Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Best AI Red Teaming Tools: Top 7 in 2026

There was a time when “AI red teaming” sounded like a novelty. Now, it’s fast becoming table stakes. If your organization is shipping machine learning or LLM-powered systems into the real world (especially in sensitive domains), you need to know how those systems behave under pressure. That’s where AI red teaming tools come in. These tools help teams stress-test AI the way it will actually be used (and misused).

Enforcing AI Governance: Why Standard Chatbots Lack Baked-In Security

Enforcing AI Governance: Why Standard Chatbots Lack Baked-In Security Arjoyita Roy and Luca Labardini from A10 Networks discuss the security risks of deploying AI chatbots with functional tool-calling capabilities, particularly in highly regulated sectors such as financial services.

Attackers Use Spoofed ChatGPT Site to Deliver Malware

Researchers at Malwarebytes warn that a fake ChatGPT download site is delivering malware. The attackers use sponsored results and SEO manipulation to target users who search for “ChatGPT download.” The phishing page is a convincingly spoofed version of the legitimate ChatGPT website, which delivers malware tailored to Windows or Mac users.

How Bitsight Supports Hong Kong's Critical Infrastructure Ordinance Cap. 653 in the Post-Mythos Era

Hong Kong’s Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap. 653) represents a major shift in cybersecurity regulation. The law moves beyond traditional compliance exercises and places a much stronger emphasis on continuous operational resilience. For designated Critical Infrastructure (CI) operators, the challenge is no longer simply deploying security controls.

OpenAI's o1-preview Highlights New Security and Infrastructure Challenges in AI Operations

Artificial intelligence continues to evolve beyond simple language generation, with developers increasingly focusing on advanced reasoning capabilities. OpenAI's release of the o1-preview model in September 2024 marked another step in this direction, introducing a system designed to spend more computational effort on solving complex problems before generating answers.

Top AI App Maker Platforms for Startups and Small Businesses

Building a software application used to require a full development team, a serious budget, and months of work. For most startups and small businesses, that was simply out of reach. But things have changed dramatically over the past few years. Today, an AI app maker can help almost anyone turn an idea into a working product without writing a single line of code.

Ep. 62 - Zero Trust Breaks Against MCP: Why "Verified" No Longer Means Safe

Most enterprises assume their Zero Trust architecture covers their AI agents. It doesn't. Hosts Tova Dvorin and Adrian Culley break down why zero trust breaks against the Model Context Protocol (MCP)—and why "verified" no longer means "safe." They unpack trust decay, the WhatsApp and GitHub MCP exploits, rug-pull tool poisoning, CVE-2025-49596, and the rise of "zero standing trust," then close with three moves for CISOs this quarter: inventory your MCP estate, mandate authentication, and validate your controls.

Claude Fable 5 and the New Reality of AI-Enabled Third-Party Risk

Anthropic recently announced the release of Claude Fable 5, a public version of its more powerful Mythos AI model. Technology that was previously only accessible to a select few organizations is now available to businesses at an enterprise level. AI vendors are building the guardrails while threat actors are studying their attack vectors. Essentially, we are giving the keys to the AI world to businesses and hoping the guardrails hold steady. Security teams need to prepare even faster now.

Beyond Prevention: Frontier AI and the Shift to Cyber Resilience

Frontier AI is compressing the time between vulnerability discovery and exploitation, making reactive security strategies harder to sustain. In this webinar, Roland Cloutier (Former CISO of of ByteDance & TikTok, ADP, and EMC) and Gabi Reish discuss how security leaders can move beyond patching everything to prioritize real risk, measure cyber readiness, and communicate security posture to the board.

Securing Your AI Agents: Today's New Data Threat

AI agents are already inside your company - reading files, calling APIs, executing code. Most of them were never approved by security. In this session, Nightfall AI walks through exactly how agents become an attack surface: prompt injection, malicious MCP servers, credential exfiltration, and more.