Sign in Subscribe

Agentic AI

Agentic AI explores autonomous and semi-autonomous AI systems that can reason, plan, use tools, access data, and act across enterprise environments. Coverage focuses on AI agents, multi-agent systems, identity, authorization, MCP, delegated authority, security architecture, governance, and the emerging risks CISOs must address as AI moves from generating information to taking action.
29
Sep
The CISO Operating Model After Black Hat 2026

The CISO Operating Model After Black Hat 2026

Black Hat USA 2026 points to a deeper shift in security leadership: the CISO must move beyond protecting systems toward governing delegated authority — who can act, what they can cause, under which constraints, and with what consequence.
25 min read
11
Sep
The Automation Paradox: AI Can Fix Faster — But Can We Trust the Fix?

The Automation Paradox: AI Can Fix Faster — But Can We Trust the Fix?

17 min read
11
Sep
AI Is Changing the Economics of Vulnerability Discovery

AI Is Changing the Economics of Vulnerability Discovery

16 min read
11
Sep
Prompt Injection Is Becoming an Execution Problem

Prompt Injection Is Becoming an Execution Problem

14 min read
11
Sep
Identity After Passwords

Identity After Passwords

Phishing-resistant authentication is essential — but it does not end identity compromise. As attackers shift toward sessions, tokens, endpoints, machine identities and delegation chains, identity security must evolve from authentication assurance to authority assurance.
14 min read
10
Sep
When Security Tools Become the Attack Surface

When Security Tools Become the Attack Surface

12 min read
10
Sep
The New AI Supply Chain

The New AI Supply Chain

The AI supply chain no longer delivers only software. Models, prompts, skills, MCP servers and runtimes can all shape execution. CISOs must start governing not only executable code, but executable meaning.
12 min read
23
Aug
Part 4 — The AI Supply Chain Can Execute Before the Application Does

Part 4 — The AI Supply Chain Can Execute Before the Application Does

AI artifacts are no longer passive data. DEF CON 34 shows how models, Skills, repositories and loaders can become execution paths — forcing CISOs to rethink supply-chain security, provenance and runtime authority.
15 min read
19
Aug
The Agent Is Becoming the New Privileged User

The Agent Is Becoming the New Privileged User

AI agents are becoming a new privileged identity class. The real security question is no longer what AI can know — but what it is authorized to do, through whose identity, and with what consequences.
14 min read
19
Aug
Part 3 — MCP Is Becoming an Attacker’s Routing Layer

Part 3 — MCP Is Becoming an Attacker’s Routing Layer

An AI agent’s real privilege extends far beyond its IAM permissions. MCP, managed identities and connected services create transitive authority paths that attackers can exploit—turning tool connectivity into a new routing layer for enterprise privilege.
17 min read