Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Agentic AI and NonHuman Identities Demand a Paradigm Shift In Security: Lessons from NHIcon 2026

In the race to innovate, software has repeatedly reinvented how we define identity, trust, and access. In the 1990's, the web made every server a perimeter. In the 2010's, the cloud made every identity a workload. Here in 2026, agentic AI makes every action autonomous.

Security advisory for AI-assisted browsing interactions with the 1Password browser extension

This advisory describes an ecosystem-level risk that emerges when AI agents are able to autonomously read and act on untrusted content while operating with user-level permissions in a web browser.

How Agentic Tool Chain Attacks Threaten AI Agent Security

AI agents are rapidly transforming enterprise operations. Unlike traditional software that follows fixed code paths, AI agents interpret prompts, form plans, select tools, and react to results in a continuous loop. At the heart of this capability is the agent's ability to actively select and execute capabilities based on natural language descriptions, schemas, and examples.

When Your AI Can't Be Trusted Anymore | IdentityShield '26

What if your ML system is running perfectly—but making the wrong decisions? This talk explores Ransomware 3.0, where attackers poison models and pipelines instead of locking systems, and shows how AI‑augmented attacks bypass traditional security and how to defend against silent ML compromise. Speaker: Avinish Thakur Software Engineer, miniOrange Pune, India.
Featured Post

AI for Security Infrastructure: Rebalancing Cybersecurity for the Decade Ahead

For more than a decade, cybersecurity has been shaped by a single doctrine: assume breach. Facing high-volume, relentless, and diverse attacks, the security industry has been forced into a reactive stance, playing a constant game of whack-a-mole in a nonstop damage-limitation exercise. This has driven major investment in detection, response, and recovery, and created a world in which organizations are better at reacting to incidents than at preventing them in the first place.

Why API Security Is No Longer an AppSec Problem - And What Security Leaders Must Do Instead

APIs are one of the most important technologies in digital business ecosystems. And yet, the responsibility for their security often falls to AppSec teams – and that’s a problem. This organizational mismatch creates systemic risk: business teams assume APIs are “secured,” while attackers exploit logic flaws, authorization gaps, and automated attacks in production. As Tim Erlin noted recently, “These are not exploits of a specific vulnerability, but abuse of an API.”

Threat hunting to detection engineering: Analyzing real malware with Claude Code, LimaCharlie, and Linux

Claude Code, originally just auto-complete on steroids for IDEs, shows a lot of promise for becoming a major tool in the DFIR/detection engineering/security analyst’s toolbox. Whether it’s Claude Code’s support of MCP, agent skills, or general ability to quickly figure out how to accomplish a given task, it is rapidly becoming more than a code generation tool. This is the first of a three-part series.

OpenClaw (Moltbot) Personal Assistant Goes Viral - And So Do Your Secrets

Early 2026, Moltbot a new AI personal assistant went viral. GitGuardian detected 200+ leaked secrets related to it, including from healthcare and fintech companies. Our contribution to Moltbot: a skill that turns secret scanning into a conversational prompt, letting users ask "is this safe?".

Introducing Forward AI

The Network is Complex. Operating It Shouldn't Be. Forward AI transforms network operations by reducing manual analysis, expert dependency, and guesswork. By combining conversational interaction with a mathematically accurate digital twin, teams can validate intent, understand actual network behavior, and act with confidence across even the most complex environments.