Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Defence in depth changed forever with cloud security because the old perimeter gave way to platforms, suppliers and connected services outside direct control. That means modern attackers often reach the target through weaker vendors, cloud services or supply chain links instead of attacking the business head on.

As organizations adopt agentic AI, we believe open collaboration is the fastest path to building trustworthy AI governance. Today, we're introducing a new open source project: Agentic Trust Controls. Agentic Trust Controls are designed to help the GRC community evaluate and govern AI agents with greater consistency and confidence. Explore the project and share your feedback at trustcontrols.ai.

AI Is Accelerating the Cyber Kill Chain: Faster Attacks, Greater Risk AI is changing the speed and scale of modern cyber attacks. From accelerating reconnaissance to reducing the time required for initial access, attackers are leveraging AI to move faster across the entire cyber kill chain. In this video, Paul Girardi explains how AI is impacting each stage of the attack lifecycle, including: As attackers automate more of the kill chain, security teams need smarter approaches to detect, disrupt, and deceive adversaries before they can achieve their objectives.

In this week's Intel Chat, Chris Luft and Matt Bromiley discuss how the same AI capabilities fueling adversaries are available to defenders too. Matt's takeaway: you don't need to buy an AI product to keep pace. The same way an attacker points AI at a code base, defenders can point it at detection rules and telemetry. Chris adds that as more developers use these models to check their own code, the playing field will level out, though the next year or two will likely bring a spike in exploits from lower-skilled attackers leveraging AI before defenses catch up.

Shadow AI is already on your employees' phones — and it's invisible to your network controls. This demo follows a real workflow: an employee gets blocked from using an unauthorized AI tool on her corporate laptop, so she switches to her personal phone instead. No VPN, no DLP, no visibility, no corporate controls follow her there.