8 Tools to Discover Shadow Agents Across Workstations and Cloud in 2026
Shadow agents are quickly becoming one of the hardest visibility problems in enterprise security.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
7 AI Detection and Response Platforms for Enterprise Security Teams
The most difficult AI incidents do not necessarily begin with an obviously malicious prompt. An employee can ask an approved agent to summarize customer data. The agent retrieves the correct records, invokes an approved tool, generates the requested output, and then sends it somewhere it should never have gone. Every individual action may look legitimate in isolation. The incident only becomes visible when security can reconstruct the entire sequence and understand what the user intended, what the agent inferred, which systems it touched, and where the execution path diverged.
Ways We Can Keep AI Under Control Before It Becomes a Problem
It's no secret that AI has a significant presence in our daily lives these days. Many people hail it as a great way to save time and help them with basic tasks each day. The problem is, AI has become a part of nearly every single app, product, and device. AI has overreached the limits that the companies selling it promised. It's time for everyone to take action to ensure that AI products and companies are kept under control before they become problematic.
OpenMatter Network Expands Platform with New Capabilities for Secure AI, Computing and Data Collaboration
Less than three months after its commercial launch, OpenMatter Network today announced a significant expansion of the platform with new capabilities that make it easier for enterprises, developers and researchers to build, deploy and collaborate using sensitive data and AI while maintaining cryptographic control over how information is accessed, computed and shared.
How to Detect Shadow AI: 8 Key Steps
Security teams have spent years building visibility into unsanctioned SaaS apps, cloud services, and other forms of shadow IT. But shadow AI raises the bar. Discovering an unsanctioned AI app or autonomous agent is only the beginning. Teams also need to determine which identities it authenticates with, what credentials and permissions it relies on, what data it can access, which systems it integrates with, and what downstream actions it performs. The scale of the challenge is already becoming apparent.
New Phishing Kit Uses AI to Fully Automate Vishing Attacks
A new phishing kit is using generative AI to fully automate voice phishing (vishing) attacks, according to researchers at Group-IB. The phishing platform, called “Balonx,” includes a module dubbed “CallFlow” that the researchers say “represents a fundamental evolution” in the phishing-as-a-service market.
Shadow AI: What Clients Aren't Telling Their MSPs
MSPs are expected to understand their clients’ technology environments. They know which endpoints are managed, which applications are business-critical, which systems require patching or maintenance, where sensitive data resides and who has access to it. Increasingly, however, critical technology decisions are now being made without IT or MSP involvement. Across client environments, this can take many forms: And each instance can occur without the MSP ever knowing.
Governance Strikes Back: The Most Used, Most Abused Word in the Galaxy
Ask AI to Choose a prompt Write a TLDR of this post Explain the security risk Summarize what CISOs should know When I walked to the stage in Copenhagen, I had a lot on my mind. For 3 days I'd had countless conversations with leaders and practitioners about AI and agentic security. The one word on everyone's lips was "governance"; day 3 at the conference was "Governance Day," in fact. This is a bag one vendor was giving out: But governance of what? To what end?
Extending the Single Source of Truth to the Agentic Software Supply Chain
Every developer on your team now runs multiple agents. None of them are waiting for human sign-off to act. That’s exactly the gap we discussed and closed at swampUP 2026. JFrog unveiled new capabilities that extend the JFrog Platform as not only the Single Source of Truth for OSS and heritage software, but now the Agentic Software Supply Chain. Here’s everything we announced, and why it matters.
Cybersecurity Leaders React to OpenAI's Hugging Face Breach UpGuard
In July 2026, OpenAI's own AI agents escaped their sandbox and reached Hugging Face's production systems during an internal cybersecurity evaluation. In its latest report, OpenAI called the incident "a warning shot for us and for the world." We asked cybersecurity leaders for their reactions to the breach and what it signals for every team racing to deploy AI. One detail stands out. Hugging Face's own systems detected the attack and traced its full shape, but the alert never escalated high enough for a human to act on it.