Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Give access only when it's needed: Configuring Just-In-Time Application Allowlisting in MSP Central

Standing exceptions to your application control policy are exactly that—standing. Once you allow an app or lift a restriction, it usually stays open indefinitely, whether or not it's still needed. In this tutorial, we cover how to configure just-in-time (JIT) application access in MSP Central. Learn how to grant temporary, rule-based access to specific applications so users get what they need for a limited window, without leaving permanent access behind.

AI Governance Auditing for Security and IT Teams

AI governance auditing distinguishes between a documented policy and a working control. The audit traces one AI output back through the identity that invoked it, the data it reached, the guardrail that applied, and the record retained afterward. Most programs fail because access is ineffective: nobody can say which identities access sensitive data through an AI assistant, let alone prove the limit is held.

Microsoft Entra ID monitoring: Detecting suspicious activity

Entra ID monitoring correlates sign-in, audit, and privileged-role activity to expose suspicious identity changes while evidence still exists. Native controls leave gaps in retention, licensing, and correlation, so resilient teams export data, baseline admin behavior, and connect to Entra ID, Privileged Identity Management (PIM), OAuth, Conditional Access, and on-premises Active Directory events in a single workflow.

Falcon Next-Gen Identity Security: Agentic Identity Provider

CrowdStrike delivers the next evolution of the agentic SOC on the Falcon platform: coordinated teams of expert agents that investigate endpoint, identity, SaaS, cloud, and network domains simultaneously, converging on a single, evidence-backed verdict your team can trust.

Cybersecurity Leaders React to OpenAI's Hugging Face Breach UpGuard

In July 2026, OpenAI's own AI agents escaped their sandbox and reached Hugging Face's production systems during an internal cybersecurity evaluation. In its latest report, OpenAI called the incident "a warning shot for us and for the world." We asked cybersecurity leaders for their reactions to the breach and what it signals for every team racing to deploy AI. One detail stands out. Hugging Face's own systems detected the attack and traced its full shape, but the alert never escalated high enough for a human to act on it.

Extending the Single Source of Truth to the Agentic Software Supply Chain

Every developer on your team now runs multiple agents. None of them are waiting for human sign-off to act. That’s exactly the gap we discussed and closed at swampUP 2026. JFrog unveiled new capabilities that extend the JFrog Platform as not only the Single Source of Truth for OSS and heritage software, but now the Agentic Software Supply Chain. Here’s everything we announced, and why it matters.

Every New Compliance Framework Restarts the Same Fire Drill. It Doesn't Have To.

Every compliance audit starts the same way: Someone flags a deadline, the team scrambles to pull evidence, map controls, and prove that the policies running in production actually match what the framework requires. They make it through. They exhale. Six months later, a new framework arrives, and the fire drill starts all over again. Most teams walk away from an audit believing they are compliant.

Governance Strikes Back: The Most Used, Most Abused Word in the Galaxy

Ask AI to Choose a prompt Write a TLDR of this post Explain the security risk Summarize what CISOs should know When I walked to the stage in Copenhagen, I had a lot on my mind. For 3 days I'd had countless conversations with leaders and practitioners about AI and agentic security. The one word on everyone's lips was "governance"; day 3 at the conference was "Governance Day," in fact. This is a bag one vendor was giving out: But governance of what? To what end?