Agentic AI is moving the security perimeter from components to data — and most risk strategies aren't built for that.

Software Supply Chain Security, Threat Intelligence, and Threat Analysis Solutions

The Magic Quadrant™ for Software Supply Chain Security is a 45-minute read. Here's what we feel security leaders need to pull from it.

The Institute for Security and Technology's 'Driving AI Transparency' policy paper makes the case for AI-BOM minimum requirements.

Threat Advisor could help teams with AI-specific risks. But a broader AppSec strategy rethink is needed in the AI era.

Industry heavyweights bring new focus to vulnerabilities in the age of AI. Here’s how it might help improve the security of open-source software.

Delaying software upgrades creates a buffer against poisoned packages, but transitive dependencies continue to be a problem.

Traditional SBOMs, signing, and provenance all have blind spots, making them no longer capable of assuring software security.

Research into an Active Directory takeover with a single AI prompt highlights why organizations need to focus on agentic SOCs.

The post-mortems that followed two compromises by rogue AI agents show again that security teams need to focus on guardrails, not the AI model.

While prompt injection and data disclosure remain concerns, excessive agency climbed the list — not surprising with recent security incidents.

Researchers have built a worm that reasons about each host it infects, and the open-weight models powering it sit outside safety controls AI providers have built.

The annual cybersecurity conference focused on frontier AI agents — and what they mean for cyber. Here are three key takeaways.

UAT-10147 leveraged agentic AI to go beyond scripting to deliver a backdoor. The method highlights the need for agentic SOCs.

The alleged actors behind one of the most active supply chain threats were arrested in Australia — but this is not the end of Shai-Hulud.