Your orchestration framework choice is a security decision, not just an engineering one
Comparisons of LangChain, CrewAI and AutoGen are easy to find — dozens of guides this year cover the same ground: developer experience, ecosystem maturity, h...
enterprise
20 articles
Why you need a reliable AI agent kill switch
Recent high-profile rogue agent incidents involving OpenAI and Anthropic underscore the fact that organizations can’t put blind trust in their AI guardrails....
AI threat report: Rogue agents, workflow attacks
Malicious AI use and threats to AI systems are requiring cyber teams to double down on security fundamentals and rethink the future of their approaches to de...
Ruby on Rails critical bug puts every image upload under scrutiny
A new critical vulnerability in the Ruby on Rails (“Rails”) web application framework, CVE-2026-66066, could turn a seemingly innocuous image into a front do...
ChainDrop credential stealing worm infects over 400 npm packages
A self-propagating worm-like attack is hitting the npm registry, having infected 444 packages from more than a dozen publishers so far. The impact is massive...
Airlock Digital Unveils Agentic AI Control & Governance to Extend Preventative Endpoint Security
Airlock Digital, a leader in preventative endpoint security, today announced Agentic AI Control & Governance at Black Hat USA 2026. The new capabilities buil...
Critical Azure Cosmos DB flaw threatened cross-tenant database takeover
A critical vulnerability in Microsoft Azure’s Cosmos DB database service could have enabled attackers to escape the platform’s Gremlin query sandbox, execute...
The top cybersecurity product announcements from Black Hat 2026
Black Hat 2026 is shaping up to be another AI-heavy conference, but this year’s announcements suggest the industry is moving beyond simply adding copilots to...
The top new cybersecurity products at Black Hat USA 2026
Black Hat 2026 is shaping up to be another AI-heavy conference, but this year’s announcements suggest the industry is moving beyond simply adding copilots to...
Google ADK flaws reveal what happens when AI agents trust the wrong message
Security flaws in automated workflows in the GitHub repository for Google’s Agent Development Kit for Python could allow public-facing AI agents to trigger m...
Secure AI adoption starts with API best practices
You don’t need to be a fortune teller to understand where enterprise IT is headed. McKinsey reported in November that 62% of global organizations were experi...
The Minnesota attackers may hold a better backup of your plant than you do
More than 30 Minnesota community water systems were hit by coordinated cyber activity against their operational technology on July 26 and 27; several lost re...
Attackers are crafting malicious AI instruction files to turn your agentic workflows into quiet criminal helpers
AI agents are increasingly being deployed across the enterprise, a rapid adoption that has significantly broadened the organization’s attack surface, turning...
Zero Networks targets AI agent security gaps with network-level ‘Least Agency’ controls
While AI security today is largely focused on restricting what an agent can do, Zero Networks says it has built a failsafe. The company says it can block a c...
Stop depending on heroics and start operationalizing third-party risk
In cybersecurity, third-party risk management normally looks simple on paper: evaluate your vendor, learn the risk, report out on the gaps and weaknesses, tr...
AI is making cybersecurity fundamentals more important than ever
When OpenAI disclosed that one of its models escaped a test environment and broke into Hugging Face’s systems on its own, headlines cast the incident as the ...
DefCon security conference bans smart glasses with recording capabilities
It’s a sign of the times: Security conference DefCon has added smart glasses to its list of banned audio- or video-recording devices. The organizers have sai...
Google adds to confusion with new names for threat actors
Google is creating a new naming scheme for the bad actors behind cybersecurity threats, hoping that it will help to standardize the way that attacks are repo...
Broadcom patches vulnerabilities all over VMware
Broadcom has addresses five vulnerabilities in its VMware product range, three of which have been accorded a “critical” rating. The affected products are: VM...
Microsoft almost gave away the keys to everyone’s Azure Cosmos DBs
Microsoft has had a narrow escape from total embarrassment: A security company uncovered a critical vulnerability that could have compromised all Azure Cosmo...