Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why AI Security Has to Live at the Decision Point

For the past couple of years, most of the industry’s attention has gone toward agents that respond to a single prompt. They ask a question, get an answer, and move on. Enterprises are now deploying long-horizon agents; autonomous systems that execute extended, multi-step tasks across hours or days, without a human checking in on every step. These agents plan, reason, and improvise their way toward a goal, and that changes what security has to protect against.

We're open-sourcing our privacy proxy CLI

Debugging privacy-preserving protocols is hard. Oblivious HTTP has several different steps across four different parties, not to mention binary HTTP encoding and details spread across many draft RFCs. We've taken what we've learned operating protocols like Oblivious HTTP at the scale of millions of requests per second, and wrapped it up in a nice, clean CLI tool — that we are open-sourcing today. We call it our privacy-client, or pvcli.

Top 10 Log Aggregation Tools for 2026: SIEM & Compliance

You're staring at a growing pile of endpoint, cloud, firewall, and identity logs, and the question isn't whether the data is useful, it's whether you can turn it into evidence, detections, and a defensible audit trail. In regulated environments, HIPAA, PCI, and CMMC don't care that your team is busy, they care that logs are collected consistently, normalized correctly, retained properly, and searchable when an incident or audit hits.

Majority of Organizations Hit by Targeted Impersonation Attacks

Fifty-three percent of organizations have had an executive or employee impersonated in targeted social engineering attacks over the past year, according to a new report from Outtake. Just over half of this impersonation activity took place on social media platforms using fake profiles, followed by video platforms.

What is MFA Fatigue? Understanding MFA Bombing Attacks and How to Prevent Them

Somebody on your team is going to get 40 push notifications on a random Tuesday afternoon and tap "approve" just to make them stop. That's not a hypothetical. It's the most common way attackers get past multi-factor authentication (MFA) today. This piece is for IT and security leaders evaluating an MFA solution or reassessing the one they already have, because an MFA fatigue attack (also called MFA bombing) is now on their radar.