Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The First Questions That Matter: Triaging AI Agent Security Incidents

I have lived through major incidents firsthand, including the urgent calls that come in the middle of the night. In my experience, the teams that contain damage quickly are not the ones with the most tools. They’re the ones that ask the right questions in the first hour.

Malicious Claude Code extension distributed through Cursor marketplace

On October 29, 2026, Cursor reported that a malicious version of Anthropic’s Claude Code extension (2.1.313) was available in the Cursor extension marketplace between approximately 09:27 and 20:35 UTC. Cursor identified impacted macOS and Windows packages and estimates that up to 5,000 users were affected.

The Hidden Cybersecurity Risks Facing Modern Gaming Communities

Gaming communities have evolved into enormous digital environments where millions of players interact, compete, trade collectibles, and develop friendships. From multiplayer servers and esports tournaments to online marketplaces and trading card communities, gaming now involves far more than simply playing a favorite title.

Physical Security Gaps Every Mobile Professional Overlooks

Mobile professionals often protect their accounts more carefully than the devices, documents and bags sitting beside them. A strong password offers limited protection if someone can enter a shared workspace, view confidential information on a screen or leave with an unattended laptop. Physical security deserves the same deliberate planning as digital security. For consultants, remote employees and frequent business travelers, that means controlling access to equipment and building repeatable habits for hotels, coworking spaces, transportation hubs and client offices.
Featured Post

AI Agents Are Rewriting the Rules of Identity Security

For years, identity security has been based on a fairly straightforward premise: organisations need to know who, or what, is accessing their systems, what they are authorised to do, and whether that access remains appropriate. However, the rise of autonomous AI agents has changed the game, and tore-up the traditional model of role-based access controls and privileged access management.

Agentic AI Security Buyer's Guide: 6 Criteria to Evaluate

Most AI security evaluations start with the tools employees already know about: the sanctioned chatbot, the browser plugin, the approved copilot. The harder inventory of AI tooling sits on endpoints, where coding assistants, desktop agents, and custom Model Context Protocol (MCP) servers read files, query databases, and chain actions with no human approving each step.

The CIO Answers for AI They Never Approved

When an AI system misfires inside a large company, the question that follows is who was responsible for it. The answer usually lands on the CIO, and frequently the CIO had no part in choosing, approving or deploying the thing that failed. ‍ This gets described as a governance problem, which undersells it. Governance implies a process that exists and performs badly.

See the Real AI Experience with Cato DEM

AI is becoming part of everyday work. Employees rely on services such as ChatGPT and Claude to research, create, and solve problems, while developers increasingly use AI-powered tools like Cursor and coding agents in their development workflows. As employees increasingly rely on AI to work more productively, the AI experience is becoming a critical part of the digital experience IT teams are expected to support.

Introducing Persona AI: AI for identity operations

Persona AI brings AI directly into the Persona identity platform. It helps teams verify identities, review cases, investigate fraud signals, and apply their own policies to make faster, more consistent decisions. Many identity decisions still need people to do the work by hand: collecting evidence, screening, flagging risk, interpreting policy and routing cases. Persona AI is built into the platform, so it works directly with your identity data, risk signals, policies and workflows.