Tag
All topics →Securing AI systems: the new attack surface across models, agents, pipelines, and the supply chain behind them.
16 stories, newest first.
Latest
The Salesloft Drift breach hit 700+ companies with stolen OAuth tokens and never touched a password. Machine identities now outnumber humans 80 to 1, and AI-powered attackers are harvesting them at machine speed. Here is why human-shaped IAM cannot protect AI agents, and what to fix in 90 days.
Read the article
Hugging Face detected the intrusion on July 16. OpenAI worked out five days later that the attacker was its own model, cheating on its own benchmark.
Agents can already prove who they are. What no standard has cleanly solved is passing scoped authority down a multi-hop chain across organizations. Here is the real state of agent identity in 2026, minus the blockchain hype.
Machine identities now outnumber humans by 45 to 1 or more, and every AI agent widens the gap. Here is what an identity orchestration layer is, in plain terms, and how to build one that governs humans, workloads, and agents from a single control plane.
Traditional vulnerability cycles take months from discovery to patch. AI compresses that to hours. CrowdStrike reports 29-minute breakout times and 89% more AI-augmented attacks year-over-year.
MCP concentrates every AI-agent-to-tool interaction through one interface, and that makes it a new attack surface. A breakdown of the vulnerabilities and how to secure them.
The leading non-human identity (NHI) management tools for 2026, compared by job: discovery and posture, secrets management, machine identity, and workload identity.
The leading CNAPP tools for 2026, compared by collection model and breadth: agentless-first platforms, broad full platforms, agent-led tools, and cloud-native specialists.
The leading external attack surface management (EASM) tools for 2026, compared by job: automated asset discovery, attribution, risk scoring, and continuous monitoring.
The leading AI Security Posture Management (AI-SPM) tools for 2026, compared by job: AI asset discovery and posture, model supply chain security, runtime protection, and governance.
A poisoned LiteLLM package led to 4TB stolen from Mercor, the AI training startup serving Meta, OpenAI, and Anthropic. Class action lawsuits filed.
How to build a cybersecurity product roadmap that survives AI security, compliance deadlines, and threat-driven emergencies. A founder's four-lane framework.
Whether you're considering Grok AI for cybersecurity operations, customer engagement, content creation, or internal knowledge management, this resource
Dive into the world of AI agent authentication, where cutting-edge security meets autonomous systems.
Discover how robots.txt has evolved from basic crawler control to a sophisticated security instrument.
Finding the right equilibrium between leveraging generative AI for cybersecurity and mitigating its potential drawbacks is crucial.
