Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI Agents vs. Audit Logs: What We Learned at Security Game Day

Teams of three to four, detective aliases, a magician, and a flag hidden on a Manhattan billboard. This is our second Identity Security Game Day, a tabletop CTF where Teleport engineers and customers team up to simulate the incidents that don’t happen often, but matter when they do. Game days put customers and Teleporters at the same table. You find out how people actually deploy Teleport versus how you expected, spot better ways of doing things together, and build the personal connections remote work rarely gives you.

CISO Risk Intel Brief: Record Patch Volume, Edge Zero-Days, and AI-Accelerated Supply Chain Pressure

This briefing examines material developments across the most recent seven-day period and the preceding thirty days. It is written for executive and board consumption and focuses on residual risk, control effectiveness, material exposure, and the practical implications for application security programs, software supply chain integrity, edge and identity systems, and the accelerating role of AI in both attack and defense.

The AI Revolution for Security Cameras is Here

Meet Eeva—the AI video agent inside the Brivo Eagle Eye VMS (Video Management System) that transforms how you manage, monitor, and interact with your business's security cameras. Instead of just recording footage, Eeva actively watches for the specific events that impact your business daily. No AI training or coding required—just type what you want Eeva to look for in your own words. What can Eeva keep an eye on for you?

How to Find Shadow AI: 3 Hidden Entry Points

For years, companies treated shadow IT primarily as a policy and control problem. Employees have always found and used technology outside the approved IT stack, from unauthorized endpoint applications and browser extensions to personal cloud services. It left a trail: an install, a device on the network, something a scan or an agent could eventually catch. From there, an analyst had to investigate the finding and assess the risk before deciding how to respond.

When Agents Trust Each Other, One Compromised MCP Server Is Enough

The agentic AI security conversation has, for good reason, spent most of its energy on the agents an organization builds or deploys directly: what they're authorized to do, what data they can reach, how their behavior is monitored. I think that focus is necessary and also increasingly incomplete, because the fastest-growing risk surface in agentic AI right now isn't the agents themselves.

The Role of AI Calling in Secure Business Communication

Every business depends on phone conversations. Customers share account details, teams discuss deals, and managers make quick decisions over the line. Because so much sensitive information travels through voice, protecting it matters as much as protecting email or stored files. This is where AI calling has started to play a useful part. In simple terms, AI calling means using artificial intelligence to place, answer, or manage phone calls, often by understanding speech and responding in a natural way. When it is set up with care, it can make business communication safer as well as smoother.

AI governance needs more than a policy document

AI tools have made it remarkably easy for a company to expose its own data: None of these actions seem malicious, but each one moves sensitive information somewhere the security team cannot see. This new era of "move fast and break things”, a phrase famously coined by Mark Zuckerberg in the early Facebook days, benefits attackers. Company data now flows through more places, more third parties, and more delegated credentials.

The Quiet Takeover: How Your Forgotten Cloud Resources End Up Selling Slot Machines

Picture a global telecom company. Three years ago, a marketing team launched a campaign microsite on a cloud platform and pointed a company hostname at it. The campaign ended and the team deleted the app. Nobody deleted the DNS record. A few years ago, that mistake could sit there for a decade. No one was looking. Today, attackers run automated sweeps across millions of domains, resolving every DNS record and checking whether the resource behind it still exists.