AI and Machine Learning

A company can spend years building a careful process for approving software. Then an employee installs an AI browser extension, clicks through an OAuth consent screen, and gives it access to their inbox, files, or calendar in a few minutes. New research from Reco suggests this is happening at a considerable scale. The company, which helps to secure AI agents for enterprises, found that 79% of SaaS applications across its telemetry are authorised, suggesting that...

Privacy-focused tech company Proton has launched a free tool designed to show users exactly what large language models such as ChatGPT and Claude have learned about them from months or years of conversation history, a capability that speaks directly to the shadow AI problem now facing enterprise security teams. The tool, called AI Paper Trail, works by analysing conversation exports that users download directly from ChatGPT or Claude. It then generates a personal report that...

Model distillation began as a clever way to make artificial intelligence smaller. It is rapidly becoming one of the industry’s biggest arguments over who owns intelligence once a machine can reproduce it. The basic technique is legitimate and widely used. A powerful “teacher” model generates answers that train a smaller “student,” transferring some of its capabilities at far lower cost than starting again from raw data. AI labs use it to create faster, cheaper versions...

Most companies know their team uses AI. Far fewer know which tools, for what, or with what data. An employee pastes a client contract into a personal chatbot to summarise it. A marketer runs campaign figures through a free AI writer. A developer leans on an unvetted coding assistant. None of it was approved, and all of it is happening right now, inside businesses that believe they have AI under control. This is shadow AI:...

New research from Pentest-Tools.com suggests that AI-assisted penetration testing tools are generating vulnerability findings faster than most security teams can verify them, creating a validation backlog that is offsetting the time AI was meant to save. The company surveyed 158 security practitioners in June 2026, including penetration testers, security engineers, AppSec and DevSecOps professionals, consultants, and MSSP practitioners, all of whom use AI-assisted tools in their vulnerability assessment and validation work. Among the 147 respondents...

Check Point Software has launched what it calls the industry's first AI Network Firewall, extending AI-specific inspection and control into the firewall infrastructure that organisations already operate, rather than requiring a separate virtual appliance. The capability, delivered through Check Point's firewall software release R82.20, is designed to close what the vendor describes as a blind spot in enterprise networks: traffic generated by AI systems, including user prompts, model calls, and the actions of autonomous agents,...

AI security has become a broad category. The term can refer to tools that use AI to detect suspicious activity, platforms that protect AI-enabled applications, or software that specialises in thwarting attacks that are powered by AI.  Products may use similar language while working with different data and addressing different risks. Here, we're narrowing in on AI- and ML-driven tools built to catch, triage, block, and respond to threats across the full stack, from endpoints...

Swiss privacy company Proton has launched Lumo 2.0, a major upgrade to its zero-access encrypted AI assistant, as concerns mount over the security risks posed by mainstream AI tools in the enterprise. Unlike most AI assistants, which log user conversations and may use them to train future models, Lumo is built so that not even Proton can read what users type into it. The company argues this addresses a growing blind spot in enterprise security:...

Check Point Software has announced it is embedding OpenAI's frontier cyber capabilities directly into its customer-facing security products, becoming one of a select group of vendors accepted into OpenAI's Daybreak Cyber Partner Programme. The move represents a significant escalation in the deployment of advanced AI in enterprise security, not as a back-end research tool but as a core component of the defences that more than 100,000 organisations rely on every day. What the Daybreak Programme...

Security teams are facing a new and accelerating threat: attackers armed with sophisticated AI models that can chain together multiple application vulnerabilities into fully formed exploits within minutes. That is the stark reality underpinning a raft of new capabilities announced today by Black Duck for its Polaris Platform. The company is positioning the enhancements around what it calls 'Mythos readiness,' a reference to advanced AI models now being used by threat actors. The urgency is not...