Enterprise Security Tech

ThreatDown is expanding its cybersecurity platform to help organizations uncover unauthorized artificial intelligence tools and secure the growing number of machine identities operating across corporate networks. The company’s new AI visibility capabilities automatically identify shadow AI applications used by employees without formal approval. Security teams can view each tool’s vendor, category, version, platform and endpoint activity, helping them determine where corporate

U.S. employees are confident they can recognize fraudulent payment requests, but many are still relying on warning signs that generative AI can easily eliminate. A Trustmi survey of 1,000 U.S. workers involved in payment-related processes found that 78 percent believe they could identify a fraudulent request. Yet 70 percent said their top warning signs are typos, grammatical errors or unusual fonts. That creates a significant blind spot as attackers use AI to produce polished

The Pentagon has halted the next stage of its Cybersecurity Maturity Model Certification rollout, delaying a major expansion of independent cybersecurity audits for companies working across the defense supply chain. The Defense Department announced July 13 that it is suspending CMMC Phase 2, which had been scheduled to begin November 10, 2026. The phase would have significantly increased the number of contracts requiring assessments conducted by certified third-party organiza

As enterprises move AI agents from experiments into production, the biggest challenge may not be model intelligence, but whether organizations can trust those systems with real authority. In this interview, Descope co-founder Rishi Bhargava explains why identity, permissioning, and accountability will determine which companies can safely scale agentic AI, and which will be forced to keep it confined to the sandbox. Everyone seems to be talking about AI agents right now. Why h

As enterprises race to integrate AI into software development workflows, security leaders are facing a new challenge: how to govern code that is increasingly being written, modified, and deployed by AI systems. At the Gartner Security & Risk Management Summit 2026, Secure Code Warrior announced a new Adaptive Learning capability designed to help organizations reduce software security risk by connecting developer education directly to AI coding activity and real-world vulnerab