The Uniformed Guard Problem: Why AI Agent Sandboxes Need Identity, Not Just Policy
AI agent sandboxes aren’t enough. Learn why identity, not just policy, is critical to securing autonomous AI systems and preventing misuse.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,273 matching stories — in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Foundation models vs. analyst copilots: which does what
Two different uses of AI are getting conflated in security marketing. Analyst copilots help humans triage and investigate faster. Foundation models for telemetry detect attacks directly. They are complementary, not competing, and the confusion costs SOC teams real money. This post separates the two.
The detection gap in encrypted east-west traffic
Most enterprise traffic is encrypted, and most of it travels east-west between internal services. Network detection tools that built their reputations on north-south packet inspection are largely blind to the encrypted east-west flow that carries most modern attacks. This post explains why the gap exists, what signal is available, and how a LogLM detects threats in this category without decrypting traffic.
Barak Sternberg Joins CSA’s AI Security Innovation Panel: When Agents Find Zero-Days Nobody Asked For
"Give an agent a CTF and it'll find a zero-day path to escape the container. They manipulate their way around in ways nobody scoped for." Barak Sternberg at the CSA Agentic AI Panel.
Hermes Agent Security: A Threat Model for Enterprise Workstation Deployment
Hermes Agent's persistent memory and skill marketplace create attack surfaces that traditional EDR misses. Here is the threat model and the controls that close it.
Shadow AI Detection: The 2026 Enterprise Playbook
Shadow AI is in every enterprise — ChatGPT, Claude, Copilot, MCP servers, workstation agents, embedded model APIs. Here is the detection playbook that finds all of it.
Supply Chain Security - Part 1
How Tinfoil thinks about supply chain security for client-side code and build infrastructure.
The EU AI Act Is Enforcing Now. Most Organizations Are Not Ready
At a Glance The date that changed everything for enterprise AI compliance was August 2, 2025. Not becauseregulations were announced — they had been announced years earlier. But because on that date,the governance obligations for General-Purpose AI models became binding under the EU AI Act.The European AI Office gained full enforcement powers. And organizations that […]
EU AI Act Article 27: What Is a Fundamental Rights Impact Assessment (FRIA) and Who Needs One?
The August 2026 deadline for high-risk AI deployers is approaching quickly, and most organizations haven't started yet.
Why the PocketOS 9-Second Database Deletion Wasn’t a Permissions Failure
The PocketOS breach shows AI agents can misuse allowed actions. Permissions aren’t enough. Security must enforce intent and context at machine speed. The post Why the PocketOS 9-Second Database Deletion Wasn’t a Permissions Failure appeared first on TrojAI.
Coding Assistants Are Reshaping How Data Science Gets Built. Your Platform Needs to Catch Up.
What to do about SR 26-2
What is AgentOps?
AgentOps is the operational layer for AI agents in production. Learn what changes when agents replace single LLM calls, what breaks, and how to control autonomous systems.
Mapping the Unknown: Open Problems in Frontier AI Risk Management
Frontier AI systems — general-purpose models capable of performing a vast range of tasks — represent a qualitative leap beyond the narrow AI applications that existing risk management standards were built to govern. A research paper from the Oxford Martin AI Governance Initiative, co-authored by over 30 researchers across academia, industry, and policy, sets out to do something overdue: systematically identify and characterize the open problems that stand between where frontier AI risk managemen
AI Usage Monitoring: How to See Everything Your Employees Are Doing with AI - FireTail Blog
Apr 29, 2026 - Lina Romero - What is AI usage monitoring? AI usage monitoring is the practice of logging, tracking, and analysing how employees and systems interact with AI tools, both sanctioned and unsanctioned. FireTail provides centralised AI activity logging that gives security teams a real-time view of AI usage across the entire organisation. Why can't traditional security tools monitor AI usage? Traditional tools monitor file transfers, logins, and network traffic, not the content of AI i
Prompt Injection Attacks in AI: Risks, Examples, and Prevention
If you’ve ever built (or used) an AI assistant that can read a web page, summarize a PDF, or draft an email reply, you’ve already touched the core risk behind prompt injection attacks. Prompt injection attacks are one of the most important security problems in modern AI because they exploit a simple fact: most LLM […] The post Prompt Injection Attacks in AI: Risks, Examples, and Prevention appeared first on Cygeniq.
Business Wire – Jozu Assessed Awardable for Department of Defense Work in the P1 Solutions Marketplace
Jozu has been assessed as Awardable in the U.S. Air Force’s Platform One (P1) Solutions Marketplace, enabling streamlined acquisition by Department of Defense customers across connected, on-premises, and air-gapped environments.
Securing Claude Code Against Secret Exfiltration
Claude Code holds your secrets on purpose. The session reads and writes your repo using a GitHub token, calls cloud APIs with AWS or GCP credentials, and authenticates to Anthropic with an sk-ant-api03 key in your environment. That access is the point. The risk is that the same session can also fetch URLs, run shell commands, and call MCP tools, which means anything that steers the agent toward a network destination has a path to those secrets. This page covers how the leak actually happens on C
Your agent followed every rule. It still broke policy.
A new Atlassian paper reveals “policy-invisible violations”, when LLM agents make correct decisions that still break policy. Learn why prompts and DLP fail, and how state-aware enforcement fixes it.
Anthropic's Shared Responsibility Security Model for AI Agents, Explained - Backslash
McKinsey Lilli hack & Anthropic Mythos reveal new AI cybersecurity threats
The application-layer breach has known fixes, and McKinsey has applied them. The inference pipeline is the second layer, and it is the one Mythos should reframe. The post McKinsey Lilli hack & Anthropic Mythos reveal new AI cybersecurity threats appeared first on Protopia.
Bridging the EU AI Act Compliance Gap - FireTail Blog
Apr 28, 2026 - Lina Romero - What the EU AI Act demandsThe EU AI Act classifies AI according to risk. Unacceptable risk is prohibited outright. High-risk AI systems are heavily regulated. Limited-risk systems face transparency obligations. The majority of obligations fall on providers, though deployers carry meaningful obligations too. If your organisation builds AI, buys AI, or integrates AI into operational processes, the Act applies to you. If your systems serve EU users and you are headquart
From Shadow AI to Full Control: FireTail's Q1 2026 Updates - FireTail Blog
Apr 28, 2026 - Timo Rüppell - Most security teams have accepted a hard truth in recent months. AI has already arrived in your organization. It resides in your codebase, runs in your cloud infrastructure, and is likely open in a nearby browser tab right now.The question is no longer whether to let AI in. It is whether you have the visibility, controls, and audit trail to prove you have it under control.Our Q1 2026 release is our most comprehensive platform update to date, built specifically to an
Leading AI Researcher Tim G. J. Rudner Joins Vijil as Chief Scientist
Vijil research team focuses on fundamental challenges of building trustworthy AI agents for enterprise use
6 Lessons Security Leaders Must Learn About AI and APIs
Most organizations treating AI security as a model problem are defending the wrong layer. Security teams filter prompts, patch jailbreaks, and tune model behavior, which is all necessary work, while the actual attack surface sits largely unexamined underneath. That surface is the API layer: the endpoints AI systems use to retrieve data, call tools, and [...] The post 6 Lessons Security Leaders Must Learn About AI and APIs appeared first on Wallarm.
Lead with impact: Turning AI into business decisions in financial services
GitHub Copilot best practices for teams
GitHub Copilot best practices for enterprise teams: credential management, cost controls, guardrails, and provider fallbacks that scale.
The Prompt Gap: The things we think and do not say about AI prompt security
Somewhere in your organisation, right now, someone is about to paste something into a chatbot.
Ever Nimble
The post Ever Nimble appeared first on ThreatDefence.
AI Risk Assessment Isn’t a Framework — It’s a Business Survival Layer
Most enterprises treat AI risk assessment as a compliance exercise. They conduct it once, file the output, and move on. The models that will cause the most serious operational damage in the next two years are overwhelmingly the ones that passed their initial risk assessments without issue. At a Glance Consider the pattern. A healthcare […]
Who owns Claude Code at your company? A platform team's guide to managing coding agents at scale
The harness is converging. Context is what separates teams. A platform team's guide to owning Claude Code, Cursor, and Codex across your engineering org.
The Governance Gap: How the EU AI Act Makes API Security a Compliance Imperative
Your legal team just handed you a 400-page document and said "figure out compliance." The EU AI Act is live, your organization falls under its scope, which is broader than many expect. Even non‑EU companies must comply if their AI systems are used, deployed, or produce effects within the European Union. In practice, that means that global organizations [...] The post The Governance Gap: How the EU AI Act Makes API Security a Compliance Imperative appeared first on Wallarm.