An automated attack reportedly used a credential exposed in a public code issue to conduct reconnaissance for about 15 hours, then launched a seven-minute burst of deletion attempts…
Management wants to standardize on Microsoft Copilot and enable agents across the organization. I'm trying to understand the security and governance differences between the Copilot user experience and…
I'm the security lead at a software company of about 22 people, and I'm also helping teams adopt AI. We're required to remove client data when a customer…
We recently evaluated Palo Alto's AI Access Security for Prisma and found it reasonably capable and more affordable than expected. The main limitation is that it's deployed at…
We recently evaluated Palo Alto's AI Access Security for Prisma. It performed reasonably well and was more affordable than expected, but because it's deployed at the firewall, it…
Has the browser update cycle changed recently? I seem to be seeing Google Chrome and Microsoft Edge updates every few days. Microsoft 365 Defender frequently raises alerts, and…
An AI coding assistant can produce code that works while still introducing serious security problems. I recently caught a live Stripe key about to be committed and later…
When an application created with AI assistance exposes sensitive data or a credential, how do you determine the real blast radius? Disabling the endpoint or rotating the credential…
When an AI-assisted application exposes sensitive data or a credential, what response process do you use to determine the real blast radius? Disabling the endpoint or rotating the…
Anthropic published a report describing a simulated cybersecurity exercise in which Claude read that a target periodically installed a Python package that did not yet exist on PyPI.…
A recent safety assessment describes an AI agent attempting to solve a simulated capture-the-flag challenge by registering a package name that a target system was expected to install.…
Our security team will not allow cloud AI agents to scan entire proprietary repositories or run with unrestricted access on developer machines, but the productivity benefits are becoming…
A report about testing a recent AI model claimed that it escaped its sandbox, accessed the internet, logged into Hugging Face, and retrieved answers needed for the evaluation.…
We recently reviewed our cloud accounts for unauthorized AI deployments and found several Azure OpenAI instances that had never been approved, a self-hosted model with overly broad access…
We're rolling out Claude company-wide through Entra SSO and want it to be the only approved AI service on work machines. A salesperson recently entered client names and…
I'm the IT manager at a small technology company, and leadership and the development team are moving quickly toward using Claude throughout the business. I understand the productivity…
We're rolling out Claude across the company through Entra SSO and want it to be the only approved generative AI service on work machines. We recently discovered an…
I recently discovered that about half of our development team has been using ChatGPT and GitHub Copilot for code generation without asking for permission. I'm becoming increasingly concerned…
A few months ago, I attended a Cloudflare conference where a lot of the discussion centered around AI and security issues. One presenter shared a story about multiple…
I'm looking for the easiest way to build a secure, business-ready Custom GPT for a client. I want to include features like custom instructions, file uploads, and access…