AI is moving beyond alert triage to influence decisions across detection engineering, threat hunting, and incident response. But as organizations rely on AI for more security-critical work, a fundamental challenge emerges: How do you know decisions made by AI are trustworthy?
A correct outcome doesn’t always mean the reasoning or investigation ...
Zero trust verifies identities and controls access, but authorized users and agents can still introduce risky code. Whether software is developed internally, supplied by a vendor, downloaded by an employee, or flagged by the SOC, its capabilities matter.
This webcast explores extending “never trust, always verify” to code across enterprise and ...
As AI agents take on more of the build, test, and deploy work in software development, the developer’s job changes from authoring code to specifying intent, setting constraints, and reviewing outcomes.
The traditional software development lifecycle assumes humans in every phase. An agentic development lifecycle treats agents as first-class part...
The technologies that organizations depend on are changing faster than many security programs can adapt. Generative AI and autonomous agents are gaining access to sensitive data, credentials, tools and business processes. Software supply chains are creating complex webs of third-party dependencies and increasingly connected IT and operational envi...
Simpson Strong-Tie, a top manufacturer of construction fasteners and part of the S&P 400, reached a point where annual pentests couldn’t keep pace with its expanding digital footprint and growing use of AI agents.
Seeking a stronger way to assess its security posture, as well as defensible assurance that its applications and the AI systems ...
As organizations adopt AI agents, they introduce new attack vectors beyond infrastructure, including prompts, model context, and sensitive data flowing through telemetry between developer environments and cloud services. Security teams must balance innovation with control, as agents without proper safeguards can operate outside expected boundaries...
Today’s most damaging email attacks frequently contain no malicious payload. They originate from legitimate accounts, blend into normal communications, and sail through SPF, DKIM, and DMARC.Secure email gateways (SEGs were built to filter out known-bad content, inspect signatures, and conduct perimeter inspection — a model that doesn’t account for...
The typical enterprise uses more than 45 separate security products, each giving a different view of a single attack that analysts must connect manually. This fragmentation slows response and takes up valuable time.
Sophos’ new AI-driven Fusion platform puts those views together automatically. It uses a shared context lake into which signals fr...
AI is making decisions across your environment — calling APIs, accessing data, and taking action. Most organizations know it’s happening, but far fewer can see it, let alone stop it.
In this panel discussion, security leaders will share what they’ve learned deploying and governing AI workloads at scale on AWS, and what it takes to close the gap...
Identity security has spent decades securing authentication and protecting the moment of access. But modern attacks operate inside valid sessions. These attacks continue to grow more sophisticated, from obtaining legitimate OAuth grants to abusing AI agents with over-accumulated permissions, and now through adversarial candidates entering the ente...
