Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How Claude + MCP + Vanta could help auditors

At Vanta, we’re always looking to experiment, learn, and stay at the forefront of AI. Recently, we built a proof of concept to explore how auditors could interact more effectively with audits and the data within them. Our experiment used Anthropic’s Claude, the open source MCP (Model Context Protocol), and Vanta’s API to enable users to ask deeper questions of Vanta’s compliance data. ‍ ‍

Banish bots from your Waiting Room and improve wait times for real users

With Cloudflare Waiting Room, you can safeguard your site from traffic surges by placing visitors in a customizable, virtual queue. Previously, many site visitors waited in the queue alongside bots, only to find themselves competing for inventory once in the application. This competition is inherently unfair, as bots are much faster and more efficient than humans. As a result, humans inevitably lose out in these high-demand situations, unable to secure inventory before bots sweep it all up.

Fuzzing Forward: Lowering Barriers to Secure Code with AI

Introducing “Spark” Code Intelligence’s AI Test Agent Fuzz testing is a proven powerhouse for uncovering critical bugs, yet its full potential often goes untapped due to the heavy manual workload it demands. But what if that effort could be a thing of the past? Enter “Spark” Code Intelligence’s AI Test Agent—a revolutionary solution that automates the discovery of vulnerabilities, bringing the power of advanced security testing, like fuzzing, into reach for all.

Spark Demo: Code Intelligent's AI Test Agent

Demo: AI Test Agent in Action Discover the benefits of CI Fuzz 2.0, our powerful tool that simplifies fuzzing to a single command. The demo will also highlight root cause analysis capabilities, showcasing how vulnerabilities can be identified and addressed efficiently, this demo will uncover several real-world severe vulnerabilities uncovered by AI Test Agent in widely used open-source libraries during the past few months.

Can Autonomous LLM Agents Exploit One Day Vulnerabilities?

When generative AI first emerged, the cybersecurity community primarily focused on two promising benefits. However, a concerning “third angle” has now been demonstrated: AI as an attacker – powerful AI systems in the hands of malicious actors, autonomously exploiting vulnerabilities with minimal human guidance.

Integrating Essential Teaching Tools: Tips for Choosing the Right Platform

In today's fast-paced world, achieving a work-life balance has become the ultimate goal across all sectors - the Holy Grail of modern living. Perhaps, to gain more flexibility and independence, an increasing number of professionals teaching English as a foreign language (TEFL) are leaving the classroom to become their own bosses by working online. If you, too, are looking to get into online teaching, let's talk business and set yourself up for success with this guide to teaching English online.

New Apple iOS Zero-Day Vulnerability CVE-2025-24200: What You Need to Know

Apple had to deal with another active security vulnerability. The company has recently issued emergency patches for iOS and iPadOS, which fixed CVE-2025-24200-an alarming zero-day flaw that might have allowed cybercrooks to disable USB Restricted Mode on locked devices. The purpose of the update is to ward off possible cyber-physical attacks and keep data from unauthorized extraction.

A Complete Guide to Cloud Risk Assessment

As organizations worldwide race to transform themselves digitally in a cloud-first world, many are doing so to the detriment of their businesses by failing to assess the security risks posed by their cloud applications and services. This oversight is not only a security issue but a core business risk that differentiates market leaders from those who are sure to face expensive setbacks and regulatory headaches.