Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI Evaluation and Security: Why Real-World Testing Matters More Than Ever

As organizations deploy artificial intelligence across customer service, HR, finance, and business operations, security concerns are expanding beyond traditional cybersecurity risks. Companies are no longer focused solely on protecting systems from external threats. They must also ensure AI tools behave reliably, safely, and consistently when interacting with real users.

MCP is the New Attack Surface -- and Your Controls Probably Don't Cover It #ai #mcp

AI just handed attackers a new front door — and most security teams don't even know it exists. Model Context Protocol (MCP) is the emerging standard that lets AI agents talk to your tools, your data, and each other. It's also the most significant new attack surface to emerge in years. The NSA noticed. Your adversaries already have.

Ep. 61 - Blind With Scissors: The NSA's MCP Warning for Every Agentic AI Deployment

The NSA just published a rare advisory on the Model Context Protocol (MCP)—the plumbing under nearly every agentic AI deployment of the last 18 months—and the verdict is stark: optional authentication, no token lifecycle, silent behavior changes, and no logging to catch any of it. Host Tova Dvorin sits down with defensive cybersecurity expert Adrian Culley to unpack the eight risk categories, the WhatsApp and GitHub MCP exploits, and why MCP is now a testable validation surface.

Talk to Your Platform: Spin Up JFrog Self-Service Trials with MCP - No Human Intervention Required

JFrog is one of the first Software Supply Chain Management and Security Platforms to provide MCP functionality, which we have now opened up to anyone interested in trying Claude and Cursor in their own development environment. Doing a free trial is one of the best ways to see how JFrog integrates with your developers, operations and security.

Five Signals, One Answer: Why Single-Signal AI Security Always Fails

The security industry hasn’t been wrong about agentic AI risk. It’s been incomplete. There’s no shortage of single-signal solutions for the problem: tools that analyze prompts for malicious content, platforms that monitor data access patterns, capabilities that assess model behavior for signs of manipulation. Each captures something real. None is sufficient on its own.

AI in Australian schools: Managing emerging risks while building a safer learning environment

AI is everywhere in Australian schools. Students are using AI-powered tools to support learning, teachers are leveraging AI to improve productivity and lesson planning, and school administrators are exploring new ways to simplify operations. But while AI holds a lot of promise, it also introduces new cybersecurity challenges. Australian schools increasingly find themselves balancing innovation with the need to protect students and staff.

The New Security Risks of the Agentic Development Lifecycle

For years, application security ran on a simple assumption: software moves through a lifecycle, and security inspects the artifacts as they travel from development to production. Developers plan, write code, commit it, test it, scan it, and ship it. Every control built, including pull request reviews, CI/CD gates, and post-commit scanning, assumed a human was sitting between each step, making decisions a tool could later check.

Third Party Risk in the Age of AI. A Spotlight on Black Kite

Your vendors are adopting AI faster than you can assess them. What does that mean for your third party risk? Welcome to Razorwire, the podcast where we share our take on the world of cybersecurity with direct, practical advice for professionals and business owners alike. I'm Jim and in this Spotlight on Technology episode, I'm joined by Jeffrey Wheatman, Senior Vice President and Cyber Risk Strategist at Black Kite. Jeffrey previously spent over a decade as an analyst VP at Gartner, where he launched their third party cyber risk management coverage.

Exposure Management in the AI Era | Introducing EDR Compensating Controls Awareness

In this Feature Focus, Megan Horner, Product Marketing Director at Seemplicity, explores the evolving landscape of vulnerability management in the AI era. As the rise of AI models like Claude Mythos enables attackers to shrink exploit windows, security teams are facing an overwhelming flood of high-priority vulnerabilities.

Where Should Humans Sit in AI-Driven Cybersecurity?

There is a huge amount of excitement right now about AI and security operations. Across the industry, we are seeing rapid innovation in areas such as behavioural analytics, AI-assisted investigation, and increasingly agent-based capabilities designed to help security teams process large volumes of activity more effectively. Security teams need that help. The scale of alerts, identities, and telemetry they must manage today has grown far beyond what humans alone can realistically handle.