Articles Tagged “Enterprise Security”
28 articles found
Gurucul AI Risk and Response: What Is Available Now?
Gurucul launches AI Risk and Response for security teams on September 24. Detection is generally available, while runtime prevention stays in preview.
Lookout Social Engineering Protection Targets AI Scams
Lookout Social Engineering Protection scans SMS, RCS, calls and voicemail on iOS and Android to flag AI voice clones and scam links before users bite.
Arcjet Agent Runtime Security Adds Audit Trails
Arcjet's agent runtime security uses Open Policy Agent to enforce controls on AI agents and keep replayable audit evidence for compliance reviews.
Zanzibar-Style Authorization Explained for Developers
A practical guide to relationship-based access control: how Google Zanzibar works, when ReBAC beats roles, and what open-source options exist in 2026.
Kiteworks Buys Bonfy.AI for Runtime AI Data Control
Kiteworks is buying Bonfy.AI to classify and enforce policy on sensitive data the moment it moves, across human workflows and AI-agent traffic.
Phishing Click Rates Aren't the Metric That Matters
A study of 354,962 phishing simulations across 123,692 users found credential leaks and reporting rates reveal far more than click rates alone.
Cylake Raises $245M for On-Prem AI Security Platform
Palo Alto Networks founder Nir Zuk's new startup Cylake raised $245 million, taking its total to $290 million six months after leaving stealth.
G7 and CISA Set 5 Post-Quantum Migration Priorities
A joint G7 and CISA call to action lays out five post-quantum priorities and a phased, risk-based migration plan organizations can start today.
CISA Finds Decades-Old Bug Classes Still Dominate
CISA's new Vulnerability Review found stubborn weaknesses make up 41.5% of KEV entries, with input validation and injection flaws topping both lists.
CISA Red Team Advisory Shows What Fast Detection Buys
CISA's new advisory compares two red team assessments where one SOC contained the intrusion in 2 to 20 minutes, and explains what made the difference.
WhatsApp Passkeys Go Multi-Device for 1 Billion Users
WhatsApp now supports multiple passkeys per account, upgrades its six-digit PIN to a full password, and adds caller context on Android.
Microsoft Teams Blocks External Meeting Bots by Policy
A new Microsoft Teams admin policy automatically blocks identified external meeting bots, with general availability due by late September 2026.
Fortinet Buys Virtue AI to Red-Team Your AI Agents
Fortinet acquired Virtue AI on August 17, adding agentic red-teaming across 50 sandboxed environments and 1,000 risk categories to its security fabric.
Windows 11 Drops WMIC, a Longtime Malware Favorite
Microsoft has removed the WMIC command-line tool from Windows 11 24H2 and 25H2, closing a living-off-the-land binary abused by ransomware for years.
Google Cloud Maps Post-Quantum Crypto Readiness by 2029
Google Cloud published a phased post-quantum roadmap targeting full readiness by 2029, with quantum-safe key exchange already live on API endpoints.
OpenAI Daybreak Splits Into Blue and Red Defender Tiers
OpenAI restructured Daybreak into Blue and Red tiers on August 10 and added GPT-5.6-Cyber, a purpose-trained model gated to vetted security partners.
CrowdStrike Offers $100K to Red-Team Rogue AI Agents
CrowdStrike and AWS opened a $100,000 AI security challenge running August 31 to September 29, teaching defenders prompt injection and agent hijacking.
Chainloop Signs Every Artifact Your CI Pipeline Builds
Chainloop is an open-source evidence store that collects, signs, and policy-checks CI output across 17 formats including CycloneDX and SPDX SBOMs.
OWASP Subtractive Security Scores What You Remove
OWASP launched a Subtractive Security Top 10 with nine platform lists and a Path Erasure Rate metric that counts attack paths deleted, not alerts raised.
Snowpick Open-Source Scanner Checks ServiceNow Exposure
Bishop Fox released Snowpick, a free Go tool that tests your own ServiceNow portal for unauthenticated data exposure across 26 table checks.
Project Lightwell: IBM and Red Hat's $5B AI Open-Source Security Push
IBM and Red Hat launch Project Lightwell, a $5B AI-powered open-source security effort that validates fixes at scale and feeds patches upstream.
Agentic AI Is Giving Security Operations Centers Their Edge Back
Enterprises running agentic AI in their SOC see 40% faster threat detection — as autonomous investigation and response tools compress human-driven timelines from hours to minutes.
AI Browser Extensions Are Your Enterprise's Biggest Unmanaged Security Surface
LayerX's 2026 Browser Extension Security Report reveals AI extensions carry 60% more CVEs and access cookies 3x more than standard extensions — with 15% of enterprise users already exposed.
Microsoft Releases Zero Trust for AI: A Security Framework Built for the Age of AI Deployment
Microsoft's new Zero Trust for AI initiative delivers reference architectures, assessment tools, and governance workshops specifically designed to secure AI systems in enterprise environments.
The 1H 2026 AI Security Report: The Era of Agentic Security Has Arrived
The 1H 2026 AI and API Security Report finds enterprises racing to secure AI agents as agentic architectures reshape the enterprise attack surface.
CSA's 2026 AI Cybersecurity Survey: 92% of Security Leaders Are Concerned About AI Agents
The Cloud Security Alliance surveyed 1,500+ security leaders for its 2026 report, finding near-universal concern about AI agent security alongside meaningful year-over-year progress in AI-powered defenses.
Google Closes Its $32 Billion Wiz Acquisition — The Largest Deal in Google's History Reshapes Cloud Security
After a year of regulatory review, Google officially completes the all-cash acquisition of Wiz, which will join Google Cloud while maintaining multi-cloud security support.
NIST Launches the AI Agent Standards Initiative to Get Ahead of Autonomous AI Security Risks
With 83% of organizations planning to deploy agentic AI but only 29% security-ready, NIST is building guardrails before the first major incident forces reactive regulation.