Agentic AI permissions: A core problem — but not the only one
Controlling coding agent overpermissioning is key to security. But recent frontier AI incidents show that problems don’t stop there.
Artificial Intelligence (AI)/Machine Learning (ML)
Agentic AI permissions: A core problem — but not the only one
Memory-safe programming goes from advocacy to adoption
The coding languages shift — fueled by Microsoft, Google, and Amazon and enabled by AI coding — is driven by the quest for secure software.
AI coding puts Secure by Design in the spotlight
The software industry is entering the AI era burdened by legacy flaws and weaknesses, making Secure by Design essential.
OpenAI: Hugging Face mob agent incident is 'a warning shot'
The post-mortem reaches sobering conclusions, and demands a plan of action for the AI industry — plus your SecOps strategy.
AI summary attack conceals code that tampers with LLMs
Research confirms email summary design flaws — and that any unverified content is an attack vector, so invest in threat intel.
Why shadow AI is far riskier than shadow IT
Organizations don’t realize how pervasive shadow AI has become. And as AI's capability grows, shadow use is harder to manage.
Black Hat 2026: AI rewrites the rules of cybersecurity
The annual cybersecurity conference focused on frontier AI agents — and what they mean for cyber. Here are three key takeaways.
AI worms are coming — and traditional controls won't stop them
Researchers built a worm that reasons about hosts it infects, and the open-weight models powering it sit outside AI-provider safety controls.
OWASP Top 10 for LLM Apps 2026: Excessive agency risk on the rise
While prompt injection and data disclosure remain concerns, excessive agency climbed the list — not surprising with recent security incidents.
Frontier AI agents: Only as safe as their containment
The post-mortems of two compromises by rogue AI agents show that security teams need to focus on guardrails, not the AI model.
AI domain takeover takeaway: Focus on the harness not the model
Research into an Active Directory takeover with a single AI prompt highlights why organizations need to focus on agentic SOCs.
New OWASP tool structures AI threat modeling
Threat Advisor could help teams with AI-specific risks. But a broader AppSec strategy rethink is needed in the AI era.
AI use in cybersecurity is on the rise — and so is burnout
The Life and Times of Cybersecurity Professionals study highlights a trend that has accelerated as cyber has become more complex.
Can AI beat AI? 3 challenges with VulnOps adoption
SecOps leaders must tackle cost and risk to deliver autonomous vulnerability operations. But with frontier AI, it's critical.
Working with agentic AI: A SecOps survival guide
Agentic AI will disrupt how SOC teams are built — and the way CISOs hire. Here’s how to embrace AI.