Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cato AI Security: Is Your Security Stack Built for How AI Works?

AI adoption is accelerating across enterprises — often faster than security teams can respond. Employees are using AI tools and copilots across SaaS apps and workflows, creating new exposure around sensitive data, shadow AI, and attack surfaces that traditional tools weren't built to see. This video breaks down the four AI security challenges every enterprise is facing, where existing controls fall short, and how Cato AI Security gives you visibility, guardrails, and enforcement across the AI your employees use, the applications you build, and the agents acting on your behalf.

Securing Homegrown Agents in Runtime: The Value of Zenity + Microsoft Foundry

How the integration works: Zenity integrates with the Foundry control plane to inspect agent behavior and enforce security policies inline at runtime. Over the past year, Microsoft Foundry has emerged as a cornerstone for enterprises building and deploying homegrown agents at scale. Organizations across industries are using Foundry to move beyond experimentation and into production, creating AI agents that can reason, invoke tools, access enterprise data, and automate complex workflows.

I Faked a Receipt with ChatGPT

Generative AI can produce realistic taxi receipts, complete with stains and wear, which blend into digital expense workflows that expect only a quick photo upload. As more organisations move to app based reimbursement, synthetic documents slip through unless controls, audits and behavioural checks keep pace with these tools. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..

I Read Cursor's Security Agent Prompts, So You Don't Have To

Cursor's security team built four autonomous agents that review 3,000+ PRs per week, catch 200+ vulnerabilities, and open fix PRs automatically. The engineering is impressive, and the prompts are shockingly simple. But there's a meaningful gap between "LLM agents reviewing PRs" and "enterprise security program," and that gap is exactly where things get interesting.

Why Marketing Teams Are Rethinking the Way Customer Personas Are Built

How well do marketing teams really understand their customers today? For years, businesses have relied on buyer personas (detailed profiles representing their ideal customers) to guide messaging, campaigns, and product positioning. And the concept has clearly gained traction: studies show that 44% of marketers already use buyer personas, while another 29% plan to adopt them soon.

How to Protect Sensitive Data from LLMs | AI Data Privacy Demo

AI tools like ChatGPT, Gemini and other LLMs are powerful — but what happens when sensitive data gets sent to them? In this video, we demonstrate how Protecto AI prevents sensitive information from reaching LLMs using Masking APIs and Unmasking APIs. You’ll see a real workflow where user prompts containing credit card details and personal data are automatically masked before being processed by an AI model like Gemini 2.5 Flash.

WhatsApp Is the Latest Example Of Why Every New AI Feature Outpaces Legacy DLP

Every new AI feature that ships into a platform your employees already use is a security question your stack probably can't answer yet. It sounds like hyperbole, but it's the structural reality of how AI adoption works in 2026. A recent update to WhatsApp is a useful illustration of why.

AI Workload Security on AWS: Evaluating Native Tools vs Third-Party Solutions

Your Bedrock agent running on EKS receives a prompt through your RAG pipeline. CloudTrail logs it as a normal bedrock:InvokeModel event—status 200, authorized IAM role, expected endpoint. But inside the container, the agent’s response triggers a tool call that spawns curl to an external IP, exfiltrating the context window. GuardDuty doesn’t flag it because the connection routes through a permitted VPC endpoint. You open your AWS console and see a healthy API call.

How to Evaluate AI Workload Security Tools for Enterprise Teams

You’ve sat through three vendor demos this week. Vendor A showed you an AI-SPM dashboard with a pie chart of misconfigurations. Vendor B showed you a nearly identical dashboard with different branding and a slightly wider set of compliance frameworks. Vendor C showed you posture findings with an “AI workload” tag that wasn’t in their product last quarter.