Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Identity Crisis Your Security Team Didn't See Coming

AI is transforming the identity landscape, and legacy systems were only designed to secure human identities, not non-human identities, machines or AI agents. Today, cybersecurity vendors are reinventing their solutions to address emerging threats while teams are rethinking their technology stacks and strategies. Keeper Security has been unified by design since day one.

The Top AI Coding Agent Risks And How To Mitigate Them

AI coding agents are now writing and shipping code with far less human review. Is your security keeping up? Veracode CISO Sohail Iqbal breaks down the top security risks of AI coding agents and agentic AI, and what security teams should put in place first. If code is written at machine speed, it has to be remediated at machine speed. What you will learn: Chapters: Subscribe for more insights on Application Security, AI Coding, and DevSecOps.

How Autonomous Pentesting Makes Hunting Business Logic Vulnerabilities Cheaper

For the ten years I have watched this industry, hunting business logic vulnerabilities has been notoriously expensive and exceedingly difficult. Every attempt to bring the cost down has hit the same wall. Now, for the first time, we as an industry have the capability to meaningfully lower the ceiling on what this work costs. I would argue Astra’s autonomous pentesting platform is pioneering that shift.

Falcon Guardian: Claude Code Hooks Demo Drill-Down

Claude Code reads your developers' files and runs commands in their shell. A Social Security number pasted into a prompt or an API key in a.env file can reach the model, and a single force push can overwrite a shared branch. This demo shows how to secure Claude Code with CrowdStrike Falcon Guardian. Claude Code Hooks run a check at set points, such as when a developer submits a prompt or before a tool runs. Falcon Guardian uses those hooks to check prompts and tool calls against a central policy, deployed through Claude Code's managed settings file so developers can't override it.

Architecting Trust: The Data Pipelines and Infrastructure Behind The Guardian Agents

As AI agents operate with increasing autonomy in enterprise production, the sheer volume of security telemetry they generate creates an unprecedented scaling challenge. Human oversight remains required in many enterprises, while legacy triage tools simply can't keep up. To help security teams cut through the noise, Zenity’s AI group built the Blue Agent.

Zenity Launches Universal Runtime Control for Claude Enterprise

Anthropic's Inference Hooks update lets security teams validate Claude's tool calls before they run. Zenity supports it across Claude's surfaces, so teams can approve write-capable connectors, Model Context Protocol (MCP) servers, and wider Claude Code rollouts with policy on each action.

Why Security Controls Need a Source of Truth | Garrett Hamilton on TAG Infosphere

Every security team has a source of truth for its assets and its identities. Very few have one for how those assets are protected. Here Garrett explains what that source of truth has to look like and why it has to be deterministic. Garrett joined Ed Amoroso of TAG Infosphere for a wider conversation on AI, security controls, and assurance. The full interview covers.

The New Frontier of Malicious AI: What Underground Forums Tell Us About the Evolution of Cybercrime Tradecraft

Public discussion of AI-enabled cybercrime tends to lean heavily on vendor marketing and speculation about future capabilities. We wanted to measure what criminal practitioners are actually discussing, what tools they prefer, and where their attention is shifting.

Who owns your AI agents? Probably no one

AI agents are multiplying faster than most organizations can track, let alone govern. IDC predicts there will be 1.3 billion agents by 2028. Every team that adopts one is also, often without meaning to, creating a new identity. And it’s one that can access systems, move data, and act on someone's behalf. The rush right now is to get ahead of that before it spirals, and the first step is to answer a basic question: whose job is this?