Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

nightfall

AI Agent Security Explained: Agents, MCP, Prompt Injection, and the AI Harness

Jun 18, 2026 By Brian Hutchins In Nightfall
AI Agent Security is quickly becoming one of the most important areas in cybersecurity. Terms like "agent," "harness," "MCP," "tool calls," "tool responses," "instruction hijacking," "indirect prompt injection," "prompt exfiltration," and "tool misuse" are appearing in conference talks, vendor announcements, podcasts, and industry discussions, often without clear explanations.
Read Post
Arctic Wolf

AI Export Controls and the Risk of Slowing Down Defense

Jun 18, 2026 By Nick Schneider In Arctic Wolf
The Trump administration has ordered Anthropic to restrict access to its most advanced AI models, Fable 5 and Mythos 5, citing national security concerns. Officials raised the possibility that these systems could be used by foreign actors to identify software vulnerabilities or support cyber attacks.
Read Post
Feroot

What Canada's Bill C-36 Means for AI-Powered Digital Experiences

Jun 18, 2026 By Feroot In Feroot
As Canada strengthens privacy protections and enforcement, organizations must find a way to accelerate AI innovation while maintaining continuous visibility into how customer data is collected, shared, and protected. Canada’s proposed Bill C-36 is about more than privacy regulation. It reflects a broader challenge facing governments, regulators, and businesses around the world.
Read Post
sumologic

AI across the security lifecycle

Jun 18, 2026 By Michelle Beastall In Sumo Logic
For nearly a decade, the security industry has used machine learning to solve detection. By feeding it enough logs and determining abnormal behaviors, it found the threats that rules-based systems miss. This delivered sharper anomaly detection, fewer false positives, and UEBA is now essential. In fact, threat detection and analytics account for close to 44% of total SIEM spend, the single largest use case by far. Using machine learning for detection was only the start.
Read Post

Why 72% of Security Budgets Are Aimed at the Wrong Thing | Reach Security x Insurity

Jun 18, 2026 By Reach Security In Reach Security
72% of security budgets still go to detection and response, not prevention. That is the thread running through the latest episode of The Security Strategist, where EM360Tech's Shubhangi Dua talks with Garrett Hamilton, CEO of Reach Security, and Jay Wilson, CIO and CISO at Insurity. With the majority of budgets still pointed at detection and response, the conversation makes the case for swinging the pendulum back toward prevention, and why the tech can finally back it up.
View Video

An AI Hacked Its Way to Root Access. Nobody Told It To.

Jun 18, 2026 By SafeBreach In SafeBreach
An AI agent orchestrated a fully automated offensive campaign across 648 firewalls in 55 countries — credential harvesting, network recon, lateral movement, no human operator driving it. That's Cyberstrike AI, March 2025. Not a lab demo. A working operation in the wild. Then in February, a separate incident: a coding agent — not deployed for offense — hit an authentication barrier, found an alternate path to root, and took it. Emergent offensive behavior from a model that wasn't asked to attack.
View Video
knowbe4

What AI Can't Hide When It Writes a Phishing Email

Jun 18, 2026 By KnowBe4 Threat Lab In KnowBe4
Phishing has always been a game of impersonation. But for decades, the tell was in the details: a misspelled word here, an awkward sentence there, a logo that was just slightly off. Security awareness training built an entire doctrine around those cues. Spot the typo, avoid the trap. That playbook is now obsolete. KnowBe4's latest Phishing Trends Report found that 86% of phishing attacks observed in the last six months involved some level of AI assistance.
Read Post
knowbe4

Your AI Agents Are Eager to Please And Easy to Exploit

Jun 18, 2026 By Bryan Palma In KnowBe4
An AI-driven system at a beverage manufacturer recently churned out several hundred thousand excess cans after misreading unfamiliar packaging. The system didn’t recognize the company’s new holiday labels, flagged them as an error, and triggered additional production runs before the company caught the mistake. The system followed its instructions perfectly.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.