Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

armo

Tool Call Analysis for AI Attack Detection: Reading What Rides Inside the Call

May 30, 2026 By Yossi Ben Naim In ARMO
A compromised agent doesn’t make a single call it isn’t allowed to make. It queries a table it’s authorized to read, calls a tool it’s authorized to use, sends to a domain that’s on the allowlist. Every call is legal. The attack is in the values it passes, and your tool-call log records all of it as a clean day’s work. A tool call has two layers. Almost every tool you run reads the first one: the call itself: which tool, in what order, at what rate.
Read Post
armo

How to Tell If Your AI Agent Has Been Compromised (When Every Symptom Looks Normal)

May 30, 2026 By Ben Hirschberg In ARMO
Your AI agent just did something it has never done. It called a tool that is not in its usual set, or it opened a connection to a destination you do not recognize, or its output came back subtly wrong. So you do what anyone does: you search for what a compromised agent looks like, and you find a checklist. Unusual tool usage. Unexpected data access. Out-of-context responses. Elevated resource consumption.
Read Post
Compliance and Regulation Heat Up in 2026: A New Phase of Scrutiny for Financial Services Organisations

Compliance and Regulation Heat Up in 2026: A New Phase of Scrutiny for Financial Services Organisations

May 29, 2026 By Sean Tilley, Senior Director of Sales EMEA In 11:11 Systems
The regulatory landscape facing financial services in 2026 is more complex, more demanding, and faster moving than at any point in the past decade. Across the UK, regulators are attempting to strike a delicate balance of stimulating economic growth while maintaining strong consumer protection and financial stability. This balancing act is unfolding against a backdrop of sluggish economic performance, geopolitical uncertainty, and political pressure for "pro-growth" regulation. The result is a regulatory environment where the pace, scope, and intensity of change is accelerating sharply.
Read Post
teramind

What is AI Usage Control?

May 29, 2026 By Teramind In Teramind
AI usage control is the security and governance framework that enterprises use to monitor, regulate, and secure how employees interact with artificial intelligence tools. As Generative AI becomes deeply embedded in everyday workflows, organizations face a high-stakes balancing act: capturing massive productivity gains while preventing catastrophic data leaks, compliance violations, and intellectual property exposure.
Read Post
knowbe4

AI Agent Governance Part 2 - What Good Looks Like: Governing AI Agents in Practice

May 29, 2026 By Anna Collard In KnowBe4
If AI agents are becoming organizational actors, then governance needs to move beyond principles and into operational structure. In Camille Stewart Gloster’s upcoming book The Insider You Build, she explains that governance is not defined by policies or structures, but by whether it can actually influence system behavior at runtime. In an agentic environment, governance only exists where it can shape, constrain, and intervene in decisions as they happen.
Read Post
protecto

Cosine Similarity Is Math, Not Magic

May 29, 2026 By Amar Kanagaraj In Protecto
Cosine similarity is pure math. No magic. No understanding. Once you accept that, a lot of the confusion goes away. We talk to a lot of customers, and even seasoned engineers, who treat cosine similarity like magic that solves everything. Engineers talk about embeddings like they are definitive. Product teams trust similarity scores like they are facts. Vendors sell “semantic understanding” like the model actually understands. Truth is, it does not.
Read Post

Introducing Agentic Exposure Validation

May 29, 2026 By Check Point Exposure Management (Cyberint) In Cyberint
Check Point Agentic Exposure Validation (AEV) uses AI agents to reason like an attacker across your external footprint. It correlates your assets with live threat intelligence, exploit research, and attacker behavior, and tells you, in minutes, what's actually exploitable and what isn't. No assumptions. No noise. Evidence-backed findings your team can act on immediately.
View Video
armo

Detecting AI Agent Lateral Movement in Kubernetes

May 29, 2026 By Yossi Ben Naim In ARMO
An AI agent moving laterally through a Kubernetes cluster does not look like an intrusion. There is no foreign process, no exploit, no dropped binary — just the agent using the identity, network routes, and tools it was handed at deployment to reach targets it was technically allowed to touch. That is the entire problem. The controls you run were built to catch an outsider pivoting from host to host.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.