Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

An Identity Security taxonomy for Agentic AI

Agentic AI is a fundamentally new paradigm. AI agents can interact with various tools and act dynamically and probabilistically as they encounter new inputs. That means they end up falling somewhere between an application and a user in terms of how they operate. Indeed, the interaction with other applications is what gives agentic AI its power; however, this also has implications for identity security and access management.

The enterprise AI crisis: Unsanctioned tools and unenforced policies

Unsanctioned AI tools. Patchy access controls. Unmanaged apps and devices. And of course, compromised credentials. These are the issues revealed in the 1Password Annual Report 2025: The Access-Trust Gap. The report is based on a survey of over 5,000 knowledge workers, IT and security professionals, and CISOs, and it captures a moment of profound technological and cultural transition.

Why Your Business Needs an ISO-Certified AI Platform

Do you own a business? Running a business today can feel like a lot. There are so many things to manage, from keeping customers happy to handling endless messages. Everyone wants quick answers, real conversations, and safe service. That is why businesses now use tools like AI SMS and automation. Not all AI platforms are created equal. But when you bring AI into your work, safety and reliability become very important. This is where an ISO-Certified AI Platform comes in.

Vanta State of Trust 2025: AI Threats Outpace Security Expertise

7 in 10 organisations say the security risks for their company have never been higher. For the majority of companies, AI threats have outpaced their team's expertise to combat them. 8 in 10 are adopting agentic AI to help-but fewer than half have frameworks in place to control it. 78% of security and compliance teams are seeing a reduction in employee burnout thanks to AI and automation tools.

The Key To Detecting AI Threats - CTRLtheThreat Cybersecurity Tips From Cato CTRL

The key to detecting AI threats? Detecting them before they detect you. Tune in to this week's series in which Dolev Attiya, threat researcher and member of Cato CTRL, shares insights about AI malware threats, agent to agent and top ways to stay protected. Subscribe: short.url/aBcXyZ Let’s connect: Instagram: short.url/aBcXyZ LinkedIn: short.url/aBcXyZ X (Twitter): short.url/aBcXyZ TikTok: short.url/aBcXyZ.

Defending QUIC from acknowledgement-based DDoS attacks

On April 10th, 2025 12:10 UTC, a security researcher notified Cloudflare of two vulnerabilities (CVE-2025-4820 and CVE-2025-4821) related to QUIC packet acknowledgement (ACK) handling, through our Public Bug Bounty program. These were DDoS vulnerabilities in the quiche library, and Cloudflare services that use it. quiche is Cloudflare's open-source implementation of QUIC protocol, which is the transport protocol behind HTTP/3.