Tag
All topics →Securing AI systems: the new attack surface across models, agents, pipelines, and the supply chain behind them.
22 stories, newest first.
Latest
The AI observability market split into four segments (infra telemetry, dev tooling, runtime security, autonomous remediation) with a wave of 2025-2026 acquisitions behind it. None of them own whether an agent behaved correctly.
Read the article
A leaked static key is a disaster; a five-minute token is mostly a shrug. Here is the credential lifecycle that gets AI agents from 24-hour tokens to ephemeral ones.
Shadow AI is an employee pasting into ChatGPT. A shadow agent holds real credentials and acts on its own. That is a different, and bigger, problem.
Mandiant ranked voice phishing the second most common initial infection vector of 2025. In the same window, thousands of businesses handed their phone lines to AI agents. Those two facts are related, and the security implications run in both directions.
AI made it cheap to fake a face, a voice, and a video. Here is my working map of the three problems authentication now has to solve, and the tools that actually hold up in 2026: verifying people, verifying agents, and verifying content.
Your AI security review passed and still missed the real attack surface. EchoLeak, over-permissioned agents, shadow AI: the AI-specific vectors most CISOs never test for, and the five moves that close them.
The Salesloft Drift breach hit 700+ companies with stolen OAuth tokens and never touched a password. Machine identities now outnumber humans 80 to 1, and AI-powered attackers are harvesting them at machine speed. Here is why human-shaped IAM cannot protect AI agents, and what to fix in 90 days.
Hugging Face detected the intrusion on July 16. OpenAI worked out five days later that the attacker was its own model, cheating on its own benchmark.
Agents can already prove who they are. What no standard has cleanly solved is passing scoped authority down a multi-hop chain across organizations. Here is the real state of agent identity in 2026, minus the blockchain hype.
Machine identities now outnumber humans by 45 to 1 or more, and every AI agent widens the gap. Here is what an identity orchestration layer is, in plain terms, and how to build one that governs humans, workloads, and agents from a single control plane.
Traditional vulnerability cycles take months from discovery to patch. AI compresses that to hours. CrowdStrike reports 29-minute breakout times and 89% more AI-augmented attacks year-over-year.
MCP concentrates every AI-agent-to-tool interaction through one interface, and that makes it a new attack surface. A breakdown of the vulnerabilities and how to secure them.
The leading non-human identity (NHI) management tools for 2026, compared by job: discovery and posture, secrets management, machine identity, and workload identity.
The leading CNAPP tools for 2026, compared by collection model and breadth: agentless-first platforms, broad full platforms, agent-led tools, and cloud-native specialists.
The leading external attack surface management (EASM) tools for 2026, compared by job: automated asset discovery, attribution, risk scoring, and continuous monitoring.
The leading AI Security Posture Management (AI-SPM) tools for 2026, compared by job: AI asset discovery and posture, model supply chain security, runtime protection, and governance.
A poisoned LiteLLM package led to 4TB stolen from Mercor, the AI training startup serving Meta, OpenAI, and Anthropic. Class action lawsuits filed.
How to build a cybersecurity product roadmap that survives AI security, compliance deadlines, and threat-driven emergencies. A founder's four-lane framework.
Whether you're considering Grok AI for cybersecurity operations, customer engagement, content creation, or internal knowledge management, this resource
Dive into the world of AI agent authentication, where cutting-edge security meets autonomous systems.
Discover how robots.txt has evolved from basic crawler control to a sophisticated security instrument.
Finding the right equilibrium between leveraging generative AI for cybersecurity and mitigating its potential drawbacks is crucial.
