Agentic Systems
An AI Agent Just Pwned Trivy, Microsoft, and DataDog in One Week
An autonomous AI agent scanned 47,000+ repositories, identified vulnerable CI/CD configurations, and compromised projects from Microsoft, DataDog, and Aqua Security using five distinct techniques. The only target that survived was defended by another AI agent.
Enterprise Security
88% of You Have Already Had an AI Agent Security Incident. The Other 12% Probably Don’t Know Yet.
Gravitee surveyed 900+ executives and found 88% reported AI agent security incidents, while 82% believed their policies were adequate. The gap between executive confidence and operational reality is the most dangerous metric in enterprise AI security right now.
Enterprise Security
AI Security Fundamentals: An Architectural Playbook
An architectural foundation for AI security covering the mechanisms that matter, emerging protocols, and the failure modes that appear when teams focus on the model while ignoring the system.
Enterprise Security
Palo Alto’s Unit 42 Just Found a Way to Hijack AI Agent Conversations - And Your Users Can’t See It Happening
In November 2025, Palo Alto Networks’ Unit 42 research team published a new attack technique they called “Agent Session Smuggling.” The attack exploits a fundamental property of multi-agent systems: agents remember their recent conversations.
Enterprise Security
MCP Just Got a New Home at the Linux Foundation - But Its Security Debt Followed It There
The protocol arrives at its new home carrying five critical CVEs from its first year, a 36.7% SSRF prevalence rate across its ecosystem, and an authentication architecture that the specification itself had to retroactively mandate.
Enterprise Security
36.7% of MCP Servers May Be Vulnerable to SSRF - The Supply Chain Crisis Nobody's Talking About
Analysis suggests over a third of MCP servers may be vulnerable to server-side request forgery. The MCP ecosystem has a supply chain problem: rapid adoption without security review created a vulnerability surface that scales with every new deployment.
Enterprise Security
The AI Security Budget Gap: 93% Expect Daily AI Attacks But Only 4% Have Dedicated Teams
Ninety-three percent of security leaders expect daily AI-driven attacks. Four percent have dedicated AI security teams. The gap between threat awareness and resource allocation reveals an organizational failure, not a budget one.
Machine Identity
$25.5 Million in 12 Minutes: The Arup Deepfake Heist That Should Terrify Every CFO
An employee at engineering firm Arup transferred $25.5 million after a video call with deepfake recreations of senior executives. This wasn't a failure of awareness training. It was an architecture failure where visual identity was the only trust layer.
Enterprise Security
ChatGPT Enterprise Solved the Compliance Problem, But Created the Architecture Problem Nobody’s Talking About
OpenAI's enterprise tier addressed data privacy concerns with encryption and access controls. What it didn't address is the harder question: how AI integrates into existing enterprise architecture without creating a parallel decision-making system.
Trustworthy AI
OWASP’s First LLM Top 10: The Vulnerability List That Predicted Everything We Got Wrong
OWASP published its first LLM vulnerability taxonomy, and the entries read like a roadmap of every incident that followed. Prompt injection, training data poisoning, insecure output handling. The threats were cataloged. The industry just wasn't ready to listen.
Enterprise Security
The 1,265% Problem: How ChatGPT Broke Every Phishing Training Program on the Planet
Phishing volumes surged 1,265% after ChatGPT's release. The problem isn't just volume. AI-generated phishing eliminates the grammatical errors that security awareness training taught employees to spot. The detection model is now broken.
Enterprise Security
ChatGPT Just Turned 100 Million - And Your Data Loss Prevention Strategy Didn’t Notice
Every enterprise that deployed DLP in 2022 was implicitly betting that they knew all the exits. ChatGPT’s hundred-million-user February proved that the exits had multiplied faster than anyone could count them.
