTrack fire and smoke detection module, introducing significant improvements in speed, accuracy, and operational flexibility across a wide range of environments. According to an article on The Next Web, the updated solution is designed to work seamlessly with existing camera infrastructure, enabling organizations to enhance fire detection capabilities without deploying additional hardware.
Read Post
algosec

Q1 at AlgoSec: What innovations and milestones defined our start to 2026?

Apr 6, 2026 By Adel Osta Dadan In AlgoSec
As we close out the first quarter of 2026, I find myself reflecting on a start to the year that was defined by product momentum, stronger market validation, growing trust from regulated organizations, and meaningful industry recognition. In just three months, AlgoSec introduced important platform enhancements, published fresh research on where network security is heading, strengthened its standing with government and highly regulated customers, and closed the quarter with three major awards.
Read Post
cyberhaven

What Is AI Data Exfiltration and How Do You Stop It?

Apr 6, 2026 By Cyberhaven In Cyberhaven
AI adoption does not happen uniformly across an organization. Some employees have integrated generative AI (genAI) tools into core parts of their workflow. Others have barely opened one. Most are somewhere in between, experimenting on an ad hoc basis, without consistent visibility into what data those tools handle or where it goes. That variance is the problem. Security programs built around either universal AI adoption or zero AI adoption will miss most of the actual risk.
Read Post
bluevoyant

Using Agentic AI to Scale Threat Detection in Healthcare

Apr 6, 2026 By BlueVoyant In BlueVoyant
For every human in a healthcare organization, there are 82 machine identities—service accounts, API keys, cloud functions, medical devices.2 That's the 82:1 ratio, and it means your team is fundamentally outnumbered. The Change Healthcare breach in 2024, which started with one unprotected Citrix credential and disrupted 40% of US claims processing,1 showed exactly what happens when that ratio goes unmanaged. The numbers back this up.
Read Post

Everyone is Deploying AI Agents. Almost Nobody Knows What They're Doing

Apr 6, 2026 By Salt Security In Salt Security
AI agents are operating inside your enterprise; querying databases, triggering workflows, and taking action through APIs. As AI agents are adopted, organizations cannot see, track, or control what these agents are actually doing. In this session, Roey Eliyahu, Co-Founder and CEO of Salt Security, challenges the industry’s narrow focus on LLM safety and exposes the much larger, invisible attack surface created by agentic systems.
View Video

Smishing AI

Apr 6, 2026 By Lookout In Lookout
Cybercriminals are evolving—and so are their tactics. Smishing, or SMS phishing, has become one of the fastest-growing mobile threats. With AI, attackers can now create convincing, personalized messages in seconds—removing language barriers and making scams harder than ever to detect. That’s where Lookout Smishing AI comes in. Our advanced AI-powered detection goes beyond scanning for malicious links. It identifies the intent behind every message—stopping social engineering attacks before they reach you. Whether there’s a URL or not, Lookout keeps your mobile workforce protected.
View Video

NVIDIA Just Made AI Agents Production-Ready #ai #shorts

Apr 6, 2026 By Protecto In Protecto
AI agents just became production-ready overnight. With NVIDIA’s new NeMo Guardrails / NemoClaw-style agent control systems, AI agents can now operate in controlled environments with policies, sandboxing, and guardrails. Sounds safe… but there’s a catch. Agent safety protects what the AI does. But it doesn’t secure what the AI knows. And that’s where the real enterprise risk appears. In this video we break down the difference between.
View Video
CrowdStrike

Anthropic Claude Mythos Preview: The More Capable AI Becomes, the More Security It Needs

Apr 6, 2026 By CrowdStrike In CrowdStrike
The Claude Mythos Preview matters for every enterprise. Frontier models raise the ceiling for both offense and defense. Our job is to make sure defenders hold the advantage. That is what we have always done. That is what we do today. Today, CrowdStrike is a founding member of Project Glasswing. Anthropic builds the model. CrowdStrike secures AI where it executes. That’s the division of labor the industry needs.
Read Post
astra

The Claude Code Leak

Apr 4, 2026 By Ephrim Holyson In Astra
On March 31, 2026, a routine npm publish turned into pure chaos. A 59.8 MB JavaScript source map file meant for internal debugging was pushed along inside the Claude code package version 2.1.88. A researcher, Chaofan Shou (@Fried_rice), yanked that file within hours and publicly disclosed the Claude code Leak on X. Within the next few hours, the whole internet’s nerds had mirrored, de-obfuscated, and gone through more than 513,000 lines of TypeScript across 2000+ files.
Read Post
Featured Post
Solving the Leadership Paradox to Avoid a Cybersecurity AI Skills Generation Gap

Solving the Leadership Paradox to Avoid a Cybersecurity AI Skills Generation Gap

Apr 3, 2026 By Leon Ward, Chief Transformation Officer In Securonix
Transforming operations to embrace artificial intelligence (AI) is the leading challenge for organisations in every sector right now. Arguably, urgency is even greater in the technology sector, where leaders are acutely aware of AI's potential to boost productivity and efficiency. In the cybersecurity subset of technology, the drive is stronger still, as vendors seek to mitigate AI-accelerated cyberattacks and help customers react faster, protect better, and achieve more with the limited budgets that characterise today's economy.
Read Post
Zenity

The Floor Was Selling AI. The Hallways Were Asking for Help.

Apr 3, 2026 By Greg Zemlin In Zenity
One man’s perspective on RSA 2026 and what the AI agent security market actually looks like up close. Every year at RSA, there's a theme, not the official one printed on the lanyards, but the real one. The one that shows up in every booth conversation, every hallway argument, every dinner where people finally say what they wouldn't say on a panel. A few years back, it was cloud. Then zero trust took over and held the room for a while. XDR came through and confused everyone. Identity had its moment.
Read Post
jfrog

AI Models Won't Pick Sides in the Security War. Governance and Policy Will.

Apr 3, 2026 By Shlomi Ben Haim In JFrog
Two significant software supply chain cybersecurity attacks, seven days apart, with one hundred and eighty million weekly downloads between them. The chaos from development teams to the boardroom is real. And the pace is only going to get faster. Much, much faster…
Read Post

AI With Intention: Visibility Drives Action: Strengthening Cyber Risk Management with Better Data

Apr 3, 2026 By Bitsight In BitSight
As organizations shift to cloud services and third-party vendors, maintaining visibility and control over cyber risk has become increasingly complex. In this video, we explore one of the biggest challenges facing security leaders today: how to manage cyber risk without full visibility into your environment. Learn why visibility is critical to effective cybersecurity—and how the right data enables organizations to.
View Video
teleport

CMMC Requirements for AI Systems: What Assessors Actually Look For

Apr 3, 2026 By Josh Rector In Teleport
Josh Rector is the Compliance Director, Public Sector at Ace of Cloud, a security and compliance consulting firm, certified CMMC Third-Party Assessor Organization (C3PAO), and Registered Provider Organization (RPO). With more than a decade of experience in cybersecurity compliance, he has worked both sides of the assessment table, leading internal and external assessments, serving as ISSO for systems at federal agencies, and guiding cloud service providers through the FedRAMP authorization process.
Read Post

Scaling Reach Security the Right Way

Apr 3, 2026 By Reach Security In Reach Security
New year, new faces, big goals. To close out 2025 and open 2026, we welcomed 43 new team members across engineering, sales, customer success & solutions, marketing, and operations. Reach was founded to close the gap between knowing where you're exposed and actually fixing it. That mission doesn’t scale without the right people. Growth is exciting, but aligned growth—with the right people, at the right time, for the right mission—is what really matters.
View Video

Optimize Microsoft Defender for Office 365 Controls | Demo Video

Apr 3, 2026 By Reach Security In Reach Security
Microsoft Defender for Office 365 protects against phishing, malware, and malicious links across email and collaboration tools. But as environments scale and settings are changed, your Defender security controls can drift away from security baselines and degrade your security posture. Reach continuously analyzes your Defender deployment to find and fix misconfigurations, activate unused capabilities, and stop configuration drift.
View Video
reach security

10 Hidden Cybersecurity Misconfigurations

Apr 3, 2026 By John Dominguez In Reach Security
In 2025, organizations spent billions on security, deploying EDR/XDR, SASE, firewalls, identity platforms, email security, web security, and more. And yet, breaches persist. The reason often is not a zero-day, an advanced persistent threat, or a cutting-edge exploit. It is far more mundane. Misconfigurations across identity, endpoint, network, and email/web security controls remain among the top root causes of incidents.
Read Post
Codex API In DevSecOps: Balancing Developer Speed With Secure Code Review

Codex API In DevSecOps: Balancing Developer Speed With Secure Code Review

Apr 3, 2026 By SecuritySenses In SecuritySenses
AI-assisted coding is no longer a side experiment. It is becoming part of daily engineering workflows, from drafting functions and refactoring legacy code to generating tests and accelerating routine implementation work. That shift is why the Codex API now belongs in a broader DevSecOps conversation, not just a developer productivity discussion.
Read Post
salt security

The Agentic Stack Explained: How LLMs, MCP Servers, and APIs Work Together

Apr 2, 2026 By Eric Schwake In Salt Security
The term AI agent is dominant in current cybersecurity discourse. Vendors, analysts, and CISOs all use the label, yet technical confusion remains regarding how agents actually operate and where the security risks reside. Beneath the surface-level familiarity, there is often significant confusion about what an AI agent actually is, how it operates technically, and most importantly for security teams, where the risk actually lives.
Read Post

The AI Compliance Gap No One's Talking About (ISO, NIST, EU AI Act)

Apr 2, 2026 By Mend In Mend
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
View Video
tigera

How to Stub LLMs for AI Agent Security Testing and Governance

Apr 2, 2026 By Alister Baroi In Tigera
Note: The core architecture for this pattern was introduced by Isaac Hawley from Tigera. If you are building an AI agent that relies on tool calling, complex routing, or the Model Context Protocol (MCP), you’re not just building a chatbot anymore. You are building an autonomous system with access to your internal APIs. With that power comes a massive security and governance headache, and AI agent security testing is where most teams hit a wall.
Read Post
mend

AI Application Security: 6 Focus Areas and Critical Best Practices

Apr 2, 2026 By Tiffany Jennings In Mend
AI application security protects AI-powered apps, including those powered by large language models ( LLMs), from unique threats like prompt injection, data poisoning, and model theft. It achieves this by securing the entire lifecycle, including code, data, algorithms, and APIs, using specialized tools and processes that go beyond traditional security measures. It involves securing the AI model’s behavior, training data, and outputs.
Read Post
securonix

Weathering the Attacker's Perfect Storm with Agentic AI-Powered SecOps

Apr 2, 2026 By Securonix In Securonix
The cybersecurity landscape is facing its own perfect storm: AI-powered attacks coupled with resource constraints and regulator pressure, demanding a fundamental shift in SecOps to rise above. With AI showing no signs of slowing down, these issues are not fleeting. They are here to stay, and it is our responsibility to meet them head-on with efficient, AI-powered solutions that allow SecOps teams to conquer the world’s most innovative attacks.
Read Post
Arctic Wolf

RSAC 2026 Wrap-Up: Defining the Future as the AI Cybersecurity Company

Apr 2, 2026 By Dan Larson In Arctic Wolf
At RSAC 2026, Arctic Wolf set the agenda for the future of cybersecurity and AI. Throughout the week, we were at the center of the industry dialogue, shaping how the market is approaching agentic AI in cybersecurity and setting clear expectations for where the industry is headed next. The launches of the Aurora Superintelligence Platform and the Aurora Agentic SOC raised the bar for the industry.
Read Post
nightfall

Browser AI Plugins, Agentic AI, and MCP: The 3 Blind Spots Legacy DLP Can't See

Apr 2, 2026 By Chris Martinez In Nightfall
A recently patched Google Chrome vulnerability is a signal security leaders cannot ignore. But it's only the beginning of a much larger story. In January 2026, a high-severity vulnerability was disclosed in Chrome's Gemini AI integration: CVE-2026-0628. The flaw allowed a malicious browser extension with only basic permissions to escalate privileges and gain access to a user's camera, microphone, local files, and the ability to screenshot any website, all without user consent. Google patched it quickly.
Read Post
Snyk

You Patched LiteLLM, But Do You Know Your AI Blast Radius?

Apr 2, 2026 By Rudy Lai In Snyk
For a brief window, a widely used open source package in the AI ecosystem was compromised with credential-stealing malware. LiteLLM, a model gateway used to route requests to more than 100 LLM providers, has been downloaded millions of times per day. In that short window, the malicious versions were likely pulled tens of thousands of times before being caught.
Read Post
Secure Coding Techniques that Is Critical for Modern Applications

Secure Coding Techniques that Is Critical for Modern Applications

Apr 2, 2026 By SecuritySenses In SecuritySenses
Let's be honest: software ships faster today than most security teams can comfortably keep up with. Microservices, sprawling APIs, cloud-native deployments, and AI-assisted code generation have accelerated development at an unprecedented pace. But buried within that speed are small, overlooked coding mistakes that quietly open the door to serious breaches.
Read Post
armo

Detecting Rogue AI Agents: Tool Misuse and API Abuse at Runtime

Apr 1, 2026 By Yossi Ben Naim In ARMO
When your CNAPP flags a suspicious dependency in an AI agent container, your WAF logs an unusual API spike, and your SIEM shows a burst of cloud storage calls—are those three separate incidents or one rogue agent attack? Most security teams treat them as three tickets in three queues, investigated by three people who may never connect the dots. By the time someone pieces together that a single compromised agent drove all three signals, the attacker has already moved laterally and exfiltrated data.
Read Post
armo

What is an AI-BOM? Why Static Manifests Fall Short

Apr 1, 2026 By Shauli Rozen In ARMO
Your AI-BOM shows every model, tool, and data source you deployed. But when your SOC investigates an alert about unusual agent behavior, that inventory tells them nothing about what actually happened at runtime. Static AI-BOMs document what you intended to run. Attackers exploit what your AI workloads actually do in production: which APIs they call, what data they touch, and how they use approved tools in unapproved ways.
Read Post
Zenity

RSA and DC Dispatches: Agentic AI Security Is the Story, Government Policy Needs to Catch Up

Apr 1, 2026 By Taylor Roberts In Zenity
Fresh off two weeks of back-to-back meetings in Washington, DC, and on the floor/in the wings of the RSA Conference, one theme echoed through nearly every conversation I had with senior government officials and public policy leaders from global technology companies: agentic AI security is the defining emerging security challenge of this moment — and policy is not keeping pace.
Read Post
Snyk

Building AI Security with Our Customers: 5 Lessons from Evo's Design Partner Program

Apr 1, 2026 By Rudy Lai In Snyk
In 2025, we embarked on a new journey to secure the most important technology transformation of this decade – generative AI. Our vision is to help companies secure their AI fast, so that they can innovate on the cutting edge and put AI and agentic use cases into production. To do this, we built Evo, the world’s first agentic orchestrator for AI security. The foundation of any product is customer needs.
Read Post
appknox

AI-driven DAST for mobile apps: The next evolution of Dynamic Security Testing

Apr 1, 2026 By Rucha Wele In Appknox
“AI-powered DAST” is everywhere. It signals progress, but assumes something fundamental was missing. It wasn’t. DAST struggled not from lack of intelligence, but from lack of depth. Most tools never reached inside authenticated, stateful, multi-step journeys where real logic, sensitive data, and critical vulnerabilities exist. That’s the part Appknox solved years ago. AI here is not a reset. It is an accelerator, applied to a system already operating where risk actually lives.
Read Post
teleport

Kubernetes for Agentic AI: Best Practices for Security and Observability

Apr 1, 2026 By Boris Kurktchiev, Jack Pitts In Teleport
Agentic AI workloads are shipping to production on Kubernetes faster than the standards to secure them. Many teams deploying autonomous, tool-calling agents as containerized microservices do so without a shared baseline for securing or monitoring those containers. The CNCF AI Technical Community Group recently published a comprehensive article on cloud-native agentic standards, marking the first attempt to define best practices for such deployments.
Read Post
cyberhaven

DSPM, DLP, and AI Security: Why You Need All Three

Apr 1, 2026 By Franklin Nguyen In Cyberhaven
Security budgets are tightening, and tool consolidation reviews keep landing on the same three categories: data security posture management (DSPM), data loss prevention (DLP), and AI security. At the same time, vendor marketing has done little to clarify the differences among the three and the path for organizations needing to enhance data security efficiently.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.