Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Inside CyberArk Labs: the evolving risks in AI, browsers and OAuth

In 2025, we saw attackers get bolder and smarter, using AI to amplify old tricks and invent new ones. The reality is, innovation cuts both ways. If you have tools, AI is going to make them even more dangerous. Last year proved that every leap forward in technology brings new risks right alongside the rewards. At CyberArk Labs, our mission is to uncover hidden vulnerabilities and provide actionable insights that help organizations fortify their defenses.

When AI Becomes the Insider Threat

Remember that annoying ‘paperclip’ in Microsoft Word 97? The one that was always trying to help you…Fast forward nearly 30 years and we now have AI. In the race to adopt artificial intelligence, businesses are embedding AI systems into their daily operations, streamlining workflows, enhancing productivity, and centralizing knowledge. But what happens when that very system becomes an attacker’s most valuable asset?

Why the Target Breach Wasn't a Detection Failure - It Was Prioritization | Garrett Hamilton at UCI

Nicole Perlroth asks Garrett how Reach's involvement would have impacted the breach with Target. Attackers came in through a third-party HVAC vendor. Credentials were compromised. Alerts fired. But nothing rose to the level of urgency it deserved. As Garrett Hamilton explains at UCI, this is where security breaks down—not detection, but prioritization. Most teams keep investing in reacting faster inside the SOC. The harder (and more effective) shift is upstream: reducing the exhaust before it ever hits the console.

Defending Against Modern Email Threats With Layered, AI-Driven Security

Email has been the backbone of business communication for decades and as such, it remains the attacker’s favorite doorway into an organization. Phishing, Business Email Compromise (BEC) and supply-chain attacks continue to rise, with adversaries leveraging AI and compromised accounts to bypass legacy defenses. This presents many challenges for CISOs, IT Directors and SOC teams alike: it seems pretty clear that threats are evolving faster than traditional email security can keep up.

Savanti: How Agentic AI Supercharge Cato's R&D Efficiency

Savanti is Cato Networks’ internal, agentic AI assistant that blends knowledge from Slack, Confluence, Git, and Jira to provide instant, context-rich answers. Savanti routes each query through an adaptive reasoning workflow by choosing between direct, deep, or multi-step reasoning based on the question’s complexity. Every answer is grounded in real internal context, backed by citations, and evaluated for confidence before being delivered.

How to Build an API Security Strategy: The Complete Guide (2026)

Today, APIs power everything from mobile apps to cloud platforms, quietly moving data behind the scenes. That invisibility makes them prime targets. Over 84% of organizations experienced API security incidents last year, with breaches exposing ten times more data than in traditional attacks. Attackers now deploy AI-powered tools that map endpoints in minutes and exploit business logic flaws your defenses can’t see.

What is AI Security? The CTO's Guide to Securing LLMs & Models

Here’s an unsettling truth: While 80% of organizations are adopting AI, only 6% have any form of AI security strategy in place (SandboxAQ 2025 AI Security Benchmark report). It’s like buying a Porsche 911 without locks or keys, a cash-guzzling public service car whose cost you’re apparently happy to bear.

Securing remote military operations with effective cybersecurity strategies

Cybersecurity is a vital aspect of remote military operations, where the stakes are high and the environments challenging. Implementing effective cybersecurity strategies is essential to protect sensitive data and ensure the success of missions. This article explores key strategies and technologies to safeguard these operations.

15 Best Fintech Software Development Companies for AML & Transaction Monitoring Platforms

In 2026, the global financial technology sector continues to reshape the way money moves, settles, and is monitored across borders. According to recent market data, the fintech industry is projected to surpass $1.9 trillion in transaction volume and generate more than $410 billion in revenue, confirming that digital finance has become a core part of the global financial system rather than a niche innovation. This scale inevitably increases regulatory pressure, as higher transaction volumes also mean higher exposure to financial crime, fraud, and compliance risks.