Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Tokenpocalypse: Who pays when the AI bill comes due

On this episode of Masters of Data, we dig into what we're calling the tokenpocalypse, the real cost of running AI at the scale most of us have quietly slid into. We trace the whiplash of the past two years, from "everyone needs the AI hammer" to backlash against obvious AI slop, then get into the harder question of what happens when a mission-critical process runs out of tokens, from chaining Claude to Databricks for a custom dashboard to the eye-watering budget Uber reportedly burned through by April.

Why Developer Endpoints Are the New Secrets Battleground

Secrets migrated from private repos to developer endpoints. Attackers no longer hack access. They log in with stolen credentials and move laterally. Dan Nguyen-Huu, Partner at Decibel Partners, explains what the shift means for defenders and where innovation is headed. "The endpoint is largely going to become one of the big new battlegrounds. I think there's also going to be new innovation on the endpoint as it pertains to new companies, maybe trying to think about DLP in a different way.".

Inside Agents of Chaos | Playthrough with a CrowdStrike Security Researcher

Watch Joey Melo, Principal Security Researcher at CrowdStrike, take on AI Unlocked: Agents of Chaos and see how he approaches the challenges, manipulates autonomous AI agents and works his way through the game. Now it’s your turn. All three acts are open, with increasingly difficult challenges waiting. Put your skills to the test, climb the global leaderboard and compete for a share of up to $100,000 in cash prizes.*

Wild code: You can't govern what you can't see

AI changed who can build. Employees across the business can now create workflows – apps, agents, and automations, faster than ever before. The result is a growing wave of “wild code”: AI-generated software, automations, and agents that solve real business problems but exist outside traditional governance, operational ownership, and support models. For IT, this creates a new challenge. How do you empower teams to move quickly without creating more risk, complexity, and technical debt? How do you support innovation without opening the door to shadow AI, data leakage, and unmanaged systems?

OT vulnerability management for Windows and Linux workstations

OT vulnerability management for Windows and Linux workstations means discovering, assessing, prioritizing and remediating, or deliberately mitigating, software flaws on the general-purpose computers that run supervisory control, historian and engineering functions inside a plant, without disrupting the physical process those computers support. That definition already implies a second, separate layer: the PLCs, RTUs and field devices that this same approach cannot safely touch.

The AI SOC is commoditized. Here's why building our own is the next frontier.

If you walked the floor at Black Hat this year, you likely noticed a glaring trend: the AI Security Operations Center (SOC) is no longer a bleeding-edge novelty. It’s officially a commodity. With close to 70 AI SOC platform companies vying for attention, the market is completely saturated. What was once the hottest standalone category in cybersecurity is rapidly becoming a standard feature.

ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell

Your Mac runs a vulnerable version of Parallels Desktop. A malicious package, compromised CI job, or other unprivileged process is already running on it. No admin access. No Parallels-signed client. One appliance-install request later, attacker-controlled code runs as root. While testing Desktop 26.4.0 (build 57513) on Apple silicon, we found that an unprivileged local user could execute code as root through prl_disp_service.

MSP Perspectives 2026: The evolution of the MSP cybersecurity value proposition

MSPs are no longer simply being asked to manage technology; increasingly, customers are expecting them to provide cybersecurity leadership, deliver compliance programs, and guide security investment. Sophos’ 2026 MSP Perspectives Report reveals how demand for cybersecurity leadership, maturing compliance offerings, and the battle for scale are all shaping the managed services market.

Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation

On September 14, 2026, Cisco disclosed a vulnerability in Cisco Secure Email Gateway. CVE-2026-76461 is a critical (CVSS score of 9.8) SQL injection flaw in the email parsing functionality of Cisco AsyncOS Software. Successful exploitation “could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.” Cisco confirmed exploitation of the vulnerability in the wild, and the U.S.

Messageboards are all they need

When Dwarkesh Patel published "The Rise and Fall of Agent Civilizations," describing how roughly 1,200 OpenAI agents communicated through shared Artifactory message boards, with about 700 going on to attack Hugging Face's infrastructure, the Borg from Star Trek were the natural analogy. Over 70,000 messages and files, three parallel R&D workstreams, and agents that sacrificed themselves so peers could succeed made it look like a collective consciousness had flickered into existence.