Articles by Category: Security_compliance

A new model for infrastructure security: How Cisco defends against AI threats

2026-05-27 18:33
Cisco is evolving its approach to infrastructure security in response to AI threats. Through Project Glasswing and Daybreak, Cisco emphasizes the need for continuous risk management rather than annual checks. AI tools can exploit vulnerabilities previously deemed low-risk, necessitating a shift in cybersecurity strategies. This change impacts not only Cisco but also all enterprises navigating the evolving threat landscape. Stay informed and adapt. 🔒🛡️ #Cybersecurity #AIThreats #Cisco...
Jason Lish

“There is no accountability”: AI coding agents are installing packages no one owns

2026-05-27 17:38
AI coding agents are changing software development, but as Willem Delbare from Aikido Security points out, "there is no accountability." This situation leaves companies vulnerable as AI installs packages without clear ownership of risk. 🛡️ Aikido's new solutions, like Aikido Endpoint, help monitor and block malware before installation, enhancing security while allowing developers flexibility. 🔍 The market is responding, with companies like Socket and Endor Labs also focusing on preventing...
Darryl K. Taft

Private analytics via zero-trust aggregation

2026-05-27 16:56
Introducing a private analytics solution that enhances security and privacy through innovative cryptographic protocols. 🔒✨ This new approach processes data locally, allowing on-device AI to offer timely alerts while safeguarding user information. Android’s SafetyCore exemplifies these privacy-preserving features. By implementing a zero-trust principle, the solution ensures only anonymized, aggregated insights are accessible, maintaining transparency and trust. 🔍 #Privacy #CyberSecurity...

Mitigating CVE-2026-31431 (“Copy Fail”) in Docker Engine

2026-05-27 13:00
🚨 A new Linux kernel vulnerability, CVE-2026-31431 (“Copy Fail”), has been disclosed. While it does not compromise Docker infrastructure, Docker Engine versions prior to v29.4.3 allowed certain risks. Docker containers could create AF_ALG sockets, which the exploit uses. If you're using Docker Engine v29.4.3 or have a patched host kernel, you’re safe. 🛡️ For those on unpatched systems, a kernel fix is available for Debian and RHEL 9, but not yet for Ubuntu. Upgrading Docker Engine can help...
Source: Docker Blog
Paweł Gronowski

Securing AI Agents in Healthcare and Life Sciences

2026-05-27 00:00
🚀 Healthcare organizations are leveraging AI agents with Amazon Bedrock and Auth0 to enhance security and efficiency. 🌐 79% of HCLS organizations report AI adoption, but 69% face security concerns like data leakage. This integration aims to address these issues. 💊 A key application is AI-powered prescription management, which streamlines the process from patient authentication to fulfillment, ensuring secure, contextual interactions. #HealthcareAI #DataSecurity #AIIntegration #DigitalHealth...
Source: Auth0 Blog

Reconciling the Past: Correcting Records for Unfixed Kubernetes CVEs

2026-05-26 17:30
🚨 Important Update for Kubernetes Users 🚨 The Kubernetes project is correcting CVE records for several unfixed vulnerabilities. These updates, effective June 1, 2026, will ensure accurate documentation and enhance security awareness. Key vulnerabilities include: - **CVE-2020-8561**: Medium severity issue with webhook redirects. - **CVE-2020-8562**: Low severity proxy bypass via DNS. - **CVE-2021-25740**: Low severity cross-namespace forwarding flaw. These changes aim to improve automation...

Securing campus and branch networks from boot to transport with full-stack PQC

2026-05-26 15:00
🔒 Quantum threats are becoming a pressing issue as attackers can capture encrypted data today for future decryption. Cisco's full-stack post-quantum cryptography (PQC) offers protection across the entire network stack, from secure boot to data transport. This approach integrates NIST-approved algorithms to safeguard devices and data. The Cisco C9000 Smart Switches lead the way by embedding quantum-safe algorithms from the hardware level. This ensures security from the moment the device powers...
Albert Chiang

Building an Enterprise Agent Platform: Enforcing Identity, Data, and API Governance

2026-05-26 00:31
🚀 As enterprises rapidly adopt AI agents, governance strategies often remain fragmented. Salesforce Engineering highlights the need for a unified governance approach. By shifting focus from individual agent security to platform-level governance, they address identity, data, and API security gaps. The article explores how consistent identity propagation enhances security across multi-system workflows. This ensures reliable authorization and access controls, supporting every interaction...
Scott Nyberg

Disrupting Glassworm: Inside CrowdStrike’s Takedown of a Developer-Targeting Botnet

2026-05-26 00:00
🚨 On May 26, 2026, CrowdStrike's Counter Adversary Operations team executed a successful takedown of the Glassworm botnet, a significant threat targeting software developers. 🤝 Collaborating with Google and the Shadowserver Foundation, they disrupted all four command-and-control channels, preventing further malicious activity. 🔍 Glassworm's operations highlighted a worrying trend: attackers are now focusing on developers, compromising their tools to exploit vulnerabilities in the software...
Counter Adversary Operations

Full security scanner coverage of your codebase in minutes

2026-05-26 00:00
🔍 Security teams face challenges in scaling scanner configurations as organizations grow. GitLab 19.0 introduces security configuration profiles, allowing teams to centrally manage how and when security scanners run across projects. 🚀 This feature streamlines the process, enabling static application security testing (SAST), dependency scanning, and secret detection with minimal manual setup. 💡 With default profiles, teams can easily ensure consistent security coverage across all projects. For...
Source: GitLab Blog
Michael Omokoh

How MCP and synthetic data are reshaping compliance in the agentic era

2026-05-23 13:00
Software development often unintentionally exposes sensitive data, a challenge heightened by the rise of agentic AI. AI agents are transforming the software development lifecycle, interacting with data in ways that may not be fully visible to teams. This raises concerns about data governance as the speed and scale of AI can outpace existing frameworks. Organizations can address these risks through strong data governance practices tailored for autonomous systems. This allows for safer...
Monica White

Cisco’s Risk-Based Vulnerability Disclosure in the Age of AI

2026-05-22 16:15
Cisco is evolving its vulnerability disclosure practices to address the challenges posed by AI advancements in cybersecurity. 🤖 By leveraging AI, Cisco enhances the speed and accuracy of identifying and mitigating vulnerabilities, ensuring that network defenders can respond effectively to emerging threats. The company has introduced a risk-based model that prioritizes disclosures for high-risk vulnerabilities, empowering customers to focus their patching efforts where they are needed most. 🔒...
Russ Smoak

How security teams can report cyber risk to boards

2026-05-22 05:20
🌐 Cyber risk is increasingly a concern for boards, but many receive technical reports that are hard to interpret. 🔍 Security teams face challenges in converting technical data into financial insights, complicating communication with boards. 💡 Databricks Genie offers a solution with real-time, data-driven cyber risk quantification, connecting security posture to business impact for improved governance. #CyberRisk #DataDriven #BoardCommunication #CyberSecurity #Governance

Measuring AI-Enabled Success: 3 KPIs Leaders Should Track

2026-05-22 00:00
🚀 AI is reshaping how organizations innovate, but it requires new governance strategies. Leaders are creating secure "paved roads" for AI workflows, integrating security controls and monitoring to foster safe innovation. To measure success, focus on three key KPIs: 1️⃣ Time from Idea to Production Deployment 2️⃣ Employee Adoption Rates of Approved AI Tools 3️⃣ Security Incident Frequency These metrics help assess speed and security in AI use. #AI #Innovation #Leadership #BusinessStrategy...
CrowdStrike

Announcing Claude Compliance API support with Cloudflare CASB

2026-05-21 17:00
🚀 Cloudflare has announced support for the Claude Compliance API through its Cloud Access Security Broker (CASB). This integration allows security teams to monitor Claude Enterprise activity directly in the Cloudflare Dashboard without needing endpoint agents. With the rise of AI applications, understanding user interactions has become more complex. Cloudflare CASB provides visibility and control over these tools, addressing compliance risks that traditional security measures often miss. As...
Abe Carryl

AI-generated reporting: Lessons learned from Cisco Talos Incident Response

2026-05-21 12:00
🚨 Cisco Talos Incident Response shares insights on AI-generated cybersecurity reports. Their AI Tiger Team tackled issues of inconsistency when using large language models for technical content. Through prompt engineering, they explored solutions to improve output quality. The findings emphasize the need for standardized inputs to enhance AI reporting efficiency. #Cybersecurity #AIReporting #CiscoTalos #IncidentResponse #TechInsights
Nate Pors

Introducing a Security Support Policy for the Kotlin Standard Library

2026-05-21 10:19
🔒 Kotlin introduces a Security Support Policy to address varying upgrade rhythms among its users. Some developers update frequently, while others in regulated environments require thorough reviews before updates. This policy aims to clarify how long Kotlin releases will be supported for security fixes. With Kotlin’s rising adoption, especially in critical sectors, establishing a formal support timeline will help teams ensure compliance and streamline security reviews. #Kotlin #SecurityPolicy...
Anton Yalyshev

How to Protect Identities and Sessions from Infostealers

2026-05-20 00:00
Infostealers are a significant malware threat, targeting sensitive data without detection. They can capture login credentials, financial details, and more, often through phishing and malicious downloads. Traditional security measures may not be enough to combat these stealthy threats. The article discusses the evolution of infostealers and highlights CrowdStrike's role in providing effective identity security. Stay informed and protect your data! 🔒💻 #CyberSecurity #Infostealers...
Hananel Livneh

Stanford’s AI Index Report 2026 meets the security reality in financial services

2026-05-20 00:00
AI is transforming financial services, moving from experimentation to essential infrastructure. The 2026 Stanford AI Index Report emphasizes that while AI offers opportunities in customer service and fraud detection, it also introduces new risks. Secure, real-time data and strong governance are crucial to mitigate these threats. As financial institutions deploy AI, the focus will be on secure and responsible implementation. 🔒💡📊 #AI #FinancialServices #CyberSecurity #Innovation #RiskManagement
Source: Elastic Blog
Karen Mcdermott

Stop rogue AI: How Unity Catalog secures your agent actions

2026-05-19 15:58
🚨 The risks of agentic AI are real and growing. Agents connected to external tools have caused significant data loss by performing unauthorized actions. 🔒 To combat this, Unity Catalog introduces enhanced governance for MCP tools. Users can now enforce service policies, implement fine-grained access control, and maintain audit trails. 📊 This ensures only authorized actions are performed, helping prevent destructive behavior and providing a clear record for accountability. #AI #DataSecurity...

How Salesforce Built an AI Security Agent for Autonomous Threat Triage

2026-05-19 15:32
🚀 Salesforce is enhancing its cybersecurity with the development of the Security Alerts Triage Agent (SATA). Led by Mor Levi, the team focuses on detecting threats early and efficiently managing alerts across a complex environment. The SATA agent autonomously reviews signals, prioritizing cases for analysts to address high-impact threats. This innovation addresses the challenges of data fragmentation and high alert volumes, ensuring rapid incident response and operational discipline....
Scott Nyberg

How to safeguard AI workloads with Unity AI Gateway Guardrails

2026-05-19 13:53
Safeguarding AI workloads is essential for businesses today. Unity AI Gateway Guardrails provide flexible protection for sensitive information in AI applications. These guardrails help ensure secure and compliant AI-generated outputs. The platform offers pre-built guardrails for common needs and allows for custom solutions to meet specific organizational requirements. Integrated with Databricks lakehouse architecture, these guardrails enhance observability and monitoring. 🔒💻🔍 #AIGuardrails...

Your fridge could be a threat to national security

2026-05-19 07:40
🚨 Is your fridge a security risk? In a recent discussion, Adam Meyers from Crowdstrike shared insights from their Global Threat Report, which monitors 281 adversaries in cyber threats. The report highlights rising phishing attacks and the exploitation of security flaws by foreign entities. As AI evolves, both attackers and defenders are becoming more sophisticated. Learn how to protect your data and software from these threats. 🔒 Stay informed and secure! #CyberSecurity #ThreatReport...
Phoebe Sajor

Open AI’s Fotis Chantzis on why identity protocols weren’t designed for agents

2026-05-19 00:00
In the latest episode of Zero-Shot Learning, Fotis Chantzis from OpenAI discusses the challenges of securing AI agents. Traditional identity protocols don't fit as agents act autonomously, making it hard to track their actions. Key points include: - **Continuous Authorization**: Agents need dynamic permission checks as they evolve tasks. - **Attribution**: Tracing actions back to original users is vital for governance. - **Mediated Access**: Secure credential use is essential to prevent...
info@1password.com (Chris Fowler)

Security update: multiple vulnerabilities in Nuxt

2026-05-19 00:00
🚨 Security Alert for Nuxt Users! 🚨 The Nuxt team has identified four vulnerabilities affecting versions 3.11.0–3.21.5 and 4.0.0-alpha.1–4.4.5. Key risks include route middleware bypass, island response validation issues, and XSS vulnerabilities. Netlify customers should upgrade to nuxt 3.21.6 or 4.4.6 for enhanced security. Stay informed and secure! 🔒 #Nuxt #SecurityUpdate #WebDevelopment #Netlify #Vulnerabilities
Source: Netlify Blog

AI security readiness is now the No. 1 obstacle to adoption, Linux Foundation finds

2026-05-18 18:55
🚨 A new report from the Linux Foundation highlights that security readiness is the top barrier to AI adoption and innovation. 67% of organizations feel pressure to accelerate AI deployment, despite security concerns. Companies are focusing on upskilling existing staff to bridge the security capability gap. The importance of addressing these challenges is clear. #AISecurity #TechTalent #LinuxFoundation #Cybersecurity #Innovation
Steven J. Vaughan-Nichols

Coding Agent Horror Stories: The Security Crisis Threatening Developer Infrastructure

2026-05-18 13:00
🚨 **Coding Agent Horror Stories** Issue 1 explores critical security risks in the AI coding agent ecosystem. AI coding agents are now used in about 60% of development tasks, enhancing productivity. However, they also pose significant risks, capable of damaging systems in seconds. This series highlights documented failures and discusses how Docker Sandboxes can help mitigate these threats. Learn more about the balance between innovation and security! 🔒💻 #AICoding #Security #DevOps #TechTrends...
Source: Docker Blog
Jennifer Kohl

Project Glasswing: what Mythos showed us

2026-05-18 06:00
🚀 Recently, we tested Mythos Preview, a security-focused LLM, as part of Project Glasswing. This model analyzes our infrastructure to identify vulnerabilities and understand potential exploits. 🔍 Two key features stood out: 1. **Exploit Chain Construction** - It combines multiple bugs into a cohesive exploit, showcasing advanced reasoning. 2. **Proof Generation** - It not only finds bugs but also proves their exploitability by running code in a test environment. 🛠️ While other models...
Grant Bourzikas

Beyond BYOK: Why governance matters for AI agents

2026-05-18 00:00
GitHub's Copilot CLI now supports BYOK and local models for developers, but it lacks organization-wide control for auditing actions taken by AI agents in automated workflows. 🤖 In contrast, GitLab Duo CLI integrates governance at the platform level, ensuring actions are approved and auditable, even in CI/CD pipelines. 💻 Key questions for leaders: Does the AI implementation require enterprise-level control? How does the security model hold without human oversight? 🔍 Explore GitLab Duo CLI for...
Source: GitLab Blog
Jessica Hurwitz

Kubernetes v1.36: Deprecation and removal of Service ExternalIPs

2026-05-14 18:35
🚨 Kubernetes 1.36 has officially deprecated the .spec.externalIPs field for Services. This change addresses security issues related to trusting users within a cluster, which could lead to vulnerabilities (CVE-2020-8554). 🔒 Instead, users are encouraged to explore better alternatives for load balancing in non-cloud clusters, such as using manually-managed LoadBalancer Services or the Gateway API. ⚠️ For those still using .spec.externalIPs, enabling the DenyServiceExternalIPs admission...

Every layer counts: Defense in depth for AI agents with Red Hat AI

2026-05-14 13:01
🔒 Running AI agents in production involves balancing security and functionality. As teams seek shell and network access, security concerns rise. Red Hat AI emphasizes a compound security approach, addressing vulnerabilities like semantic malware that exploit natural language. Their six-layer framework enhances protection, from hardening platforms to process-level sandboxes. Learn more about securing AI agents effectively! #AI #Cybersecurity #RedHatAI #DevOps #SecurityFramework
Adel Zaalouk

Inside the SOC: AI-powered DNS defense against ransomware

2026-05-14 12:00
In the latest article, Cisco highlights the importance of AI-powered DNS defense in combating ransomware within Security Operations Centers (SOCs). The new Cisco Secure Access platform utilizes AI to provide predictive defense, helping analysts make sense of complex threat patterns. This innovative approach aims to streamline investigations and enhance network protection against evolving cyber threats. 🔍💻 By detecting obfuscated data in DNS packets, the platform disrupts various stages of...
Bill Spry

Modern Bot Defense for Media Wiki Installs

2026-05-14 00:00
Enhancing MediaWiki installations against unwanted bot activity is essential for maintaining integrity and performance. The article discusses effective strategies for bot defense, focusing on modern techniques that developers can implement. Key approaches include utilizing CAPTCHA systems, rate limiting, and monitoring user activity to identify suspicious behavior. Stay informed and protect your platform! 🚀🔒 #MediaWiki #BotDefense #WebSecurity #Developers #TechTips
Amanda Lange

Securing the Federal Digital Experience with Cisco ThousandEyes for Government

2026-05-13 18:33
🚀 Federal agencies are prioritizing digital resilience as a key factor in mission execution. With the new FedRAMP® Moderate authorization, Cisco ThousandEyes for Government offers essential visibility to maintain secure digital services. This platform is designed to enhance service reliability across complex IT environments. The focus is on operationalizing resilience to ensure that critical services remain dependable. #Cisco #ThousandEyes #DigitalResilience #FedRAMP #GovernmentTech
Paulo Cabido

State-sponsored actors, better known as the friends you don’t want

2026-05-13 15:33
State-sponsored actors pose unique challenges for incident response teams. They exploit assumptions about safety within trust boundaries, using legitimate tools and credentials to operate undetected. These actors focus on espionage and long-term data extraction, making traditional security measures inadequate. A shift to zero trust architecture emphasizes continuous verification to enhance security. Organizations must prioritize visibility and maintain deep logging across all systems....
Elio Biasiotto

Trusted software factory: Building trust in the agentic AI era

2026-05-13 13:05
Generative AI is transforming software development, requiring teams to adapt to a new reality. As AI agents generate code and manage dependencies, maintaining control becomes crucial. The solution lies in a trusted software factory, which integrates security and compliance from the start of the development lifecycle. This centralized approach streamlines processes across hybrid cloud environments. Red Hat’s trusted software factory offers a standards-based implementation, enabling teams to...
Meg Foley

Cimento emerges from stealth to secure the one thing no firewall can protect

2026-05-13 13:00
Cimento has launched from stealth mode, focusing on a critical area often overlooked in cybersecurity: human risk. 🤖🔒 Co-founder Zain Rizavi emphasizes that traditional tools struggle against evolving AI attacks. Cimento’s platform creates real-time risk profiles based on employee behavior, integrating with existing tools to enhance security measures. Their unique approach includes multi-turn phishing simulations, aiming to accurately reflect human vulnerability. Learn more about this...
Darryl K. Taft

NIST Narrows the NVD: What Container Security Programs Should Reassess

2026-05-13 10:38
📢 On April 15, NIST announced a new model for the National Vulnerability Database (NVD). While most CVEs will still be published, fewer will receive CVSS scores, CPE mappings, and CWE classifications. This shift reflects a trend observed over the past two years. Three categories will continue to receive full enrichment: CVEs in CISA’s Known Exploited Vulnerabilities catalog, those affecting federal software, and critical software as defined by Executive Order 14028. The rest will now be...
Source: Docker Blog
Dan Berezin Stelzer