Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Real AI Agent Risk Isn't Data Loss. It's Unauthorized Action.

Your AI Agent just updated a vendor’s payment details in your Enterprise Resource Planning (ERP) system based on a seemingly harmless prompt. No data was exfiltrated. No access policy was violated. But now, a $250,000 payment is sitting in a fraudulent bank account. This is the new face of AI risk. As enterprises adopt AI Agents - either off the shelf or custom built, security teams are facing a fast-moving shift.

Force multiply your team and monitor your entire program with Vanta's AI-powered Trust Management Platform

As your security and compliance program matures, so does your need for visibility and control. Internally, teams need a centralized view—a single place to monitor progress, align on priorities, and collaborate across functions. But during an audit, not everything needs to be shared with your auditor. ‍ Yet, most GRC tools aren’t built to make that distinction.

How AI Is Redefining Fraud Detection

Card fraud is escalating at an alarming rate, with no signs of slowing down. In a world where digital payments have become the norm, almost everyone, consumers, businesses, and financial institutions, finds themselves at risk. The convenience of card payments has made them an essential part of daily life, but it has also paved the way for sophisticated fraud schemes. For businesses, the stakes are even higher.

Charlotte AI - Agentic Workflows: Data Egress Pattern Analysis

Sensitive data moves in and out of your organization every day. But how do you know when routine becomes risky? With Charlotte AI Agentic Workflows, CrowdStrike helps you fast-track the hunt for suspicious file activity—so you don’t have to. From after-hours uploads to unsanctioned cloud storage, Charlotte AI helps you analyze file movement across your environment. By reviewing Falcon Data Protection events, applying a foundational model, and generating a structured, actionable report, this demo shows how agentic automation brings clarity to chaos—no log diving required.

We're Building Cars While Driving Them" - AI's Wild West Problem

Is anyone setting standards for AI? Researcher Gabriele Hibbert delivers the perfect metaphor for our current AI moment: "We're building the cars while driving them." Her solution? Creating standardized "nutrition labels" for AI tools that can evolve with the technology. The first step toward taming the AI Wild West.

Falcon Exposure Management AI Asset Criticality: Demo Drill Down

Security teams are overwhelmed by thousands of assets and alerts, with no clear path to prioritize what matters most. Falcon Exposure Management’s AI Asset Criticality feature delivers scalable, intelligent asset classification powered by human insight and machine learning. This demo shows how teams can move from manual tagging to AI-driven prioritization, helping them focus on critical risks, sharpen attack path analysis, and stay ahead of threats.

Cato CTRL Threat Research: Uncovering Nytheon AI - A New Platform of Uncensored LLMs

With the introduction of WormGPT in 2023, threat actors have been using uncensored large language models (LLMs) for malicious activities. Following the shutdown of WormGPT in the same year, numerous alternatives have emerged—including BlackHatGPT, FraudGPT, and GhostGPT, among others—primarily accessible through Telegram channels.

AI-automated Fuzzing Uncovers Two More Vulnerabilities in wolfSSL

Daniel Pouzzner from wolfSSL has challenged us to find 3 more vulnerabilities in the wolfSSL library, after we found the first one in October 2024. We weren't quite able to find three, but here are the additional two that we found: Both vulnerabilities were fixed in wolfSSL version 5.8.0, released on 24 April 2025. The fuzz tests that found these vulnerabilities were generated by our AI Test Agent.

The EU AI Act: What MSPs Need to Know ?

The EU AI Act is the most comprehensive law in the world to regulate artificial intelligence. This law doesn’t just apply to organizations inside the European Union, it also affects anyone doing business with the EU or offering AI-powered services in that market. If you use AI tools like ChatGPT, Copilot, Jasper, or Bard for automation, reporting, or client communication, yes, then definitely this applies to you.

Build Fast, Stay Secure: Guardrails for AI Coding Assistants

AI coding assistants like GitHub Copilot and Google Gemini Code Assist are changing how developers work — accelerating delivery, removing repetition, and giving teams back time to build. But speed isn’t free. Studies show that around 27% of AI-generated code contains vulnerabilities, not because the tools are broken, but because they generate code faster than most teams can review it. The result? A growing wave of insecure code is making it into production.