Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Shadow AI in the Enterprise: Detecting and Blocking Personal ChatGPT Use Before Sensitive Data Walks Out
Introduction Your organization paid for ChatGPT Enterprise. You got the admin console, the SSO enforcement, the no-training-on-your-data con...
llm-gemini 0.35 Release: What Security Teams Must Know About LLM CLI Tooling, API Key Exposure, and Shadow AI Risk
Introduction Simon Willison's llm-gemini plugin hit version 0.35 this week, continuing the rapid release cadence of one of the most widely u...
llm-meta-ai 0.2 Release: What Unofficial LLM Plugins Mean for Enterprise AI Governance and Data Egress Control
A Small Plugin Release With a Big Governance Lesson Simon Willison — whose open-source llm command-line tool has become the de facto Swiss A...
Bring Your Own Agent: Detecting and Containing Unmanaged AI Agents (Meta Muse, Instinct) in Your Enterprise
Bring Your Own Agent: The Shadow AI Problem Has an Autonomous Face Now The personal AI agent rollout is going about as smoothly as most of u...
Shadow AI Agents: Finding and Governing the Third-Party AI Your SSO Can't See (2026 State of Agent Security)
The Identity Stack Only Governs What Authenticates Through It The 2026 State of Agent Security Report landed on a number every CISO and SOC ...
Forensic Reconstruction of AI Coding Agents: Detection, Artifact Locations, and IR Playbook for Claude Code, Codex, Gemini CLI, and OpenCode
Introduction A quiet shift has occurred in enterprise endpoints over the last 18 months: developers and engineers are running autonomous and...
Shadow AI and 'Vibe Coding': A Defender's Framework for Securing Citizen-Developer Apps Before They Become Your Next Incident
The New Shadow IT Problem Is Compiling Itself For two decades, security teams fought shadow IT — unsanctioned SaaS accounts, personal Dropbo...
Anthropic Cyber Verification Program (CVP): What Anthropic's 3-Tier AI Access Model Means for Enterprise Defense
Anthropic Consolidates CVP and Project Glasswing Into a 3-Tier Access Model Anthropic has announced it is merging its Cyber Verification Pro...
llm-mistral 0.16 and Mistral Large 4 Reasoning Support: A Defender's Guide to Governing LLM Tooling in the Enterprise
Introduction On October 6, 2026, Simon Willison released llm-mistral 0.16, an update to his widely used llm CLI plugin ecosystem that adds s...