Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Seamless API Security with Postman x Aikido

We’re teaming up with our friends at Postman to bring API security even closer to where developers already work. With the upcoming Aikido Security + Postman integration, you’ll be able to view recent security scans for your API collections—without ever leaving Postman. No new tabs. No switching tools. Just quick, clear security insights as you’re building. It’s never been easier to build and scale secure APIs as your organization grows.

Why RBAC Doesn't Work with AI Agents [And How to Fix It]

Role-Based Access Control (RBAC) is a fundamental, critical part of security architecture that prevents data from falling into the wrong hands. In regular data-based environments (deployed on the cloud or on-premise), RBAC is an effective measure in preventing unauthorized access, with a few exceptions, like successful hacking attempts or breaches. However, this system breaks down once AI comes into the picture. Let’s understand why – and what you can do about it.

How Cloudflare Handles Privacy Certifications (and Why Containers Matter to Developers)

In this episode, host João Tomé is joined by Emily Hancock, Chief Privacy Officer at Cloudflare, Rory Malone, Principal Privacy Compliance Specialist at Cloudflare.They discuss Cloudflare's new privacy certifications. At the end, there's also Confidence Okoghenun, Senior Systems Engineer at Cloudflare, sharing the innovative Cloudflare Containers for developers.

How agentic AI could transform enterprise workflows: Insights from MIT GenAI Lab

The line between human and machine is blurring—and it’s not a question of whether machines can do more, but how far we’re willing to let them go. The frontier lies in tackling the chaos and solving the fragmented processes that slow enterprises: siloed rulebooks, scattered pricing spreadsheets, and manual approvals.

Securing the Future of Generative AI: Why Security Can't Keep Pace with Innovation

By James Rees, MD, Razorthorn Security The artificial intelligence revolution isn’t coming. It’s here and it’s moving faster than anyone predicted. Children now trust ChatGPT more than their parents for information. AI-generated content is becoming indistinguishable from human work. Entire industries are being reshaped by technology that seemed like science fiction just a few years ago.

Automation and AI in Cybersecurity: $2.22 Million in Savings

Over 2024, the average global cost of a data breach reached $4.88 million. This is 10% up from the previous year and the highest amount to date. These figures, published in the Cost of Data Breach Report 2024, also reveal that companies implementing artificial intelligence and automation in their cybersecurity strategies saved an average of $2.22 million compared to businesses that did not adopt them.

The Hidden Cost of Field Service Inefficiencies: What You're Not Seeing on the Balance Sheet

Managing field operations is a lot like repairing a leaky pipe you see the water, but not always the source. As someone who has spent over a decade overseeing technicians, tools, and tasks across multiple sites, I've learned that the biggest budget drain often comes from things that don't show up on a line item: delays, miscommunication, and time spent chasing information. These inefficiencies rarely make headlines, but they're bleeding money from service organizations. Let's break down how.

EP 10 - A new identity crisis: governance in the AI age

In this episode of Security Matters, host David Puner sits down with Deepak Taneja, co-founder of Zilla Security and General Manager of Identity Governance at CyberArk, to explore why 2025 marks a pivotal moment for identity security. From the explosion of machine identities—now outnumbering human identities 80 to 1—to the convergence of IGA, PAM, and AI-driven automation, Deepak shares insights from his decades-long career at the forefront of identity innovation.

API Security Is a Business Problem-Not Just an IT One

APIs are more than technical components—they're business-critical assets. In this powerful moment, Jeremy Dodson lays out why frameworks aren't enough and why companies must treat API security as a core business priority. Security leaders: it’s time to shift your mindset and protect real data flows, not just check boxes.