Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Securing autonomous AI agents: regulatory risk and governance for modern AppSec

Autonomous AI agents writing and executing code at machine speed present an urgent compliance challenge for modern software organizations. As global regulations tighten, engineering leaders must establish clear governance layers over agentic workflows, external tool calls, and Model Context Protocol integrations to ensure full accountability. In this session, Mend.io experts Asaf Saar and Ben Goldberg unpack the intersection of AI compliance, software supply chain security, and enterprise risk management. Learn how to bridge the accountability gap without sacrificing development velocity.

Best Hypervisors in UAE for Enterprise Virtualization

Selecting a hypervisor in the UAE is no longer just a technical infrastructure decision. For many enterprises, it now affects licensing predictability, data management, operational resilience, security, and access to regional support. As organizations continue their digital transformation initiatives, infrastructure teams are also reassessing long-standing virtualization platforms. Changes in VMware licensing and ownership have encouraged many enterprises to explore VMware Alternatives and plan potential VMware Migration strategies.

ISO 42001 Evidence: What Auditors Ask For

ISO 42001 is the management system standard for artificial intelligence. It sits on the backbone of ISO 27001 but with a different focus: do you have a system for governing AI, and can you prove that system runs, with evidence? Core to the standard is an Artificial Intelligence Management System (AIMS), a structured set of policies, processes, and controls an organization uses to govern AI.

CloudCasa DR for HPE - HPE Kubernetes Service (HKS) - PART 1- Failover

This demo shows a CloudCasa DR failover for a file-server application running on HPE Kubernetes Service clusters. - HPE Kubernetes Service clusters (or HKS) is HPE’s managed Kubernetes offering, provisioned through the HPE Morpheus VM Essentials console. A primary HKS cluster runs the file-server app on a volume backed by an HPE Alletra MP B10000 array, replicated to a second Alletra array at a recovery site where a second HKS cluster stands ready.

Certificate monitoring for your intranet hosts

Certificate monitoring from the cloud only sees what the internet sees, like your public websites. But the vCenter console, the internal API, the switch management page, or that thing on db01.corp.internal are invisible to it. Those certificates expire just like public ones. They just don’t warn anybody first. This gap became very clear when we shipped Private PKI. Now CertKit can issue certificates for internal names and IP addresses, deploy them, and install the root into your trust stores.

Mend Renovate Enterprise: managing dependencies at agentic scale

Automated dependency updates are not new. For years, Mend Renovate has scanned repositories, flagged outdated or vulnerable packages, and opened pull requests. What has changed is the sheer velocity of the pipeline. AI coding agents now write a significant share of production code, introducing open source packages continuously across thousands of repositories.

Who Really Controls the AI? Why Infrastructure Sovereignty Matters

The smartest AI model in the room may still be running on someone else's computer. Teams focus on model quality and speed. They compare GPU availability and price. Control of the underlying infrastructure often receives less attention. That gap matters as AI moves into sensitive business systems. Models may process customer records. They may use intellectual property or regulated data. Some connect directly to production operations.

What Is Prompt Injection, Really? Why the Textbook Answer Cannot Tell You If You Have an Incident

Prompt injection is three things happening at once. The definition written in 2022 described a model that followed an instruction hidden in the text it was asked to translate. The definition needed in 2026 describes an agent that read a support ticket and then queried a customer table it had never touched, using a service account nobody had revoked. Those are the same attack.