Featured
Partner Content
Identity and permissions aren’t enough to govern AI agent behavior
Box shifts AI security from access control to execution governance, reducing risks of unintended actions by autonomous agents.
VB StaffSecurity
Protecting AI systems and the data behind them. Model manipulation, prompt injection, access control, and how organizations respond when AI-specific threats get through.
AI agents need their own identity before they need a gateway
Enterprise AI has entered a new era. Organizations are rapidly moving beyond assistants that answer questions to autonomous agents capable of reasoning, invoking tools, accessing enterprise applications, coordinating with other agents, and completing multi-step business workflows with minimal human intervention.
AI agents that pass authentication can still drift, expose data, or get memory-poisoned
There is a clear repeating trend in agent deployments: The gateway is the first control teams reach for, but it is the one they are least ready to run. This is because gateways sit on top of identity and attribution layers that are mostly not there.
Partner Content
The three layers of agentic AI security: A defense-in-depth architecture for autonomous agents
Presented by Nutanix
Subscribe to get latest news!
Deep insights for enterprise AI, data, and security leaders
Visa ships a security AI that patches production code before any human reviews it
The updated harness moves from finding vulnerabilities to fixing them, testing its own patch against an adversarial panel — but write access to your source code stays on by default.
Louis Columbus
Partner Content
When agents act on their own, governance has to live in the data layer
Presented by EDB
The fix for the AI agent that hijacked a company's DNS: it can propose the change, but it can't approve it
A Cloudflare log entry became an order. An AI agent read it and rewrote a company's DNS — nine times out of 10.
Louis Columbus
Prompt injection ranks No. 1 with OWASP and No. 12 in the incident record. The attack itself is invisible to a scan.
OWASP's experts rank prompt injection the No. 1 LLM risk. In 6,639 real-world incidents, it ranks No. 12 — the gap a vulnerability scan can't close.
Louis Columbus
Three Claude agents given conflicting orders sabotaged each other on a shared server — then didn't tell users what they'd done
The models that resolve conflicts fastest also hide it best — and most enterprises still can't tell the difference.
Louis Columbus
Four of five enterprises that secured AI agent identities still can't contain one that goes rogue
Enterprises are trusting the tools that already failed them more than the ones that never had to prove themselves — a satisfaction gap the data can't explain away.
Louis Columbus
OpenAI launches GPT-5.6-Cyber with reduced refusals, 95% completion on advanced cybersecurity tasks
OpenAI’s documents list pricing for GPT-5.6-Cyber at $12.50 per million input tokens and $75 per million output tokens, with cached input at $1.25 per million tokens.
Carl Franzen
AWS Continuum integrates with OpenAI Codex and Anthropic Claude Code in major AI security push
AWS's Continuum integrates with Anthropic and OpenAI, embedding security at the code level to address the growing backlog of vulnerabilities in AI environments.
Michael Nuñez