Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Demo Discover Enterprise AI Workloads Running on AWS

Jul 14, 2026 By Wallarm In Wallarm
AI workloads are appearing across AWS environments faster than most teams can inventory them. New APIs, EKS clusters, model integrations, and AI services are showing up across accounts and regions without a clear ownership trail or centralized visibility. By the time security catches up, the environment has already changed again.
View Video
appsentinels

Two Months After PocketOS: What a 9-Second Database Deletion Taught Us About Agentic AI Security

Jul 13, 2026 By AppSentinels In AppSentinels
Nine seconds. One API call. A car rental software company’s production data was gone. That’s the headline from the PocketOS incident, and it’s the reason this story spread across engineering and security circles the way it did in late April. Two months later, the incident is no longer breaking news. But it hasn’t aged out of relevance; it has aged into a pattern.
Read Post
wallarm

AI Control Platform vs. AI Firewall vs. AI Gateway: Clearing Up The Terminology

Jul 13, 2026 By Wallarm In Wallarm
Editor's note: This article was originally published by Tim Erlin on LinkedIn. It has been republished here with the author's permission. It seems like every security vendor now sells "AI security." The WAF companies, the API gateway companies, the cloud platforms, the proxy startups: all of them have an AI story, and most of them have attached one of three labels to it. AI gateway. AI firewall. AI control platform. The terms often get used as if they're interchangeable, but they are not.
Read Post

AI Governance on AWS: Discover, Observe, and Control AI in Production

Jul 13, 2026 By Wallarm In Wallarm
AI adoption within AWS environments is accelerating faster than most security and governance programs. AI agents, APIs, MCP servers, and model integrations are entering production across cloud environments, often without centralized visibility or runtime controls. In this webinar, you’ll see how teams can discover AI workloads across AWS accounts, understand what AI systems are actually doing at runtime, enforce policy in real time, and generate continuous governance evidence without slowing engineering teams down. The session focuses on practical operational capabilities for AI systems already running in production.
View Video
appsentinels

MCP Supply Chain Security: How Malicious MCP Servers Are Infiltrating Enterprise AI Environments

Jul 9, 2026 By AppSentinels In AppSentinels
Every enterprise deploying AI agents is building on a foundation of third-party MCP servers they don’t control, can’t verify, and barely track. The security conversation keeps focusing on the model – prompt injection, jailbreaks, hallucinations. That’s the wrong place to look. We’ve covered why that framing falls short elsewhere too – see System Prompts Are Not Security Boundaries. Business Logic Graphs Are.
Read Post
appsentinels

The Four Attack Patterns Traditional Security Tools Miss at FIFA-Scale Events

Jul 6, 2026 By AppSentinels In AppSentinels
Every major tournament cycle, ticketing platforms brace for a traffic spike. Most security teams plan for volume. The attack data tells a different story: the traffic that does the most damage isn’t the loudest traffic. It’s the traffic that looks like a real fan, on a real device, doing something a real fan would plausibly do, just millions of times, in a pattern no single fan ever would.
Read Post
appsentinels

OWASP Top 10 for Agentic Applications 2026: What It Means for Enterprise AI Security

Jul 2, 2026 By AppSentinels In AppSentinels
OWASP, the Open Worldwide Application Security Project, has published Top 10 lists for over two decades to help security teams prioritize the risks that matter most. The original OWASP Top 10 for web applications became the industry’s default checklist for application security. When large language models moved into production, OWASP followed with the Top 10 for LLM Applications, addressing risks like prompt injection and sensitive information disclosure in single-turn model responses.
Read Post
appsentinels

ServiceNow, Then PeopleSoft: Why the Same Endpoint Failure Keeps Repeating

Jul 1, 2026 By AppSentinels In AppSentinels
Three weeks ago, it was ServiceNow: an endpoint that never asked who was calling, exposing customer data to anyone who asked. This time it’s Oracle PeopleSoft, exploited at scale by the threat actor ShinyHunters. Two platforms, two different vendors, the same root failure: an endpoint that skipped the one question it existed to ask. That’s not a coincidence you write off as bad luck at two companies.
Read Post
miniorange

OAuth vs. API Keys for AI Agents: Why Static Credentials Break in Production Systems

Jun 30, 2026 By miniOrange In miniOrange
How do you ensure AI agents authenticate when they interact with your entire enterprise ecosystem when you aren’t there to watch their every move? Today, AI agents can do many things autonomously. They can update CRM records, create tickets, trigger workflows, modify data, and just about anything. The importance of authentication increases as they become more autonomous day by day. For years, API keys were the easy default for connecting applications to APIs.
Read Post

From prompt to action: Al Security with Salt Security and CrowdStrike

Jun 30, 2026 By Salt Security In Salt Security
As enterprises accelerate adoption of Generative AI, the security perimeter is rapidly expanding. This creates a new, largely unprotected attack surface: the Agentic Action Layer. In this on-demand webinar, @CrowdStrike and Salt Security introduce an AI-native security architecture that spans the full chain of intent-to-action. Learn how CrowdStrike Falcon AIDR protects the model runtime, prompts, inference, and LLM behavior, while Salt Security governs and defends the APIs, MCPs, and services where AI actions actually occur.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.