Top 6 Claude in Chrome Security Risks to Model Before You Roll It Out
Blog Published: 09/04/2026
Most teams evaluate a browser agent like a browser extension. Check the permissions, check the vendor, check for open CVEs, approve or deny. That framing produced two clean patch cycles in 2026 and no reduction in exposure. Two problems are being treated as one. Implementation bugs, which ve...
Enterprise Reality: Why Organizations Aren't as Prepared for AI Governance as They Think They Are
Blog Published: 09/16/2026
If you ask most enterprise leaders, 74% would say their organization could pass an AI compliance audit today. Yet if you ask about the maturity of their AI governance program, only 27% say their programs are fully mature. That gap is the finding at the center of Schellman's new research, The...
Securing Wearable Health Data with Zero Trust
Blog Published: 09/15/2026
Wearable health technology like smart watches, continuous glucose monitors, and insulin pumps are quickly becoming part of everyday healthcare. These devices can collect health-related data on a continuous basis and share that information with doctors. They can also detect health problems ear...
The DNS Risks Your DDI Was Never Designed to Find
Blog Published: 09/21/2026
Why Your Network Strategy Needs Both DDI and DNSPM — Not One or the Other Most enterprise IT teams already run some form of DDI — DNS, DHCP, and IPAM — either as a dedicated platform or built into their broader network management stack. It’s the plumbing of the network: DHCP hands ou...
Cloud Security 2026: When AI is the Weapon and the Target
Blog Published: 09/17/2026
Artificial intelligence has changed the cloud threat landscape in two distinct ways. Attackers are using AI to make established attack methods faster, more scalable, and more convincing. At the same time, the AI systems that organizations deploy have become assets that attackers can manipulat...
A New Security Challenge: The Curious Case of Prompt Language Analysis
Blog Published: 09/22/2026
Why prompt analysis is emerging as a key AI security challenge If securing AI has been one of the defining cybersecurity conversations of the past year, prompt analysis is quickly becoming one of its most interesting frontiers. Security leaders are under pressure to understand how A...
Lessons Learned on Securing Multi-Agent Systems: NIST Agent Security RFI
Blog Published: 09/23/2026
Five practical security lessons distilled from public responses on how increasingly autonomous agents change trust, authority, observability, and system assurance. In January 2026, the National Institute of Standards and Technology (NIST) Center for AI Standards and Innovation issued a Reque...
Unified Visibility Comes Before Pre-Change Risk Analysis
Blog Published: 09/30/2026
Hybrid and multi-cloud security teams want to prevent policy failures before they reach production. According to our recent survey report, impact or risk assessment before committing a policy change is the most-requested security policy management capability. However, pre-change risk an...
Post-Quantum Key Management Starts at the Root
Blog Published: 09/28/2026
IT teams often view post-quantum cryptography (PQC) migration as a simple algorithm replacement. You swap RSA or ECC for a quantum-resistant alternative and move on. However, the process is more complex for cloud key management. In this domain, the order in which you migrate your key hie...
State of AI Cybersecurity 2026: 87% of Security Professionals are Seeing More AI-Driven Threats, But Few Feel Ready to Stop Them
Blog Published: 09/01/2026
Originally published by Darktrace. Findings from our annual survey of 1,500+ cyber professionals reveal that security leaders are confronting a surge in AI-driven attacks, which are faster, more personalized, and harder to detect than anything they’ve seen before. As these threats scale, th...
What Zero Trust Can Teach Us About AI Watermarks
Blog Published: 08/28/2026
I recently wrote about the mess that is watermarking AI-generated text and how Anthropic's move to add watermarks (in response to the EU AI Act's transparency rules) raises more questions than it answers. If you haven't read that blog, the short version is this: telling AI content apart from...
A Framework for AI Threat Readiness
Blog Published: 09/18/2026
AI models now find and exploit zero-days autonomously. This 4-pillar framework accelerates patching, analysis, and threat response. Recent and continued advancements in AI models have fundamentally changed how vulnerabilities are found and exploited. Published research, including o...
The Human-Machine Partnership: Architectures for Reliable AI
Blog Published: 09/21/2026
Agentic AI for balancing speed, resilience and human authority in automation. Part I: Never Put All Your Eggs In One Basket The Human-In-The-Loop (HITL) concept went through its own history of becoming a milestone for humanity: from the human in the role of a controller to super...
2026 Cloud Security Index: How Risk Differs Across AWS, Azure, and Google Cloud
Blog Published: 09/04/2026
Originally published by Intruder. Juggling multiple cloud providers is complicated enough without each one failing in different places. But that's what Intruder’s 2026 Cloud Security Index found: the issues that dominate on AWS barely overlap with those on Google Cloud, and Azure ...
Shadow AI Does Not Read Your Org Chart: Rethinking Identity Governance for Autonomous Agents
Blog Published: 09/08/2026
RBAC is solving yesterday's identity problem while autonomous systems are making decisions with access they already have. At RSA Conference 2026, Adi Shamir, the "S" in RSA, warned the security professionals that he is "totally terrified" of AI agents, because they need access to everything ...
When Visibility Becomes Noise: How MDR Filters What Matters
Blog Published: 09/29/2026
For most security leaders, the problem isn’t a lack of visibility. It’s too much visibility. Over the last decade, organizations have invested heavily in security tools. Security Information & Event Management (SIEM), Endpoint Detection & Response (EDR) platforms, cloud security mon...
Cloud Security Alliance Names Troy Leach as Executive Director of the CSAI Foundation
Press Release Published: 09/14/2026
Cybersecurity veteran to convene industry, government, academia and cybersecurity community to advance secure and trustworthy technology SEATTLE – Sept. 14, 2026 – The Cloud Security Alliance (CSA), the world's leading not-for-profit organization committed to AI, cloud, and Zero Trust cybers...
The Vital Trifecta
Blog Published: 09/24/2026
AI agents are moving through three stages. They began on the endpoint: Claude Code or Cursor in a terminal on a developer's laptop, a local process with local credentials, and a person watching output scroll past and pressing approve. They are moving into sandboxed cloud containers: cloud age...
Gold Eagle: A New Operating Model for Vulnerability Coordination
Blog Published: 09/30/2026
Five practical priorities for turning AI-enabled vulnerability discovery into coordinated remediation and verified risk reduction. On July 14, 2026, the White House announced GOLD EAGLE, a cybersecurity clearinghouse created under Executive Order 14409. The initiative is intended to coordina...
Reachability is Only Half the Blast Radius
Blog Published: 10/02/2026
Action-Class Authority for Agentic Zero Trust The vulnerability-discovery curve has bent. AI-assisted tooling surfaces exploitable flaws faster than most organizations can test and ship patches, and CSA’s own guidance states the consequence plainly: slow, methodical change cannot kee...
