Expert perspectives on application security, compliance, and emerging threats
ResearchUnderstanding the AI Usage Disparity Akamai s State of the Internet: Enterprise AI Usage Risk Report 2026 highlights a critical issue: the top 5% of AI users in your organization engage with AI models
GuidesYour developers are using ChatGPT to debug code. Marketing is running campaign copy through Claude. Support is testing AI chatbots you didn t approve. According to Gartner analyst Andrew Walls, every
IncidentWhat Happened OpenAI president Greg Brockman published a blog post urging CISOs to adopt agentic AI systems, specifically recommending OpenAI s own products. His pitch is that company systems are hidi
GuidesThree months ago, a security engineer asked me: Do I need to treat our code generation bot the same way I treat service accounts? Last month, a compliance manager wanted to know if AI agents count tow
Get weekly security insights and compliance updates delivered to your inbox.
IncidentWhat Happened In 2026, Klue, a SaaS competitive intelligence platform, experienced a breach through an unused service account credential. This credential, created for a pilot project and never deactiv
IncidentOn January 14, 2025, Anthropic published research on Mythos Preview, an AI system that autonomously completed a 32-step corporate network attack simulation. This wasn t about a real breach, but it rev
IncidentWhat Happened Anthropic launched Glasswing, a $100 million initiative to use AI for identifying vulnerabilities at scale. They soon released Claude Mythos, an AI system designed to autonomously discov
GeneralThe Conventional Wisdom Security teams often advise involving your CISO in vendor contracts. They suggest having them review the security questionnaire, participate in the final vendor call, and sign
GeneralSecurity teams can no longer afford to wait on AI. The CrowdStrike 2026 Global Threat Report documented an 89% year-over-year increase in AI-enabled adversary activity. More concerning, the average eC
GeneralThe conventional wisdom: AI coding assistants are a smart investment. For $19-$200/month per developer, you get faster code completion, automated boilerplate, and productivity gains that justify the s
IncidentThe Problem Organizations are facing a systemic issue: 82% carry security debt, meaning they have unresolved vulnerabilities older than a year. These aren t hypothetical risks; they re real flaws in y
IncidentIncident Overview On January 15, 2025, Alibaba released Mythos, an advanced AI model with enhanced reasoning capabilities. Within 72 hours, security vendors began issuing alerts about AI-powered cyber
IncidentWhat Happened Researchers at Hong Kong University of Science and Technology have discovered a denial-of-service attack that exploits AI agent safety systems. This attack, known as reasoning-extension
IncidentThe Issue at Hand Between late 2024 and early 2025, Checkmarx commissioned Censuswide to survey security and development leaders in organizations using AI code generation tools. The findings revealed
GeneralUnderstanding the Shift AI Bill of Materials (BOM) documentation is emerging rapidly, but many security programs are unprepared to utilize it effectively. The idea is simple: catalog AI components in
IncidentThe Emerging Threat Vulnerabilities are being exploited faster than your team can deploy patches. The traditional workflow—discover, prioritize, test, deploy—now lags behind the speed of exploitation.
