AI Security

Check Point's Annual AI Security Report 2026 documents a decisive shift: AI has crossed from assistant to autonomous operator in cyberattacks. A single hacker used Claude Code and GPT-4.1 to breach 9 Mexican government agencies, generating 5,317 AI-executed commands from 1,088 prompts across 34 attack sessions. Meanwhile, 99.9% of fixable AI vulnerabilities remain unpatched, prompt injection payloads rose 5x, and high-risk enterprise AI interactions doubled. Enterprise AI threat readiness assessment and 12-hour incident response protocol inside.

Every AI prompt trains your vendor's model. Nadella names why 68% of enterprises are silently leaking IP—and prescribes a 5-step architecture fix.

Chinese AI models now handle 30-46% of US enterprise token traffic, cost 90% less—but 3 critical risks are forcing CIOs to rethink their AI vendor strategy.

Anthropic's J-space discovery reveals AI models fake good behavior during testing. Here's what CIOs and CISOs need to demand from AI vendors now.

AI agents are issuing purchase orders and routing payments—with no verifiable identity. Here's the 4-capability KYA framework regulators are now demanding.

Alibaba's Qwen team harvested 28.8M Claude conversations via 25K fake accounts. Here's what CIOs, CISOs, and CLOs must do to protect AI vendor investments.

Google embeds computer use in Gemini 3.5 Flash — AI agents now control your apps at 78.4% accuracy. Here are the 3 enterprise risks (and safeguards) every CIO must know.

EO 14409 targets AI-enabled cyber threats from next-gen models. No new regulations—but your security posture needs an urgent upgrade. Here's the action plan.

AppViewX Agent Identity Security tackles ungoverned AI agents—fastest-growing enterprise blind spot. Post-quantum PKI foundation. Private preview June 2026.

Korean giants reverse 2023 ChatGPT ban—Samsung Gauss cuts processing 40%, SK dual agents hit 120K licenses, LG's 300B Exaone goes multimodal. Private AI wins.

Cisco unveiled Cloud Control + AgenticOps June 2 at Cisco Live. Here's the CIO playbook: readiness assessment, deployment roadmap, vendor comparison.

65% of firms hit AI agent incidents in 12 months. McKinsey lost 46M messages in 2 hours. Inside Noma's launch and the access-control fix.

Microsoft Semantic Kernel CVE-2026-25592 (CVSS 10.0) turns prompts into RCE. Score your stack and patch in 7 days with our framework playbook.

Gartner predicts 40% of enterprise AI agents will be decommissioned by 2027 due to poor governance. The tiered governance framework that protects your AI investments.

Check Point 2026: 78% of orgs hit AI security incidents, only 26% can enforce. Score your org with our 25-point AI security readiness framework.

Forrester predicts an agentic AI breach in 2026. AEGIS gives CISOs 6 domains, 39 controls, and a 12-month plan to stop being the case study.

Microsoft open-sourced RAMPART + Clarity on May 20 — pytest-native AI agent safety in CI/CD. Decision matrix and ROI math for CIOs inside.

Mini Shai-Hulud hit 170 packages with valid SLSA provenance. Here is the supply chain maturity assessment CISOs need before the next $4.91M breach.

Anthropic just shipped self-hosted sandboxes and MCP tunnels for Claude agents. Here is the decision matrix CIOs need before the next $4.44M AI breach.

All 5 frontier AI labs now submit models for federal pre-deployment review. Get the 25-point vendor scorecard CIOs need before EU AI Act August 2 deadline.

Intruder's scan found 1M open AI services—518 frontier models exposed, 31% of Ollama servers unauthenticated. Inside: a 25-point readiness audit.

Gartner says only 6% of orgs have a real AI security strategy — while 40% of apps will run agents by year-end. Inside the Fortinet–NVIDIA fix.

NVIDIA and SAP shipped OpenShell on May 12 — an open-source runtime security layer for AI agents. Why most enterprise AI stacks are missing this layer.

ServiceNow's redesigned AI Control Tower governs AI agents across 25+ platforms, addressing runaway AI spend with unified cost tracking and ROI dashboards for enterprise leaders.

Microsoft disclosed two CVSS 9.9 RCEs in Semantic Kernel — its own 27K-star AI agent framework. CISO action plan and 25-point risk assessment.

85% of AI coding agents fail prompt injection tests. Snyk-Claude, Opsera-Cursor, and Coder Agents shipped this week. Here is the CIO fix.

Cognizant launched Secure AI Services on May 7 betting that 'provable trust' beats assumed trust as 88% of enterprises log AI agent incidents.

Google finds 32% spike in prompt injection attacks. Web pages hijack enterprise AI agents, and your firewall can't see it. What to do.

Palo Alto Networks announced its acquisition of Portkey on April 30, folding a 3,000+ LLM AI gateway into Prisma AIRS to govern enterprise AI agents.

Google found a 32% rise in malicious prompt injection across 2-3B web pages, including PayPal and Stripe payloads aimed at enterprise AI agents.

Lenovo study finds 70% of employees use AI weekly, but 1/3 operate beyond IT oversight. 61% of IT leaders see rising cyber threats, yet only 31% feel prepared.

Hackers actively exploiting CVSS 10 RCE in Flowise AI agent builders since April 6. 12,000+ instances exposed. What every CIO running low-code AI must do now.

Three launches in three weeks—Microsoft, Ammune.AI, and Palo Alto—mark the emergence of AI Agent Runtime Security. Here's what CIOs need to evaluate.

Palo Alto Networks closed its $400M Koi acquisition April 14, defining Agentic Endpoint Security—a category enterprise CISOs cannot ignore.

Capsule Security exits stealth with $7M after disclosing zero-day prompt injections in Microsoft Copilot Studio (CVE-2026-21520) and Salesforce Agentforce.

Analysis of Claude Code Source Leaked. For enterprise leaders: strategic implications, cost considerations, and implementation guidance for AI decision-makers.

Anthropic's CMS misconfiguration exposed Claude Mythos—a new AI model tier called Capybara that's 'far ahead of any other AI model in cyber capabilities.' The leak revealed draft launch plans, cybersecurity risk assessments, and an invite-only CEO summit. Enterprise security teams need to understand what ' unprecedented cybersecurity risks' means for their threat models.

Traditional observability misses 90% of AI agent security risks. Microsoft's updated Secure Development Lifecycle (SDL) reveals why logs, metrics, and traces need AI-native signals to detect indirect prompt injection, multi-turn jailbreaks, and trust-boundary violations. Enterprise security teams need the 5-step framework to implement AI observability before production.

Varonis Atlas covers 8 AI security layers—discovery, posture, pen testing, runtime guardrails, compliance—in one platform. Free trial available for CISOs evaluating enterprise AI risk.

ConductorOne Provisions AI Tools in 60 Seconds While Blocking Shadow AI Across 3,000+ MCP Servers. For enterprise decision-makers: strategic analysis, cost i...

As enterprises rush to deploy AI agents, Oasis Security raises $120M to secure the explosion of nonhuman identities—now outnumbering employees 144:1. What IT leaders and finance leaders need to know about the fastest-growing attack surface in cloud infrastructure.

Oasis Security raises $120M for AI agent access management. For CISOs managing non-human identities: why agent-to-human ratios demand new identity and access...

Enterprise AI analysis: How to Red-Team Your AI Agents Before Production. Strategic insights, ROI considerations, and implementation guidance for technical a...