Introducing System Prompt Hardening: production-ready protection for system prompts

Today, we’re launching System Prompt Hardening, Mend.io’s new capability that defends the hidden instructions that control how your AI systems behave. Unlike user-facing prompts, system prompts live behind the scenes, and when attackers manipulate them, the result can be data leaks, policy bypasses, or unsafe model behavior. System prompt hardening stops those attacks at the source and gives security, engineering, and risk teams a practical, auditable way to secure AI in production.

When Disruption Becomes Risk: Why Law Firms Can't Afford to Go Dark

For generations, law firms have assessed risk through precedent, probability and professional judgement. These disciplines are still important, but on their own they no longer describe the reality law firms now face. A different category of risk has moved into the centre of senior decision making. It is not abstract, theoretical or easily deferred. It cuts across practice areas, firm size and seniority. When it materialises, it does not wait for alignment or deliberation.

Connected Vehicles, Accelerating Risk: Inside the Cyber Threats Facing Automotive

The automotive industry is changing faster than ever, with smarter factories, connected vehicles, digital supply chains, and software-driven everything. But as the industry accelerates into this new era, something else is racing alongside it: cyber threats. Over the past year, Bitsight Threat Intelligence data has shown a sharp rise in ransomware activity targeting companies across the auto ecosystem. And what’s striking is how often the same names keep appearing.

How to wrangle SaaS contract renewals

SaaS contract renewals have a way of sneaking up on IT and Finance teams. One day, everything is running fine. The next, a renewal notice hits your inbox, usually with little context, limited time, and no clear answer to the most important questions: Who’s using this? Do we still need it? And are we paying for more than we should?

From Alert to Intelligence in Minutes: How ThreatQ + ANY.RUN Transform SOC Triage

Modern SOC teams are overwhelmed by volume, fragmented tools, and manual pivots. Here’s how integrated intelligence turns Tier 1 alerts into decisive, evidence-backed action without escalation. Security operations today are defined by scale, speed, and scrutiny. Tier 1 analysts face a constant stream of alerts, many of which lack context, prioritization, or clear indicators of impact. Every manual pivot between tools introduces delay. Every delayed verdict increases risk.

Best DLP solutions for enterprise data protection in 2026

Enterprise DLP solutions in 2026 must cover far more than email and USB channels. With many employees pasting data into GenAI prompts and sensitive data flowing across cloud, SaaS, and browser-based AI tools, legacy DLP architectures leave critical gaps. Choosing the right platform requires mapping where sensitive data lives, identifying real exfiltration paths, and deciding whether a standalone, native, or converged DSPM-plus-DLP architecture fits your environment.

The Economic Argument: The Real Cost of Insecure APIs in the AI Era

When cybersecurity teams talk about risk, they usually speak in technical terms like vulnerabilities, exploits, and attack vectors. But when they walk into the boardroom, they need to speak a different language. They need to speak about cost. In the era of AI, the cost of insecure APIs has shifted from a potential liability to a tangible line item on the balance sheet. It is no longer just about the cost of a data breach.

Now Available: Cyberhaven's Free AI App Risk Checker

Most security teams are being asked to "enable AI" before they have any real sense of which tools are safe to use. That gap is costing them. Cyberhaven's research found that the majority of AI tools in active enterprise use today fall into high or critical risk categories, and more than 80% of enterprise data flowing into AI is going to those risky tools, not to platforms built with serious security in mind. To help security teams cut through the noise, we built the Cyberhaven AI App Risk Checker.

The £2 Million Reason Your CISO Needs Power

Major incidents demand rapid hiring, outside support and big spends within hours, not after weeks of approvals and budget meetings. Strong incident response gives security leaders pre agreed authority to sign contracts and access funds, so they bring in hundreds of specialists at speed instead of watching the breach spread. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..

Managing CMMC Risk Throughout Your Contract Lifecycle

CMMC enforcement is here. With DFARS clauses 7021 and 7025 now active across the defense industrial base (DIB), contractors face enforceable obligations that extend beyond prime contractors to every tier of the supply chain. While primes have received significant attention, subcontractors encounter distinct challenges in managing CMMC risk from pre-award decisions through contract execution and ongoing compliance maintenance.