AI changes cyber spending — but where’s the line-item for tokens?
Organizations’ cyber dollars are shifting, not growing. But AI compute costs can spiral — and that is why context matters in your agentic SOC.
AppSec & Supply Chain Security
AI changes cyber spending — but where’s the line-item for tokens?
Agentic AI permissions: A core problem — but not the only one
Controlling coding agent overpermissioning is key to security. But recent frontier AI incidents show that problems don’t stop there.
AI coding puts Secure by Design in the spotlight
The software industry is entering the AI era burdened by legacy flaws and weaknesses, making Secure by Design essential.
OpenAI: Hugging Face mob agent incident is 'a warning shot'
The post-mortem reaches sobering conclusions, and demands a plan of action for the AI industry — plus your SecOps strategy.
Shai-Hulud worm arrests: Why this is not the end
The TeamPCP actors, alleged to be behind one of the most active supply chain threats, were arrested — but this is not the end of Shai-Hulud.
Agentic AI scales semiautonomous server attacks
UAT-10147 leveraged agentic AI to go beyond scripting to deliver a backdoor. The method highlights the need for agentic SOCs.
Black Hat 2026: AI rewrites the rules of cybersecurity
The annual cybersecurity conference focused on frontier AI agents — and what they mean for cyber. Here are three key takeaways.
AI worms are coming — and traditional controls won't stop them
Researchers built a worm that reasons about hosts it infects, and the open-weight models powering it sit outside AI-provider safety controls.
OWASP Top 10 for LLM Apps 2026: Excessive agency risk on the rise
While prompt injection and data disclosure remain concerns, excessive agency climbed the list — not surprising with recent security incidents.
Frontier AI agents: Only as safe as their containment
The post-mortems of two compromises by rogue AI agents show that security teams need to focus on guardrails, not the AI model.
AI domain takeover takeaway: Focus on the harness not the model
Research into an Active Directory takeover with a single AI prompt highlights why organizations need to focus on agentic SOCs.
Why AI coding makes zero trust an AppSec requirement
Traditional SBOMs, signing, and provenance all have blind spots, making them no longer capable of assuring software security.
AI coding agents: A call to action on dependency cooldowns
Delaying software upgrades creates a buffer against poisoned packages, but transitive dependencies continue to be a problem.
Akrites marshals the open source community to counter AI threats
Industry heavyweights bring new focus to vulnerabilities in the age of AI. Here’s how it might help improve security.
New OWASP tool structures AI threat modeling
Threat Advisor could help teams with AI-specific risks. But a broader AppSec strategy rethink is needed in the AI era.