1. Security & Risk

    The Safety Company Keeps Leaking

    Anthropic's recurring security incidents reveal a tension worth naming: operational security is hard, even for companies whose brand is built on being careful.

    1 min read

  2. Security & Risk

    The New Shadow IT Isn't Employees Using ChatGPT

    AI agents are generating mobile app traffic that security teams can't see. Shadow AI moved from 'people using tools' to 'tools using tools'.

    1 min read

  3. Security & Risk

    The Money Just Noticed the Agent Security Problem

    Bessemer's new report on AI agent security says what practitioners have known for months. Now comes the flood.

    1 min read

  4. Security & Risk

    The Government Just Told You to Stop Vibe Coding Without Guardrails

    The UK's NCSC warns that AI-generated code is creating security risks faster than teams can catch them. The fix isn't stopping — it's checking.

    1 min read

  5. Security & Risk

    Your Agents Need a Black Box

    Vorlon's AI Agent Flight Recorder brings forensics to agentic systems. When your agent goes wrong, you'll want to know what happened — not guess.

    1 min read

  6. Security & Risk

    The Yes Machine Gets a Live Demo

    A Zenity CTO demo at RSAC 2026 showed agents being hijacked with zero user interaction — exactly what 'trained to be helpful' looks like.

    1 min read

  7. Security & Risk

    When Cisco Validates Your CLAUDE.md

    Cisco's new MCP security gateway is the enterprise version of what power users already built out of necessity.

    1 min read

  8. Security & Risk

    Someone Finally Built the Agent Security Layer That Actually Matters

    Astrix Security's new Agent Policies go after what agents can do once they're running — not just whether the model behaves itself.

    1 min read

  9. Security & Risk

    82% of Execs Feel Protected. 88% Have Had Incidents.

    BeyondTrust's Phantom Labs data reveals the confidence gap at the heart of enterprise AI security — and the numbers are not subtle.

    1 min read

  10. Security & Risk

    Google's Free AI Comes With a Price

    Gemini's Personal Intelligence feature just expanded to all free U.S. users — connecting AI to Gmail, Photos, and Chrome browsing history.

    1 min read

  11. Security & Risk

    We Gave AI Agents Keys to the House. Visa Wants to Give Them a Credit Card.

    Visa is testing AI agent payment authorization. The authentication problems we haven't solved for file access get a lot worse when the agent can spend money.

    1 min read

  12. Security & Risk

    The Attack Surface Is the Feature

    Three chained vulnerabilities in Claude.ai show that when your AI reads the web, the web can give it orders.

    1 min read

  13. Security & Risk

    AI Agent Security Is Doing the Deploy-First Thing Again

    MCP is six months old and already has a CVSS 9.4 vulnerability. The security industry is scrambling. We've been here before.

    1 min read

  14. Security & Risk

    The Vuln That Hits Before You Add Any Integrations

    Three chained flaws in vanilla Claude.ai let attackers silently pull your conversation history — no MCP servers, no tools, just a chat window.

    1 min read

  15. Security & Risk

    Meta's Rogue Agent Was Just a Human Who Trusted Bad Advice

    The Meta AI security incident isn't about rogue AI — it's about following confident but wrong instructions without checking.

    1 min read

  16. Security & Risk

    Perplexity Wants Your Blood Pressure Data

    Perplexity Health can now access your Apple Health records. The utility is real — so is the trust question.

    1 min read

  17. Security & Risk

    Box Is Using Moltbook as a Sales Pitch. That's Smart.

    Enterprise vendors are turning the Moltbook API leak into a governance story — and the framing tells you where the market is heading.

    1 min read

  18. Security & Risk

    GitHub Added Secret Scanning to Its MCP Server. This Is What Good Security Integration Looks Like.

    GitHub's MCP server now lets AI coding agents scan code for secrets through the same protocol they're already using. No extra tooling. No separate workflow.

    1 min read

  19. Security & Risk

    Proofpoint Just Built Security for MCP. That Tells You Everything.

    Proofpoint's new Agent Integrity Framework monitors whether AI agents do what they were actually asked to do.

    1 min read

  20. Security & Risk

    Grok Failed in Both Directions in the Same Week

    Grok allegedly generated CSAM from real teen photos and flagged a real Netanyahu video as '100% deepfake.' Two failures, opposite directions, one root cause.

    2 min read