Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Identity Security in the Age of AI

As AI becomes more sophisticated and adoption increases, so does the number of non-human identities operating across enterprise environments. And yet, only 43% of organizations have AI-related NHI management and security in place. Keeper Security provides a unified platform, bringing together privileged access management, endpoint privilege management, secrets management and AI governance to protect against emerging AI threats.

AI Attackers Move Fast. Reach Moves First.

AI-fueled attacks can now find and exploit misconfigured security controls in minutes. Human-driven defenses can no longer keep pace with the speed, scale, and volume of those attacks. Reach helps you autonomously close defensive gaps before AI-powered attackers strike, across email, network, endpoint, SaaS applications, and identity access management. Setup takes 3 minutes with a read-only API key, and results arrive in under 5 days.

5 Reasons Your DAST and SAST Scans Miss BOLA & BFLA

Every API security evaluation reaches the same objection: “We already run SAST and DAST.” The objection is fair. Static Application Security Testing (SAST) reads source code before release. Dynamic Application Security Testing (DAST) probes a running application from the outside. Both belong in continuous integration and continuous delivery (CI/CD) pipelines. Both also struggle with the two Application Programming Interface (API) flaws that matter most.

Data residency for LLMs: what GDPR requires and your three options

Short answer: GDPR does not require personal data to stay in the EU. It lets data leave only with a valid transfer mechanism. Data residency for LLMs comes down to three options: use the EU region of a hosted API, tokenize before the API call, or run the model yourself. Only the third keeps data out of the US in the literal sense. A procurement lead at a European customer sends your team a one-line requirement: “keine Daten in die USA.” No personal data in the United States.

The Howler Episode 36 - Sam McLane, Chief Technical Services Officer

This month, we sit down with Sam McLane, Chief Technology Services Officer and one of Arctic Wolf's original team members, as he reflects on the company's journey from six employees to more than 3,500 worldwide. Sam shares lessons learned from nearly 15 years of building Arctic Wolf, why relationships have been at the heart of his career success, how he thinks about leadership, innovation, and staying ahead in the ever-changing cybersecurity landscape, and so much more!

bREACHYing the Perimeter: How One HTTP Request can Hijack your AI Robot

Software supply chain attacks are on the rise, and naturally taking the headlines. But with the rise of localized models and common software embedded into smart “things”, risks may even be hidden in plain sight – or, in some cases, quite literally watching you. Vulnerabilities and malicious packages may extend risks to the unlikeliest of places, demanding change and accountability in even some well-intended innovations.

17 Endpoints, Zero Logins Required: Broken Access Control in AI-Built Apps

We handed four vibe-coding tools (Emergent, Replit, Lovable, Base44) the same prompt for a FastAPI user-management microservice. The spec was explicit: JWT auth, parameterized queries, rate limiting, four-tier role model with per-endpoint scope. Each tool shipped a build, and our flagship autonomous pentest surfaced 137 confirmed vulnerabilities across all four.

Vibe Coding Security Checklist: Stress-Test Your AI-Built App in 10 Minutes

You shipped an app in a weekend. The AI wrote the login, the dashboard, and the database layer, and everything works, but it’s far from safe. With 0 logins, an attacker can forge admin invitations, alter audit logs, and change other users’ passwords. The guy is just swimming freestyle through your entire app stack. This is just one of the 137 vulnerabilities we found in vibe-coding across the top 4 platforms.

Warning: Phishing Operations Are Impersonating Prediction Markets

Fraudsters are exploiting the increased public interest in prediction markets such as PolyMarket and Kalshi, according to researchers at Recorded Future. Criminal groups known as “traffers” are providing fellow crooks with “websites, administrative panels, cryptocurrency payment infrastructure, victim-management capabilities, technical support, and promotional guidance” to target users of prediction markets.

From Directive to Deadline: Operating BOD 26-04 in the Real World

BOD 26-04 changes how federal agencies and FedRAMP providers handle vulnerabilities. It moves away from severity-based, 30-day patching and toward risk-based prioritization. In this webinar, Bob Costello (former CIO of CISA, strategic advisor to Nucleus Security, and Chief Digital and Information Officer at The Merlin Group) and Scott Kuffer (Co-founder and CPO at Nucleus Security) explain what the directive requires, why CISA built it on the SSVC decision-tree framework, and how to put it into practice.