Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Americans Lost $900 Million to AI-Powered Scams Last Year

Jun 19, 2026 By KnowBe4 Team In KnowBe4
The US Federal Bureau of Investigation (FBI) warns that Americans lost just under $900 million to AI-powered scams in 2025, Malwarebytes reports. Total reported losses to scams last year reached nearly $21 billion, a 26% increase from 2024. The researchers note that the true losses are likely much higher, since many attacks go unreported. “The main drivers behind the rise in AI-powered scams are voice cloning, deepfake images and videos, and AI‑generated scripts,” Malwarebytes says.
Read Post
miniorange

mTLS for AI Agents

Jun 19, 2026 By Minal Purwar In miniOrange
AI agents are increasingly accessing APIs, databases, SaaS applications, MCP servers, and other services without human intervention. As these autonomous systems become part of enterprise infrastructure, organizations need reliable ways to verify their identity before granting access to sensitive resources. Traditional authentication methods such as API keys and bearer tokens were designed for applications and users, not autonomous agents operating continuously across distributed environments.
Read Post
nightfall

AI Agent Security Explained: Agents, MCP, Prompt Injection, and the AI Harness

Jun 18, 2026 By Brian Hutchins In Nightfall
AI Agent Security is quickly becoming one of the most important areas in cybersecurity. Terms like "agent," "harness," "MCP," "tool calls," "tool responses," "instruction hijacking," "indirect prompt injection," "prompt exfiltration," and "tool misuse" are appearing in conference talks, vendor announcements, podcasts, and industry discussions, often without clear explanations.
Read Post
Arctic Wolf

AI Export Controls and the Risk of Slowing Down Defense

Jun 18, 2026 By Nick Schneider In Arctic Wolf
The Trump administration has ordered Anthropic to restrict access to its most advanced AI models, Fable 5 and Mythos 5, citing national security concerns. Officials raised the possibility that these systems could be used by foreign actors to identify software vulnerabilities or support cyber attacks.
Read Post
Feroot

What Canada's Bill C-36 Means for AI-Powered Digital Experiences

Jun 18, 2026 By Feroot In Feroot
As Canada strengthens privacy protections and enforcement, organizations must find a way to accelerate AI innovation while maintaining continuous visibility into how customer data is collected, shared, and protected. Canada’s proposed Bill C-36 is about more than privacy regulation. It reflects a broader challenge facing governments, regulators, and businesses around the world.
Read Post
sumologic

AI across the security lifecycle

Jun 18, 2026 By Michelle Beastall In Sumo Logic
For nearly a decade, the security industry has used machine learning to solve detection. By feeding it enough logs and determining abnormal behaviors, it found the threats that rules-based systems miss. This delivered sharper anomaly detection, fewer false positives, and UEBA is now essential. In fact, threat detection and analytics account for close to 44% of total SIEM spend, the single largest use case by far. Using machine learning for detection was only the start.
Read Post

Why 72% of Security Budgets Are Aimed at the Wrong Thing | Reach Security x Insurity

Jun 18, 2026 By Reach Security In Reach Security
72% of security budgets still go to detection and response, not prevention. That is the thread running through the latest episode of The Security Strategist, where EM360Tech's Shubhangi Dua talks with Garrett Hamilton, CEO of Reach Security, and Jay Wilson, CIO and CISO at Insurity. With the majority of budgets still pointed at detection and response, the conversation makes the case for swinging the pendulum back toward prevention, and why the tech can finally back it up.
View Video

An AI Hacked Its Way to Root Access. Nobody Told It To.

Jun 18, 2026 By SafeBreach In SafeBreach
An AI agent orchestrated a fully automated offensive campaign across 648 firewalls in 55 countries — credential harvesting, network recon, lateral movement, no human operator driving it. That's Cyberstrike AI, March 2025. Not a lab demo. A working operation in the wild. Then in February, a separate incident: a coding agent — not deployed for offense — hit an authentication barrier, found an alternate path to root, and took it. Emergent offensive behavior from a model that wasn't asked to attack.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.