Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

EP 23 - Red teaming AI governance: catching model risk early

AI systems are moving fast, sometimes faster than the guardrails meant to contain them. In this episode of Security Matters, host David Puner digs into the hidden risks inside modern AI models with Pamela K. Isom, exploring the governance gaps that allow agents to make decisions, recommendations, and even commitments far beyond their intended authority.

Stop buying niche tools to secure your AI. #cybersecurity #aisecurity #engineering

In his first prediction for 2026, Ev explains why that strategy is about to fail. We used to let microservices run anonymously because we had bigger fires to fight. But when all software becomes autonomous AI, anonymity is a risk you can't afford. If your software behaves like a human, why separate it from your human identity strategy? The future isn't "NHI." It's a Unified Identity Layer where humans and non-humans are managed as equals.

How Attack Surface Monitoring Improves Mean Time to Detect (MTTD)

Even with modern security tools, many organizations detect threats far too late. Attackers often operate quietly for extended periods because early warning signs go unnoticed. Exposed assets, forgotten services, misconfigured cloud resources, and unmanaged SaaS integrations rarely trigger immediate alerts. This delay increase means time to detect because security teams typically respond only after suspicious behavior reaches internal systems.

The missing piece of the CIA triad: Why 'availability' matters

We are often obsessed with who can see our data(Confidentiality) and how that data is protected from tampering (Integrity). While these are vital, there is a third pillar of the CIA triad that is currently under constant pressure: Availability. A recent Forrester survey revealed a startling reality: 76% of data breaches now affect availability, while only 42% impact confidentiality and 27% affect integrity.

2026 Insider Risk Predictions: What Organizations Must Prepare For

As 2026 unfolds, insider risk is being redefined by AI, behavioral analytics, and cross-functional accountability. The ability to predict risk based on behavior and intent, rather than react to outcomes, is reshaping how organizations defend against internal threats. Meanwhile, persistent factors like hybrid work continue to complicate visibility and oversight, amplifying risk across modern environments.

How Agentic AI Creates Shadow APIs: Security Risks Explained

How Agentic AI Creates Shadow APIs: Security Risks Explained As businesses move from static applications to Agentic AI, the security landscape is shifting beneath our feet. In this clip from the A10 Networks webinar, "APIs are the Language of AI: Protecting Them is Critical," experts Jamison Utter and Carlo Alpuerto discuss a new frontier in cybersecurity: AI that builds its own APIs.

Arctic Wolf and AWS: AI-Powered SOC and Security Incident Response

Discover how Arctic Wolf partners with Amazon Web Services (AWS) to deliver cutting-edge, AI-powered Security Operations Center (SOC) capabilities and advanced security incident response solutions. This video explores how Arctic Wolf leverages AWS cloud infrastructure and artificial intelligence to provide: Learn how this powerful combination enhances your organization's security posture, reduces response times, and protects against evolving cyber threats through intelligent automation and comprehensive managed detection and response (MDR) services.

Intel Chat: Ni8mare CVSS 10.0, malicious AI extensions, Venezuela blackout & BlackCat insiders [281]

A newly disclosed vulnerability in the workflow automation platform n8n, tracked as CVE-2026-21858 and rated CVSS 10.0, allows unauthenticated remote attackers to fully compromise exposed instances. Two malicious Chrome extensions impersonating a legitimate product from AITOPIA were found exfiltrating sensitive user data, including full AI chat histories, according to a report from OX Security. The recent U.S. military operation in Venezuela that led to the capture of President Nicolás Maduro may have included cyber operations, but official confirmation of cyber’s role remains ambiguous.

What We Got Right (and Wrong) about 2025

Watch now for a clear and candid look back at the predictions made for 2025 by Wallarm and by other voices across the industry. During the session, we revisit what people expected to happen in cybersecurity, API security, and the broader technology space, and compare those expectations with what actually unfolded throughout the year.