Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Agentic AI and Shadow APIs: Why SecOps Needs Specialization Now APIs are rapidly becoming the core “language” of AI, and when agentic AI can generate its own APIs, the security stakes rise significantly. In this clip from the A10 Networks discussion, “APIs are the Language of AI – Protecting Them is Critical,” A10 security experts Jamison Utter and Carlo Alpuerto unpack why specialized skills and tools are now essential for modern security operations teams.

Watch the first episode of CISO Global's podcast, "Black Hat News," with host CEO David Jemmett. In this episode, David sits down with Jeremy Pease, CEO of Hivelocity.

A critical stored XSS vulnerability (CVE-2025-10573) in Ivanti Endpoint Manager lets attackers poison the admin dashboard with malicious scripts, leading to session hijacking and device compromise. AppTrana blocks these malicious scan submissions at the edge, preventing stored XSS payloads from ever reaching the EPM dashboard, even before patching.

Many sensitive documents don’t fit cleanly into standard categories, and traditional approaches like regex or broad classifiers often create noise and false positives. In this video, we walk through how to use Nightfall’s prompt-based file classifiers to detect business-critical documents based on intent, not brittle patterns or custom model tuning.

Before investing in new security tools, it’s critical to understand what your current stack is actually delivering. Barmak Meftah spoke about the importance of baselining existing investments to truly grasp risk acceptance versus real risk exposure. Without that foundation, new acquisitions lack context and are often driven by trends rather than necessity. Smarter decisions come from understanding:︎ What is already deployed︎ How it is configured︎ Where exposure persists.