New in Vanta | May 2026

Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

Agentic AI Security: Governing Shadow Agents on Endpoints

Most enterprise security programs were built around a simple assumption, not invalid assumption that data moves when a person decides to move it. AI agents have broken that model, and now act autonomously, reading files, calling APIs, executing code, and transferring data across systems without waiting for a human to approve each step. Many of these agents were never sanctioned by IT or security.

Report: Adversarial Use of AI is Evolving

Threat actors are increasingly augmenting their attacks with AI tools, according to researchers at Google’s Threat Intelligence Group (GTIG). For the first time, GTIG observed a threat actor using a zero-day exploit developed by AI, although Google blocked the attack before it succeeded. Threat actors also continue to use Large Language Models (LLMs) for research, reconnaissance, and malware development.

The Blueprint for a True AI SOC

See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo John White is the Field CISO for EMEA at Torq. A respected security executive with more than 20 years of leadership experience, John previously served as CISO at Virgin Atlantic, where he led a multi-year transformation deploying the Torq AI SOC Platform to modernize cyber operations.

Beyond the Chatbot: Why Your AI Agents are Your Newest (and Most Vulnerable) Colleagues

The era of "typing into a box" is over. For years, we viewed artificial intelligence as a digital assistant—a sophisticated autocomplete tool that waited for human input. But according to Martin Kraemer, KnowBe4’s CISO Advisor for Europe and the Middle East, that dynamic has shifted. We have moved from asking AI questions to giving AI jobs. In a recent deep-dive webinar, Martin explored the transition from AI tools to AI agents.

How Unsafe Infrastructure Can Lead to Injury Lawsuits

Every cracked sidewalk has a story. Every collapsed railing, every ceiling that gives way, each one represents a chain of failures that too often ends with someone seriously hurt. Across Canada, thousands of people suffer preventable injuries each year in the very spaces they trust most: roads, parks, office buildings, public stairwells. Unsafe infrastructure isn't a bureaucratic talking point. It's a genuine public health crisis that affects ordinary people on ordinary days.

Invisible Cross-Tracking: How Mobile Apps Share Your Data and How to Stop It

Tracking user activity across apps on mobile devices is crucial, as data no longer flows from a single source on phones. For example, in the span of an hour, a user might open Instagram, Gmail, a shopping app, a weather app, and a free game, while various advertising tools quietly analyze network signals, device behavior, location data, and app usage patterns. A VPN won't remove every unique identifier in these apps, but it does make it harder to connect one link in this tracking chain: the digital network footprint.

How an AI SEO Agency Helps SaaS Businesses Rank Faster Online

Software companies often depend on search visibility long before paid acquisition becomes efficient. Yet many teams publish pages without a clear intent map, a crawl plan, or realistic ranking priorities. Results slow down for predictable reasons. Search growth usually improves when technical repair, keyword research, and content planning move in the right order. With that structure in place, SaaS brands can reach evaluators earlier, support longer buying cycles, and build a steadier pipeline from organic discovery.

How to Prepare Your Organization for Rigorous Federal Security Standards

Navigating the cybersecurity landscape for defense contractors has become far more complex than it was in the past. Requirements are evolving quickly as global threats grow more advanced and targeted. Companies that work with the government can no longer afford to overlook these standards if they want to maintain eligibility for contracts.