The Black Hat 2026 Diaries: Part One | What Happens in the Sandbox Doesn’t Stay in the Sandbox
Here about Black Hat 2026 in Las Vegas, where cybersecurity experts converged to explore the latest in AI and agent security.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,275 matching stories — in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Healthcare AI security: a GenAI risk management guide for health systems
Physician use of AI and ambient documentation tools has moved from early experimentation and pilot programs to daily clinical workflow. Clinicians paste patient details into consumer chatbots that carry no business associate agreement, and autonomous agents query EHR data using privileges provisioned for human users. Healthcare AI security has not kept pace with that adoption... Read more » The post Healthcare AI security: a GenAI risk management guide for health systems appeared first on W
Who is responsible for AI governance?
AI governance responsibilities in Global 2000 enterprises rarely rest with a single executive. Ask who owns them, and you may hear several confident answers: the CISO, the CIO, the Chief AI Officer, legal, or compliance. Those answers often diverge when ownership isn’t written down. That gap becomes visible when regulators ask for named authority and... Read more » The post Who is responsible for AI governance? appeared first on WitnessAI.
Prompt injection examples and what they teach us
Untrusted content in an email can prompt an enterprise AI system to share data outside its intended scope. EchoLeak showed how that can happen. Microsoft assigned CVE-2025-32711 to EchoLeak, a zero-click attack triggered by a crafted email. Microsoft 365 Copilot pulled data from OneDrive, SharePoint, and Teams and sent it out through a trusted Microsoft... Read more » The post Prompt injection examples and what they teach us appeared first on WitnessAI.
When Marketing Technology Becomes a Privacy Incident: Lessons from the FTC’s Hims & Hers Lawsuit
The FTC’s lawsuit against Hims & Hers shows how marketing pixels can lead to privacy incidents. Learn five steps to manage risks associated with sensitive health data. The post When Marketing Technology Becomes a Privacy Incident: Lessons from the FTC’s Hims & Hers Lawsuit appeared first on RadarFirst.
How Many Agents Does Your Company Have?
I’ll be honest, I couldn’t give you a definitive answer if you ask me how many AI agents are running at Infoblox. I have a rough sense of magnitude and a handful of registries, but no comprehensive count or understanding. I don’t think I’m an anomaly. If anything, the pace of agent creation reflects something […] The post How Many Agents Does Your Company Have? appeared first on Infoblox Blog.
Download the Complete Guide to MCP '26
Every explainer and how-to for the MCP '26 release in one free guide: what changed, what breaks, and how to migrate your servers and clients.
Polygraf AI Wins 2026 Cybersecurity Excellence Award
Polygraf AI's AI Behavioral Control Plane named 2026 Community Choice Winner for AI Data Security & Governance at the Cybersecurity Excellence Awards. The post Polygraf AI Wins 2026 Cybersecurity Excellence Award appeared first on Polygraf.
Arize AX adds native support for OpenTelemetry GenAI semantic conventions
Arize AX now normalizes OpenTelemetry GenAI semantic conventions into first-class AI traces, unlocking evaluations, token and cost visibility, and easier debugging. The post Arize AX adds native support for OpenTelemetry GenAI semantic conventions appeared first on Arize AI.
Four Agents Carried 70% of the Return
From the AI ROI Series, recorded 11 August 2026. Two headlines that week are worth translating into tokenomics. Intel asked Wall Street for $15 billion […] The post Four Agents Carried 70% of the Return appeared first on Olakai.
Shadow IT Was Hard to Govern. Shadow AI Is Harder.
Shadow IT stored data; shadow AI acts on it. Learn how to govern autonomous AI agents and eliminate zombie agents in The Silent Rollback eBook. The post Shadow IT Was Hard to Govern. Shadow AI Is Harder. appeared first on JumpCloud.
Stop Finding Out About Network Problems from Your Helpdesk
Announcing the General Availability of Infoblox IQ™ for DDI There’s a morning every network engineer knows. Users can’t reach internal applications. The helpdesk is lighting up. Your senior engineer is pulled into a war room with logs that don’t tell the full story, reconstructing a timeline from three different tools while the ticket count climbs. […] The post Stop Finding Out About Network Problems from Your Helpdesk appeared first on Infoblox Blog.
From Privacy to Sovereignty: How PETs Are Evolving to Enable Digital Sovereignty
We’ve spent years in the Privacy-Enhancing Technologies (PETs) space. The label is accurate, and the name is functional. These are technologies that enable sensitive data to be used and computed on while remaining protected, allowing organizations to derive value from data and models without exposing them. But increasingly, the “privacy” label feels too narrow for... The post From Privacy to Sovereignty: How PETs Are Evolving to Enable Digital Sovereignty appeared first on Duality Technologies.
Straiker Named OpenAI Select Partner | AI Agent Security
Straiker has been named an OpenAI Select Partner, helping enterprises securely build, deploy, and scale AI agents with testing, runtime protection, and policy enforcement.
Zero Trust Data Security: What Regulated Industries Must Know
The network perimeter used to be the line that mattered. Build a strong enough wall, the thinking went, and everything inside it could be trusted. That model has quietly collapsed, and zero trust data security is the framework most regulated organizations are now adopting to replace it. Data lives across cloud regions, SaaS platforms, partner... The post Zero Trust Data Security: What Regulated Industries Must Know appeared first on Duality Technologies.
Data Security vs Data Privacy: Key Differences and What GDPR Requires From Both
Data security is the practice of protecting data from unauthorized access, theft, alteration, and loss. Data privacy governs whether and how personal data may be collected, used, retained, and shared. The distinction matters because a system can be technically secure and still violate privacy law: security asks whether the data is safe, while privacy asks... The post Data Security vs Data Privacy: Key Differences and What GDPR Requires From Both appeared first on Duality Technologies.
Branch61G Weekly: Teachings from the Thickets (Notes from Building an Open Source AI SOC)
Branch61G Weekly for August 11, 2026: SonicWall SMA1000 moving from zero day to ransomware KEV with custom Java implants, a Progress Kemp LoadMaster command injection under mass probing, Head Mare turning TrueConf servers into trojanized update points, and a Metabase SQL injection used for customer data theft. The theme is the enterprise edge, where trust is thickest and visibility thinnest.
How To Detect When A Financial AI Agent Is Behaving Anomalously
Learn AI agent anomaly detection for financial services: baseline agent behavior with span-level telemetry, evaluate every span, and enforce inline.
Vulnerability response in the AI-discovery era: A four-part plan
What's Really Going On With Agent Escapes?
Agents can quickly turn common mistakes into enterprise disasters
Rethinking Security in the Age of Agentic AI
For decades now, the enterprise has followed a predictable pattern: people make decisions, machines execute instructions, and security is built around that two-actor model. A third actor has now entered the enterprise, and it behaves differently from anything that came before.
How Simple Prompts Walked AI Models Toward CBRNE Harm
In default settings, simple patient prompting led frontier models to actionable CBRNE guidance. New Alice research on why safety testing has to change.
You Can’t Govern What You Can’t See: The IAM Crisis at the Heart of Agentic AI
Autonomous AI agents create huge security gaps. Discover how to manage non-human identities in the JumpCloud IT Trends Report. The post You Can’t Govern What You Can’t See: The IAM Crisis at the Heart of Agentic AI appeared first on JumpCloud.
The Endpoint Blind Spot: Your AI Agents Have Left the Browser Already
Secure your AI agents. Discover why local agents create an endpoint blind spot and how JumpCloud Workflows bridges the gap between devices, identity, and access. The post The Endpoint Blind Spot: Your AI Agents Have Left the Browser Already appeared first on JumpCloud.
How Large Organizations Scale Privacy Impact Assessments
Learn how large organizations scale Privacy Impact Assessments with standardized workflows, risk-based reviews, and audit-ready documentation. The post How Large Organizations Scale Privacy Impact Assessments appeared first on RadarFirst.
Meta's Glimmer and the Cost of Agentic Intelligence
Meta's new Glimmer model runs agentic workloads on a single consumer GPU. Why that makes authorization, not intelligence, the next infrastructure layer.
CISA Demands Federal Agencies Secure Their SaaS
Your Organization Is Further Along the AI Curve Than You Think. That’s the Problem.
Recap of our webinar with Jozu CEO Brad Micklea: the five levels of AI adoption, the two gaps that get organizations hurt (the AI supply chain and the runtime), real-world attacks, and four actions to take this quarter.
Palo Alto Networks Recognized as the Only Vendor to be Named a 4X Leader in SASE and SSE Gartner Magic Quadrant Reports
As organizations race to deploy agentic AI, legacy network security solutions are ill-equipped to keep up, forcing productivity tradeoffs while exposing coverage gaps. At the same time, Frontier AI is proving capable … The post Palo Alto Networks Recognized as the Only Vendor to be Named a 4X Leader in SASE and SSE Gartner Magic Quadrant Reports appeared first on Palo Alto Networks Blog.
Demystifying the EU AI Act for AI product and engineering teams
An engineering guide to turning EU AI Act principles into traces, evaluations, annotations, and release evidence product and engineering teams can actually demonstrate. The post Demystifying the EU AI Act for AI product and engineering teams appeared first on Arize AI.
CISA Demands Federal Agencies Secure Their SaaS
DeepMind shakeup tests UK’s AI ambitions
Google’s AI reshuffle could weaken a key pillar of Britain’s startup ecosystem, experts say — but it may be a gift for the country’s talent-hungry neolabs The post DeepMind shakeup tests UK’s AI ambitions appeared first on AI Score.
Sonar joins the Open Secure AI Alliance to advance AI safety and security
Sonar joins the Open Secure AI Alliance to help strengthen AI code security through open source collaboration with NVIDIA and other industry leaders.
Inside the Metabase SQLi: Exploited in the Wild
Reverse engineering Metabase CVE-2026-72898 with AI to accelerate defense.
What is Transaction Monitoring and How Does It Work
Transaction monitoring is the process of continuously reviewing financial transactions to spot activity that looks unusual, risky, or potentially illegal. Banks, payment companies, fintechs, and insurers use it to catch things like money laundering, fraud, and other financial crime before they cause real damage. That’s the short answer. The rest of this guide breaks down […] The post What is Transaction Monitoring and How Does It Work appeared first on Innefu Labs.
Why Your Retriever Matters More Than Your LLM in RAG
Most RAG data exposure happens before the LLM processes a single token. The retriever decides what sensitive data the model sees, and most teams are not securing it. Here is where the gaps are and how to close them. The post Why Your Retriever Matters More Than Your LLM in RAG appeared first on Protecto.
Failures or Failsafe?: A Perspective from the Arena of AI Detection Evals
DeepTempo’s cybersecurity foundation model, LogLM, played an integral role in discovering errors in a variety of datasets it was being evaluated on. Beyond proving superior performance and exposing critical flaws in public data, these rigorous evaluations and data quality checks power continuous model improvements.
Governance Is What Lets Enterprises Move Faster on AI
Governing agentic AI takes visibility, control, and accountability. See how continuous AI governance and runtime enforcement work once agents reach production.
Security at the Speed of Agentic AI
Agents act across gateways, tools, and paths that traditional controls don't fully see. Learn how to secure the full agent workflow, so teams can adopt and build AI agents with risk under control. The post Security at the Speed of Agentic AI appeared first on Aurascape, Inc..
GhostJacking Attacks: Half of the Fortune 500 Run These Tools. Getting Blocked by the Firewall Was the Way to Take Over Their AI Agents
Half the Fortune 500 run the tools that let us in. It will be presented at DEFCON, the largest hacker conference, where we’ll show how a request their own firewall blocked was the way in.