Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

salt security

The Role of Agentic AI in Cybersecurity

Sep 10, 2026 By Michael Callahan In Salt Security
Agentic AI has moved from experimental research to live production environments at unprecedented speed, outpacing nearly every technology security leaders have encountered in recent history. Distinguishing themselves from standard chatbots that merely respond and pause, autonomous agents architect multi-step workflows, interface with tools and APIs, maintain contextual memory, and execute operations with minimal human intervention.
Read Post
appsentinels

Agentic AI Security Buyer's Checklist: 15 Questions to Ask Before You Sign

Sep 10, 2026 By AppSentinels In AppSentinels
Buying agentic AI security software is a fast-moving decision with high stakes. Get it wrong, and your security team ends up chasing agent activity it cannot see, while attackers exploit business logic gaps that no prompt filter was built to catch. This checklist gives security and platform leaders a structured way to evaluate vendors before signing, based on the questions that actually separate a purpose-built platform from a bolted-on feature.
Read Post
Securing AI API Keys From Development to Production

Securing AI API Keys From Development to Production

Sep 10, 2026 By Zoey, Growth at OfoxAI In SecuritySenses
An AI feature can reach production before anyone has decided who owns its credentials. A developer creates an API key for a prototype, a colleague copies it into a background worker, and a troubleshooting session puts the same value into a support ticket. The application works, but the team can no longer say exactly where its access begins or ends.
Read Post
appsentinels

The Ultimate API Security Guide: Everything You Need to Know to Protect Your APIs

Sep 7, 2026 By AppSentinels In AppSentinels
APIs power modern software. They connect apps, move data, and run agentic AI workflows. But every API is also a door into your systems. Attackers know this. They target APIs more than any other layer today. This guide breaks down API security from the ground up. You will learn what it means, why it matters, and how to protect your APIs against real-world threats. We cover risks, the OWASP API Security Top 10, best practices, tools, and use cases. Let’s get started.
Read Post
wallarm

Dissecting Attacks Is Only Valuable If It Informs Controls: What the Unit 42 agentic AI investigation should change in your control set, stage by stage.

Sep 4, 2026 By Wallarm In Wallarm
The volume of published incident research involving agentic AI is increasing, and the analysis that follows each report tends to concentrate on the same attribute: speed. The recent investigation from Unit 42, the threat intelligence and incident response group at Palo Alto Networks, is a representative case.
Read Post
salt security

Ten Years, Two Photos, and One Bet That Got Much Bigger

Sep 3, 2026 By Roey Eliyahu In Salt Security
These two photos were taken almost ten years apart. The first is from 2016, with Sam Altman at Y Combinator. The second came from an unexpected encounter in Silicon Valley almost a decade later. I’ll come back to it at the end. With Sam Altman at Y Combinator in 2016. I was 22 when I arrived in Silicon Valley on a one-way ticket, with a little bit of cash that was barely enough for one month of living there, and a thesis I wanted to prove.
Read Post
appsentinels

Top 10 Business Logic Security Companies in 2026

Sep 3, 2026 By AppSentinels In AppSentinels
For business logic attacks, prioritize runtime behavioral detection over API discovery alone, tools that map workflows and catch abuse mid-sequence, not just at the request level. AppSentinels leads with a purpose-built Business Logic Graph plus behavioral fraud detection; Salt Security and Cequence are also strong runtime-behavioral options. Picture this: someone applies the same discount code 40,000 times in a row, or slides a decimal point in a checkout request to buy a $500 item for $5. No malware.
Read Post
appsentinels

7 Best Practices for Implementing API Governance

Sep 1, 2026 By AppSentinels In AppSentinels
API governance is the framework of policies, standards, and controls an organization applies to how APIs are designed, exposed, accessed, and monitored. It answers four questions for every API in your environment: who owns it, what data it touches, who can call it, and whether its behavior stays within approved limits.
Read Post
salt security

Secure What Agents Do, Not Just What They Say

Aug 31, 2026 By Michael Callahan In Salt Security
Salt Security and CrowdStrike give joint customers visibility across the full agentic path, from the model to the system where the action lands An employee at a bank asks an AI assistant a routine question. How much money is in my savings account? The assistant answers correctly. The prompt was legitimate. The response was accurate. A model-layer security control inspects both and finds nothing wrong, because nothing is wrong with either. Now look at what happened in between.
Read Post
Security by Design: Incorporating Cybersecurity into Early-Stage Software

Security by Design: Incorporating Cybersecurity into Early-Stage Software

Aug 31, 2026 By SecuritySenses In SecuritySenses
In today's hyper-connected digital economy, launching a new software application requires balancing speed, innovation, and technological resilience. Early-stage founders and product teams naturally focus on building compelling user interfaces, refining core value propositions, and validating market demand as quickly as possible. However, treating information security as an afterthought or a secondary milestone to address post-launch creates massive operational vulnerabilities that bad actors can easily exploit.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.