Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Alert fatigue in DLP and insider risk management (IRM) programs doesn't get solved by adding more analysts or writing more rules. It gets solved when the system generating the alerts can already tell the difference between routine activity and genuine risk, so the queue analysts see is short because it's accurate, not because thresholds were loosened. That distinction matters because the two failure modes look identical from the outside.

Most organizations that try to write an AI security policy start with two lists. Approved tools and banned tools. But, that list is inevitably out of date within a month. Employees adopt AI features embedded in everyday software faster than any review board can evaluate them, and a blanket ban does not stop the behavior, instead it pushes people toward personal accounts and unmanaged services.

Every security architecture review this year eventually lands on the same question: does the existing data security stack already cover AI, or does AI security need its own budget line? The instinct to treat this as one more tool to evaluate and buy is understandable. It is also the wrong framework for modern data security. Traditional data security and AI security answer different questions about the same data. One assumes data stays inside known applications and moves through known channels.

An employee pastes a customer contract into ChatGPT to summarize it. Nothing gets attached, nothing crosses the network in a file, and no alert fires. That is the gap most LLM security advice does not address. Prompt security is not the same problem as prompt injection or model hardening. It is a data problem consisting of what enters a prompt, what an agent does with it, and what comes back out.

Today, Cyberhaven is joining the Open Secure AI Alliance to help advance a future in which enterprises can adopt open-source AI without compromising security, compliance, or control over their data. Cyberhaven is betting on a world where companies are free to choose from many models, agent frameworks, and open harnesses, as well as run them on infrastructure they control. That choice matters. Enterprises will not standardize on a single model or AI platform.

Cursor and Claude Code now read source code, install packages, and push commits with much of the access a senior engineer has, and often with less oversight. Give an agent a prompt to fix a bug, and it may pull a private API key from a config file, pass a customer record into its context window, or send a snippet of proprietary logic to a third-party model provider to reason about the fix. Security teams built policy for developers typing code by hand.

A board meeting agenda gives the CISO ten minutes to talk about AI. Walking in with a shadow AI tool count or a list of blocked prompts does not answer the question directors probably have: what happens if this goes wrong, and who is accountable when it does? Boards increasingly carry direct exposure for AI oversight failures, from regulatory scrutiny to shareholder litigation.

Security teams that tighten insider threat controls usually hear about it fast, and not from attackers. Sales reps complain they cannot share a deck with a prospect. Engineers say a blocked upload cost them an afternoon. The business assumes that stopping data loss and staying productive are opposing goals, and every blanket policy that blocks first and asks questions later reinforces that assumption. They do not have to be opposing goals.

According to new research from Cyberhaven Labs, drawn from real-world data movement events and active user counts across Cyberhaven's enterprise customer base between December 2025 and June 2026, Claude Desktop usage grew 1,233% between January and June 2026.

Every data security program still gets built around a two-state model: data in motion and data at rest. It made sense when data had a network path you could log and a storage location you could lock down. This approach makes a lot less sense now that the same file can sit at rest in Google Drive one minute and get pasted into a Claude or ChatGPT prompt the next, with no firewall event to mark the handoff.