Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How Lean Security Teams Stay Ahead of AI-Powered Attacks

In “Terminator 2“, the T-800 does not win because humans worked harder. It wins because the same machine capability that made it dangerous was reprogrammed to fight for the defenders. Project Glasswing is exactly that. Claude Mythos Preview is Anthropic’s most powerful AI model and the one they refused to release publicly because it autonomously found thousands of zero-day vulnerabilities across every major operating system and browser. Flaws that decades of expert review never caught.

Stop Guessing AI Security: A Maturity Reality Check

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

AI Agents Are Already Running the Enterprise. Security Hasn't Caught Up.

For years, conversations about AI security risks were framed as forward-looking. Organizations were told to prepare for a future where autonomous agents would act on their behalf, access sensitive systems, and make consequential decisions without human intervention at every step. That future, it turns out, is now.

Why AI won't steal your SOC analyst job

Let's address the elephant in the room, or I should say … the AI in the security operations center (SOC). If you're an SOC analyst, you've probably heard the doom and gloom predictions — AI is coming for your job! AI will replace you! Start updating your resumes now! In all honesty, that probably is not the case. AI isn't going to take your job, but it will change how you do it — and that's brilliant news.

How to Secure AI Agents Accessing Enterprise Data: A Complete Guide

Artificial intelligence is changing how a business handles its operations, and that too very rapidly. AI agents can easily read, analyze, and act on enterprise data in real time. This ease also brings serious risk. If not managed well, these systems can expose sensitive information, break compliance rules, or even make harmful decisions. Did you know that on average, the overall cost of a data breach reached $4.45 million in 2023?

How to know if your agents are correct with Dylan Williams

Join us for this week's Defender Fridays as we explore AI agent evaluation with Dylan Williams, Co-founder and Chief Research Officer of Spectrum Security. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.

OpenAI Revokes macOS Code Signing Cert After Axios Supply Chain Hit [Actions Required]

Something big just happened in the cybersecurity world. And if you’re using OpenAI’s macOS apps… this affects you directly. OpenAI has rotated its macOS code-signing certificates after a supply chain attack quietly slipped into its workflow. No, your data wasn’t stolen. But yes, this is serious enough that every macOS user must update before May 8, 2026.

What Makes AI Agents Different from Traditional Automation Tools?

With the growing buzz around artificial intelligence, many businesses still struggle to separate hype from reality. Everywhere you look, tools are labeled as "AI-powered," yet a large portion of them are simply upgraded versions of traditional automation. This creates confusion for decision-makers who are trying to understand whether they truly need AI or if their existing systems are already sufficient.