Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why 72% of Security Budgets Are Aimed at the Wrong Thing | Reach Security x Insurity

72% of security budgets still go to detection and response, not prevention. That is the thread running through the latest episode of The Security Strategist, where EM360Tech's Shubhangi Dua talks with Garrett Hamilton, CEO of Reach Security, and Jay Wilson, CIO and CISO at Insurity. With the majority of budgets still pointed at detection and response, the conversation makes the case for swinging the pendulum back toward prevention, and why the tech can finally back it up.

Getting API Credentials Just Got A Lot Simpler

If you've built an integration with Egnyte, you know the process: register at developers.egnyte.com, create an account, wait for approval, and get your credentials. It works, but for admins who simply want to start making API calls against their own domain, the process isn’t simple or fast enough. Starting today, that changes. Egnyte admins can now generate Collaborate API credentials directly from the Egnyte App Store—no external registration, no approval wait, no context-switching.

AI across the security lifecycle

For nearly a decade, the security industry has used machine learning to solve detection. By feeding it enough logs and determining abnormal behaviors, it found the threats that rules-based systems miss. This delivered sharper anomaly detection, fewer false positives, and UEBA is now essential. In fact, threat detection and analytics account for close to 44% of total SIEM spend, the single largest use case by far. Using machine learning for detection was only the start.

What Canada's Bill C-36 Means for AI-Powered Digital Experiences

As Canada strengthens privacy protections and enforcement, organizations must find a way to accelerate AI innovation while maintaining continuous visibility into how customer data is collected, shared, and protected. Canada’s proposed Bill C-36 is about more than privacy regulation. It reflects a broader challenge facing governments, regulators, and businesses around the world.

AI Export Controls and the Risk of Slowing Down Defense

The Trump administration has ordered Anthropic to restrict access to its most advanced AI models, Fable 5 and Mythos 5, citing national security concerns. Officials raised the possibility that these systems could be used by foreign actors to identify software vulnerabilities or support cyber attacks.

AI Agent Security Explained: Agents, MCP, Prompt Injection, and the AI Harness

AI Agent Security is quickly becoming one of the most important areas in cybersecurity. Terms like "agent," "harness," "MCP," "tool calls," "tool responses," "instruction hijacking," "indirect prompt injection," "prompt exfiltration," and "tool misuse" are appearing in conference talks, vendor announcements, podcasts, and industry discussions, often without clear explanations.

GenAI fraud detection in academia vs industry

Academic fraud datasets often lack real-world grounding and miss insights that you can only glean from defending against ongoing adversarial attacks. Just ask Zhaofeng Si, a PhD student in computer science at the University at Buffalo who studies the detection of AI-generated synthetic images. Three weeks ago, he joined Persona for a 12-week internship. Now, he’s working alongside Persona’s research scientists to build a benchmark for selfie fraud.

Put agentic AI to work: Real-world defense against threats

Attackers are using AI to compress timelines from hours to minutes. Most SOCs, and most security platforms, weren’t built for that speed. Join Elastic Security product and research experts for a look at how modern security teams can detect, investigate, and respond faster using agentic AI. You’ll learn how to: You’ll leave better equipped to reduce investigation time, keep analysts focused on decision-making, and modernize security operations for machine-speed threats without removing humans from the loop.

The Enterprise Just Got Its First Population of Autonomous Actors

For the past two decades, enterprise security has evolved around a relatively stable assumption: software executes instructions, people take actions, and security teams are responsible for understanding and governing the interaction between the two. The technologies have changed. Infrastructure moved to the cloud. Applications became distributed. Identities expanded beyond employees to include partners, contractors, and machines. Yet the underlying model remained remarkably consistent.

Appknox vs ASPM Vendors: What Application Security Posture Management Misses in Mobile App Security

Your ASPM dashboard shows your mobile security posture. The score reflects what your integrated testing tools found. It does not reflect what they could not test. For mobile apps, the gap between those two things includes the compiled binary, the third-party SDKs linked inside it, and what the app does at runtime on a real physical device. None of that data enters an ASPM dashboard built on source code scan results. The posture view looks complete. The coverage is not.