Tag: ai
-
Salt Security Launches Industry-First AWS WAF Managed Ruleset for AI Agents and API Protection
Salt Security has unveiled what it says is the industry’s first AWS WAF managed ruleset designed specifically to protect both APIs and AI agents, extending native AWS Web Application Firewall (WAF) capabilities to address emerging threats driven by agentic AI. Announced at Black Hat USA 2026, the new Salt Managed Rules for AWS WAF are…
-
Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt
Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access to artificial intelligence (AI) models on underground cybercrime forums and messaging platforms.One such service, Poison Claude, claims to offer access to Anthropic’s large language models (LLMs), including Opus 4.8, Opus 4.7, Opus 4.6, and Sonnet 4.6.”Advertisements for Poison Claude First seen on thehackernews.com…
-
Menlo Security Extends MARS to Protect AI Assistants and Coding Agents
Menlo Security has expanded Menlo Agent Runtime Security, or MARS, with controls aimed at protecting AI assistants and coding agents from prompt injection, malware and data loss as they browse the web, use applications and process files. The company is highlighting the update at Black Hat USA 2026. MARS is a cloud-based capability in Menlo’s..…
-
BSidesSF 2026 Pwning And Defending AI Agent Code Interpreters
Tags: aiPresenter: Kinnaird McQuade Our thanks to Security BSides San Francisco for publishing their Creators, Authors and Presenter’s outstanding BSidesSF 2026 content on the Organizations’ YouTube Channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/bsidessf-2026-pwning-and-defending-ai-agent-code-interpreters/
-
What Gold Eagle Validates, and What Your Organization Still Has to Own (July 2026)
Tags: ai, business, compliance, data, finance, framework, government, intelligence, open-source, update, vulnerabilityWhat Gold Eagle Validates, and What Your Organization Still Has to Own (July 2026) The federal government just stood up a clearinghouse to find and validate vulnerabilities faster, with AI doing the finding. That is not the same thing as a clearinghouse that owns the consequence when a patch does not land in time. Key…
-
White House walks tightrope on securing AI without stifling tech innovation
National Cyber Director Sean Cairncross said the administration wants to work collaboratively with the private sector. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/administration-securing-ai-stifling-tech-innovation/827088/
-
New Research: The Confidence Gap Between CISOs and Their Boards Is Real, and It’s Measurable
Las Vegas, United States, August 5th, 2026, CyberNewswire Pulse Security AI calls for boards and security leaders to define cyber risk appetite in new report: The CISO-Board Communication Gap Boards of directors believe they understand their company’s security posture and what it means for the business. The security leaders presenting to them are far less…
-
From Inspection to Authorization: Securing Networks for AI Agents
Tags: access, ai, api, business, ceo, cloud, communications, control, crowdstrike, cryptography, data, encryption, endpoint, finance, firewall, identity, infrastructure, login, network, office, risk, saas, service, usa, vpn<div cla An Industry Perspective By Rajiv Pimplaskar, CEO, Dispersive Holdings, Inc. Agentic AI changes the network security problem from inspection to authorization. As more traffic is generated by agents, models, and workloads operating at machine speed, the network has to make trust decisions continuously, evaluate policy in real time, revoke access automatically, and keep…
-
AI Agents Are Really Starting To Get This Hacking Thing: Analysis
An incident disclosed by the AI Security Institute revealed that an AI agent attempted to socially engineer real people”, without actually been told to do so. First seen on crn.com Jump to article: www.crn.com/news/security/2026/ai-agents-are-really-starting-to-get-this-hacking-thing-analysis
-
Reco Expands AI Runtime With Browser Controls and Prompt Blocking
Reco is expanding its AI Runtime capability with browser-based enforcement, real-time prompt analysis and blocking, and automated remediation. The company said the update is designed to act on the risk posed by AI agents without requiring security teams to route traffic through a new gateway or proxy. Reco’s Smart Remediation feature turns findings into proposed..…
-
“I’m Allowed”: Hackers Use Simple Claims to Bypass AI Guardrails
Cisco Talos found hackers using simple authorization claims to bypass AI guardrails, build DDoS attack tools, steal credentials and access live camera services. First seen on hackread.com Jump to article: hackread.com/im-allowed-hackers-use-claims-bypass-ai-guardrails/
-
Arctic Wolf gibt CyberReadiness-Accelerator für Partner bekannt
Arctic Wolf gibt die Verfügbarkeit des <> bekannt. Das neue, partnergeführte Programm unterstützt Unternehmen dabei, Cyberrisiken besser zu verstehen und ihre Widerstandsfähigkeit in einer zunehmend von KI beschleunigten Bedrohungslandschaft zu stärken. Trotz Vulnerability- und Patch-Management bleiben Unternehmen unbekannten Risiken durch blinde Flecken innerhalb ihrer Angriffsfläche ausgesetzt, Tendenz steigend. Laut dem weltweiten Verizon-2026-Data-Breach- […] First seen…
-
How AI-powered phishing killed blocklists for good
AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track fast enough. Push Security explains why browser-level, technique-based detection offers a more durable defense than relying on domains, signatures, and other known-bad indicators. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/how-ai-powered-phishing-killed-blocklists-for-good/
-
Paperclip AI Flaws Let Unauthenticated Attackers Run Commands
3 Paperclip flaws exposed data & allowed unauthenticated command execution in two deployment modes First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/
-
Bold Security Extends Endpoint Data Protection Across AI Interactions
Bold Security has added an endpoint data protection layer for AI interactions, covering prompts, clipboard activity, file access, Model Context Protocol payloads and commands issued by autonomous agents. The company said the layer is designed to monitor activity locally on the device as data moves through web-based copilots, desktop AI applications and command-line workflows. It..…
-
Optiv Debuts Agentic Security Operations, Overhauling Its Managed Detection Service
Optiv unveiled Optiv Agentic Security Operations on Wednesday at Black Hat USA 2026, a major expansion of its managed security services and a substantial overhaul of the offering formerly known as Optiv MDR. The new service combines Google Security Operations technology, already central to the prior offering, with deeply integrated cloud and AI security capabilities..…
-
Terra Security Adds Prevention Rules to Its Offensive Security Platform
Terra Security has launched Prevention, a capability that turns confirmed exploit findings into targeted Web Application Firewall or firewall rules while a permanent fix is still in progress. The feature is part of Terra Platform. When Terra confirms that a finding is exploitable, its AI agents test whether existing compensating controls stop that attack path……
-
JetStream Launches AI Kill Switch for Individual Agents
JetStream Security has launched an AI Kill Switch that can shut down a single compromised or malfunctioning AI agent without affecting other AI operations. The control is part of JetStream’s AI governance platform. The company said it combines the person who invoked an action, the agent identity carrying it out, the system’s stated intent and..…
-
Bedrock Data Launches Agent DLP for Runtime AI Data Controls
Bedrock Data has launched Agent DLP, a runtime data loss prevention capability for AI agents that inspects tool calls and responses as they happen. Agent DLP is available as part of Bedrock Data’s ArgusAI platform. The company said it checks requests an agent sends to a tool and the responses that come back, then allows,..…
-
Backslash Introduces Agentic Fabric Graph for Endpoint AI Risk
Backslash Security has introduced the Agentic Fabric Graph, a visual risk assessment capability for mapping AI agents and related components across employee workstations and laptops. The graph maps agents, skills, Model Context Protocol servers, connectors and other parts of what Backslash calls the agentic fabric. Security teams can filter the map for unapproved models, excessive..…
-
Menlo Security Extends Platform Reach to AI Agents
Menlo Security today at the Black Hat USA conference extended its cloud platform to secure artificial intelligence (AI) agents at runtime by sanitizing the web pages and files they read to neutralize prompt injection attacks and block data exfiltration. Company CEO Bill Robbins said the Menlo Agent Runtime Security (MARS) platform created to isolate browsers..…
-
BigID Adds Agentic Access Controls and Intent Monitoring for AI Agents
BigID has introduced two capabilities aimed at governing what AI agents can access and checking whether their actions match the tasks they were assigned. Announced Aug. 4 in a release tied to Black Hat USA 2026, Agentic Access Control and Intent-Based Activity Monitoring are designed to address the gap between an agent’s permissions and its..…
-
Absolute Security Survey Puts Cost of Endpoint Downtime at $19 Million an Hour
Endpoint outages cost enterprises an average of $19 million per hour, according to a new Absolute Security report based on a survey of 1,000 chief information security officers. Absolute published Autonomous Cyber Resilience in the Era of AI, the third volume in its State of Enterprise Cyber Resilience research series, in connection with Black Hat..…
-
AI and Cyber Risk Glossaries for Enterprises – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/ai-and-cyber-risk-glossaries-for-enterprises-kovrr/
-
Optiv Unveils Agentic Security Operations In Major Managed Service Expansion: Exclusive
Optiv announced a major expansion for its managed security services Wednesday with the debut of its Agentic Security Operations offering, with the solution provider powerhouse aiming to accelerate the shift from reactive to proactive cybersecurity for customers with the help of AI, according to Optiv executives. First seen on crn.com Jump to article: www.crn.com/news/security/2026/optiv-unveils-agentic-security-operations-in-major-managed-service-expansion-exclusive
-
Keyfactor will Cofide übernehmen, um verifizierte Identitäten für KI-Agenten und Cloud-Workloads bereitstellen zu können
Keyfactor gibt seine Absicht bekannt, das in Großbritannien beheimatete Unternehmen Cofide, eine Identitätsplattform, die Software-Workloads und KI-Agenten in modernen Cloud-Umgebungen schützt, zu übernehmen. Durch die Übernahme wird die Keyfactor-Trust-Control-Plane auf Workloads und KI-Agenten ausgeweitet werden. Sicherheitsteams werden über ein einziges System verfügen, mit dem sie unternehmensweit nicht-menschliche Identitäten verwalten und steuern können werden. Unternehmen setzen zunehmend…
-
Anthropic AI agent faked identities, phished real developers in UK government hacking test
An artificial intelligence agent built by Anthropic independently planted malicious code in a real software project and sent phishing emails to developers during a U.K. government security evaluation, according to Britain’s AI Security Institute. First seen on therecord.media Jump to article: therecord.media/anthropic-ai-hacking-uk
-
C5-Type-1-Testat des BSI bestätigt die Sicherheit von <> für Organisationen mit hohen Anforderungen an Cloud-Sicherheit
Extreme Networks gibt bekannt, dass <> das BSI-C5-Type-1-Testat nach dem Cloud-Computing-Compliance-Criteria-Catalogue (C5) des Bundesamts für Sicherheit in der Informationstechnik (BSI) erhalten hat. Damit erfüllt die branchenweit einzige KI-gestützte All-in-One-Cloud-Networking-Plattform einen der strengsten staatlich unterstützten Cloud-Sicherheitsstandards Europas. Das BSI-C5-Type-1-Testat bestätigt unabhängig, dass Extreme-Platform-One die Anforderungen an sichere und regelkonforme Cloud-Netzwerkinfrastrukturen für stark regulierte Organisationen erfüllt […] First…
-
INTERPOL flags AI as the new engine of African cybercrime
Africa’s growing digital economy is exposing governments, businesses and internet users to a rising wave of cybercrime. The continent recorded more than 1.1 billion … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/05/interpol-africa-cybercrime-trends/
-
AI agent deception moves from theory to reality in UK cyber tests
>>During a routine cyber evaluation, AI agents took sustained, unsanctioned action directed at real people and organisations,<< UK's AI Security Institute (AISI) … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/05/ai-agent-deception-in-cyber-tests/