Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Social Engineering AI Agents: The New BEC of 2026 — Detection and Defense Guide
The New Social Engineering Target Doesn't Have a Pulse For two decades, business email compromise worked because humans are persuadable. A w...
FRUITSHELL, PLOTSAFE, HOLLOWCLAD & MANTLEMAZE: AI-Analysis Evasion Malware Wave — OTX Detection Engineering Brief
Executive Threat Summary AlienVault's OTX pulse (TLP:WHITE, modified 2026-10-08) surfaces a documented shift in adversary tradecraft: malwar...
Tenable Exchange Inspector: Vetting Open-Source AI Agents, Skills, and MCP Servers Before They Hit Your SOC
Introduction The AI agent supply chain problem stopped being theoretical the moment community-built agents, skills, and Model Context Protoc...
Prompt Injection Hidden in Phishing Emails: Barracuda Warns of Dual-Target Attacks — Detection and Defense Guide
Introduction Barracuda's threat research team has documented a meaningful evolution in social engineering: phishing emails that carry two pa...
Defending Against LLM Safety Classifier Bypass: Detection and Hardening Guide for AI Gateways
The Per-Request Blind Spot in Your AI Defenses CrowdStrike recently published research detailing a deceptively simple evasion technique agai...
"Rogue AI" Is a Dangerous Myth: How Defenders Should Actually Secure Autonomous LLM Agents in 2026
The "Rogue AI" Narrative Is a Liability Shift, Not a Root Cause A recent Dark Reading analysis cuts through one of the most corrosive narrat...
OpenAI DevDay 2026: What Security Teams Must Do Before Agentic AI Hits Your Enterprise
Introduction OpenAI's DevDay 2026 keynote — covered live by Simon Willison at simonwillison.net — pushed the platform decisively beyond chat...
OpenAI 'o' Always-On ChatGPT Assistant With Email Access: Defending Against AI Agent Prompt Injection and OAuth Abuse
Introduction OpenAI is quietly preparing a new always-on ChatGPT assistant internally codenamed "o" — and references to the unannounced feat...
SalesBleed: Zero-Click Prompt Injection in Salesforce Agentforce — Detection and Hardening Guide
SalesBleed: Zero-Click Prompt Injection in Salesforce Agentforce — Detection and Hardening Guide Security researchers have disclosed a set o...