Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

6 Key Elements of a Responsible AI Usage Policy

Recently, I had the pleasure of presenting an AI governance-focused webinar with my colleague Neil Jones at Egnyte. In the session, we discussed many ways to improve AI governance, and you can watch and share the complete session replay here. During the session, we discussed the importance of respo nsible AI usage policies. However, my experience is that many organisations struggle to create policies aligned with their business requirements and the technological solutions that they use.

How JFrog and NanoClaw are Bringing Software Supply Chain Security to the Age of Autonomous AI

There’s a category of security risk that most organizations aren’t ready for. It doesn’t live in your code repository, your CI pipeline, or your developer laptops. It lives in your runtime, in the autonomous AI agents already running in your environment, extending their own capabilities, and making decisions that no human explicitly approved. This is the challenge JFrog set out to address with our integration with NanoCo AI and their open-source agent framework, NanoClaw.

Why Uniform Governance Fails with Enterprise AI Agents (And How to Fix It)

As organizations aggressively shift from static Large Language Model (LLM) chatbots to fully dynamic, autonomous AI agents (e.g. systems designed to plan workflows, call APIs, write runtime code, and modify enterprise databases), traditional compliance and governance frameworks are hitting a breaking point. A landmark press release from Gartner highlights a critical systemic risk: treating AI agent governance as a monolithic, one-size-fits-all policy guarantees project failure.

A Step by Step Guide to Creating Realistic Instagram Post Mockups for Presentations

A realistic Instagram post mockup can make a presentation easier to understand, especially when a campaign idea is still being reviewed. Instead of showing a loose image, a caption in a separate file, and notes in a slide, the post can be shown in a format that feels close to the final Instagram layout. This helps agencies, SMM specialists, designers, and brand teams discuss creative choices with less confusion. A good mockup is not about pretending that something was published, but about showing how a post may look before approval, portfolio use, or campaign planning.

TITAN AI Demo Series: How AI Agents Automate KEV Remediation

Most security teams find out about a critical vulnerability after it's been added to CISA's Known Exploited Vulnerabilities (KEV) catalog. By then, the clock is already running. In Episode 3 of SecurityScorecard's Demo Tuesday series, see how TITAN AI Agents automate KEV remediation workflows — so your team spends less time triaging and more time closing exposures. Watch to learn how to: Instantly identify which vendors in your ecosystem are exposed to KEV-listed vulnerabilities.

What the Cloudflare Outage Says About Changes Made Under Pressure

Observability is not the problem anymore. The data that tells you a change will break something usually already exists. Most teams have the events, the logs, the configuration history. What is missing is the step that turns all of it into a clear yes or no on a specific change, while there is still time to pull it. Garrett Hamilton, CEO of Reach Security, on objective data and the changes that get made before anyone checks.

The post-quantum EO is an important milestone. Now it's time to get to work

On June 22, 2026, President Trump signed Executive Order 14409, "Securing the Nation Against Advanced Cryptographic Attacks." The order sets a December 31, 2030, deadline for federal agencies to transition their most sensitive systems to post-quantum encryption, and a December 31, 2031, deadline for post-quantum authentication. The EO also directs federal contractors to comply with post-quantum Federal Information Processing Standards (FIPS) by the end of 2030.

Monitoring Agents and SaaS AI Platforms with Microsoft Agent 365 [Part 1]

Agent usage is exploding and in Microsoft 365, agents aren’t monitored by default. Even though it’s early days for tools that can monitor agents, Microsoft’s newly released Agent 365 evolves this new category with some powerful capabilities. Here are some tips for using Microsoft Agent 365 and related tools to monitor agents. Solutions discussed in this post: This is part 1 of a two-part series.

Introducing AI-assisted query creation in 1Password Device Trust

Today we're shipping a new capability directly into 1Password Device Trust that lets admins query their fleets faster, without needing to be SQL experts. Now you can describe what you want to investigate in plain English, and Device Trust generates a ready-to-run SQL query you can execute across your devices in a single click.