Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Credential stuffing attacks are one of the most persistent and damaging account-based threats facing security teams – and one of the hardest to detect. Most enterprises rely on server-side, post-login detection, which captures only successful login attempts. Failed attempts remain invisible, slowing time-to-detection and increasing the risk of successful account takeovers (ATOs). Why is this such a challenge? The reasons are many, as we’ll explore.

Is your SaaS company struggling to close those big enterprise deals? Chances are, they're asking for SOC 2 compliance – and for good reason! A staggering 82% of enterprises demand SOC 2 compliance from their SaaS vendors to mitigate data breach risks (Cloud Security Alliance, 2023). Without it, you're missing out on massive opportunities!

When evaluating AI agents for your SOC, it's not just about capabilities—it’s about control, oversight, and integration. In this clip, Philippe Tchakovski breaks down the most common mistakes security teams make when adopting AI: from fragile API integrations to missing guardrails and a lack of audit trails. Don’t deploy blindly—understand the risks before automation goes live.

David Weston, Corp Vice President of OS Security at Microsoft, joined us for Defender Fridays! He covered how we protect AI data and models on Windows devices outside of the data center, and how we use AI to find vulnerabilities in Windows.