security controls

The Shadow AI Jungle: Why Approving a Platform Is Not the Same as Securing What’s Built on It

/ ,

The article highlights a critical security concern in enterprise AI adoption dubbed “Shadow AI,” where non-technical employees build AI tools and automations on approved platforms without security oversight, creating significant blind spots for security teams who can track less than half of these AI agents. Despite platform approvals, enterprises remain responsible for securing what is built on them, yet many AI tools operate invisibly, often accessing sensitive data without triggering alerts, underscoring the urgent need for runtime governance and visibility into these business-built AI applications to manage risks effectively.

https://www.unite.ai/the-shadow-ai-governance-challenge/

Shadow AI Now Needs a Bill of Materials

/ , , ,

Enterprises are adopting AI Bills of Materials (AI-BOMs) to manage the complexity of Shadow AI, including tracking AI models, datasets, prompts, agents, identities, and cloud infrastructure, beyond traditional software components. Companies like Cisco, Wiz, and Palo Alto Networks are developing tools to create detailed, machine-readable inventories of AI assets to improve security, governance, model provenance, and compliance with emerging regulations such as the EU AI Act.

https://techinformed.com/shadow-ai-now-needs-a-bill-of-materials/

The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed

/

A significant backdoor in enterprise security involves persistent OAuth tokens granted to third-party apps, which do not expire, reset, or receive automatic monitoring, allowing attackers to bypass traditional defenses like MFA once compromised. Research shows 80% of security leaders recognize the risk, yet many do not actively monitor these tokens, exemplified by the Drift-Salesloft attack where stolen OAuth tokens were exploited to access data across hundreds of organizations. Effective security demands continuous behavioral monitoring of apps, blast radius assessment, and intelligent responses to mitigate risks posed by legitimate apps whose credentials have been weaponized after installation.

https://thehackernews.com/2026/05/the-back-door-attackers-know-about-and.html

CISO Advisory: How To Use Agentic AI In Security

/ , ,

Agentic AI holds significant promise for enhancing cybersecurity by reducing alert fatigue and accelerating vulnerability detection, making it a key investment focus for CISOs despite cautious deployment due to security, compliance, and operational risks. Experts recommend a gradual, well-governed adoption strategy that starts with assistive tasks like alert triage and investigation support, ensuring strong human oversight, risk management, and alignment with regulatory requirements to leverage AI’s benefits safely and effectively.

https://insight.scmagazineuk.com/ciso-advisory-how-to-use-agentic-ai-in-security

Two Different Attackers Poisoned Popular Open Source Tools

/ ,

In March 2026, two separate supply chain attacks targeted popular open source tools—Trivy, a vulnerability scanner used by over 100,000 users, and Axios, a widely used JavaScript library—infecting them with malware to steal credentials from thousands of organizations. These attacks, attributed to distinct groups including a North Korean-linked threat actor and a cybercrime collective called TeamPCP, demonstrate a growing trend of sophisticated supply chain compromises that leverage social engineering and AI to exploit developer environments, underscoring the urgent need for improved software bill-of-materials (SBOMs) and enhanced security measures.

https://www.theregister.com/2026/04/11/trivy_axios_supply_chain_attacks/

How to Protect Your Organization From AirSnitch Wi-Fi Vulnerabilities

/ , ,

The AirSnitch family of vulnerabilities exposes critical flaws in Wi-Fi client isolation features, allowing attackers connected to a guest network to access or inject traffic into other devices on the same access point, even across different SSIDs protected by WPA2 or WPA3. This attack exploits how access points handle group keys and packet routing, undermining the security of guest networks by enabling traffic injection and potential man-in-the-middle attacks without breaking encryption.

https://www.kaspersky.com/blog/airsnitch-wi-fi-client-isolation-guest-network-vulnerability-and-mitigation/55597/

12 AWS Cloud Security Best Practices for 2026: Cloud Security Guide

/ ,

The article outlines 12 best practices for securing AWS cloud environments in 2026, emphasizing continuous, risk-based governance tailored to dynamic cloud workloads. Key recommendations include enforcing least-privilege identity access, continuous asset discovery, default encryption, API security, network segmentation, automated vulnerability management, container security, and securing AI workloads, all within the context of the AWS shared responsibility model where customers manage identity and configuration security. These practices, supported by unified platforms like Qualys TotalCloud™, aim to reduce exposures, accelerate threat detection and remediation, and maintain continuous compliance in complex cloud environments.

https://blog.qualys.com/product-tech/2026/04/09/1aws-cloud-security-best-practices-guide

14 Risk Oversight Principles You Haven’t Heard Before

/ , ,

Protiviti’s Jim DeLoach presents 14 lesser-known principles of risk oversight aimed at enhancing enterprise risk management (ERM) effectiveness, emphasizing continuous improvement in risk reporting, integration of risk processes into business operations, and adapting to digital transformation. He stresses the importance of balancing risk and opportunity, fostering collaboration across organizational levels, making timely decisions with imperfect information, and cultivating a culture of open risk discussions, all to better prepare organizations for uncertainty and align risk management with strategic goals.

https://www.corporatecomplianceinsights.com/14-risk-oversight-principles-you-have-not-heard-before/

Back to Basics: 14 Risk Oversight Rules You Know (But May Be Ignoring)

/ , ,

Jim DeLoach outlines 14 fundamental risk oversight principles that remain crucial despite advances in digital tools, emphasizing that risk management must be aligned with strategy and adapt continuously to a rapidly changing environment. He highlights the importance of understanding calculated risks, vigilance against cognitive biases, preparation for contingencies, and maintaining strong culture and communication to effectively manage critical enterprise risks and ensure organizational resilience.

https://www.corporatecomplianceinsights.com/risk-oversight-rules-you-know/

The Dark Side of DDoS: Why DDoS Downtime Is Harder to Prevent

/ ,

Cloudflare's 2026 data reveals that DDoS attacks are increasingly sophisticated, AI-driven, and strategically timed to cause maximum disruption, often targeting critical services with low-volume Layer 7 attacks. Organizations face challenges maintaining resilience due to evolving network environments and configuration drift, highlighting the necessity for continuous, automated DDoS validation and proactive defense strategies to ensure service availability amid rapid changes and growing threats.

https://securityboulevard.com/2026/03/the-dark-side-of-ddos-why-ddos-downtime-is-harder-to-prevent/

Scroll to Top