Tag
Suhail urges organizations worldwide to adopt strong frontier cyber AI models and continuously sweep their systems for vulnerabilities, framing AI-driven cybersecurity as the new normal.
Box CEO Aaron Levie argues that AI agents will transform cybersecurity both as an attack vector and a defense tool, citing an example of GPT-5.6 Sol autonomously discovering a critical Chrome vulnerability affecting an estimated 1 billion users.
HashiCorp archived the Boundary Community Edition open source repository on October 8, 2026, ending active development and shifting future work to HCP Boundary and Boundary Enterprise.
RSA launched Agent ID and SailPoint expanded its Agentic Fabric within days of each other, both adding runtime authorization and guardrails for enterprise AI agents — highlighting that 79% of enterprises run agents in production while only ~2% have identity governance tools for them.
Box CEO Aaron Levie shares thoughts on the emerging need for long-term safety and governance approaches as AI agents take over task execution in enterprises, arguing frontier models should be treated like insider risks in a 'zero trust' style architecture with layered controls and auditability.
Reco has raised $55 million in funding to enhance its AI agent security platform, amid a surge in vendors offering solutions to secure AI agents in enterprise environments.
Okta's survey of 292 executives reveals that only 34% apply the same security controls to AI agents as to human employees, highlighting a significant security oversight in AI adoption.
The Model Context Protocol (MCP) has published an updated roadmap outlining five priority areas for development, including agentic messaging primitives, HTTP-native transport unification, and agent identity security. The roadmap sets the direction for protocol work over the coming months, developed by core maintainers and the community.
Google Workspace Studio enhances enterprise security with new features like Agent Identity for minimal permissions, strengthened audit logs, and enhanced administrative controls, enabling safer agentic automation and cross-user collaboration.
This article outlines a practical, phased path for enterprises to transition to post-quantum cryptography, framing the quantum threat as a manageable evolution rather than a sudden crisis and citing government timelines as useful guideposts.
Tavily promotes its web retrieval API for financial AI agents, highlighting use cases like real-time risk research, due diligence automation, and AML case work, with security features like zero data retention and prompt injection protection.
Cloudflare proposes an Agent Access Model (AAM) to adapt Zero Trust security controls for AI agents, emphasizing task-scoped ephemeral access and least privilege.
Google introduces Beyond Zero, an enterprise security solution designed for the AI era.
A security expert discusses the challenge of securing identity tokens for LLM agents that access sensitive resources, and proposes a proxy-based approach to bind tokens to specific environments to prevent credential theft.
This article presents a 28-point compliance checklist for AI agents in enterprise environments, covering logging, access control, data handling, security testing, runtime protection, and incident response, mapped to frameworks like EU AI Act and SOC 2.
NewCore emerges from stealth with $66M to provide an identity and access management platform specifically designed for AI agents, treating them as first-class identities alongside human employees.
Google Cloud COO Francis de Souza discusses the urgent need for integrated AI security strategies, warning about shadow AI and advocating for platform-based, multicloud security approaches with agentic defense.
OWASP发布了首个针对自主AI代理的Top 10安全风险列表（2026版），涵盖目标劫持、工具滥用、供应链攻击等威胁，并引用调查指出88%的企业在过去一年遭遇过AI代理安全事件。
An analysis of the modern cybercrime landscape, highlighting the industrialization of cybercriminal methods using automation and AI, and the five key factors influencing enterprise cybersecurity.
A security engineer at a B2B tech company seeks advice on preventing data exfiltration from employee-built AI tools ('vibe-coded' agents) using session-level DLP without forcing an enterprise browser, discussing options like browser extensions and agentless SSE solutions such as Red Access.