Skip to main content
Alex Vakulov on Muck Rack

Alex Vakulov

Verified
Kyiv
As seen in: Forbes, Communications of the ACM, Flipboard, The Jerusalem Post, AT&T Cybersecurity, iFixit, Benzinga, HackerNoon, ReadWrite, betanews and
Covers:  Security \ Tech
I am a cybersecurity expert & writer 🔸 Helping organizations in making informed decisions to secure their data & assets effectively 🔸 Available for interviews

Get in touch with Alex

Contact Alex, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Alex Vakulov’s Biography

Read Full Bio →

Alex Vakulov is a cybersecurity researcher with over 20 years of experience in malware analysis. Alex has strong malware removal skills. He is writing for numerous tech-related publications sharing his security experience.

Alex Vakulov’s Journalist Portfolio

See all →
Governing Non-Human Identities in Agentic Systems | CSA

Governing Non-Human Identities in Agentic Systems | CSA

An exploration of autonomous AI agents as non-human identities, why classic risk models fail, and how zero-tr…

View article →
Prompt Data Is the New Shadow Data Layer

Prompt Data Is the New Shadow Data Layer

Explore the emerging risks of prompt data in AI tools and learn how to establish effective governance to prot…

View article →
Security Awareness Training: Topics, Examples and Best Practices | Built In

Security Awareness Training: Topics, Examples and Best Practices | Built In

Discover why modern security awareness training must evolve beyond basic compliance to combat AI-driven imper…

View article →
MTTP: Patch Cycles Too Slow | CSA

MTTP: Patch Cycles Too Slow | CSA

Explains why modern attackers beat patch cycles and how enterprises can shrink MTTP to reduce breaches.

View article →
Access Controls Validate Identity. They Cannot Validate Intent. With AI Agents, That Distinction ...

Access Controls Validate Identity. They Cannot Validate Intent. With AI Agents, That Distinction ...

Access controls can confirm who or what is allowed to act. They cannot always tell whether the action makes s…

View article →
What Data Do Apps Collect? A Privacy Checklist for Mobile Users

What Data Do Apps Collect? A Privacy Checklist for Mobile Users

Most people care about privacy but rarely check app permissions, even though popular apps often request exten…

View article →

Articles

Prompt Data Is the New Shadow Data Layer

|
By Alex Vakulov Verified
| SecureWorld
Prompt Data Is the New Shadow Data Layer 13:34 The DLP alert your proxy catches is usually a clear outbound event: a file uploaded to an unsanctioned app or a spreadsheet emailed outside the company. What it may miss is the paragraph of legal language an associate pasted into an AI tool to clean up the wording. That is a data transfer too. It just does not look like the kind of transfer most controls were built to catch.
Open in Who Shared Issue with article?

Security Awareness Training: Topics, Examples and Best Practices

|
By Seth Wilson Verified, Alex Vakulov Verified
| Built In Verified
Just one employee click can expose a corporate network, especially now that AI-drivensocial engineering can make malicious emails and calls look routine. Technical controls help, but security habits fade without practice. Today, security awareness training is a core control that must evolve faster than attackers. Yet many active programs were designed for a threat landscape that no longer exists. Older programs need updating for real workflows, pressure and attacker tactics.
Open in Who Shared Issue with article?

Access Controls Validate Identity. They Cannot Validate Intent. With AI Agents, That Distinction Is Now Critical

|
By Alex Vakulov Verified
| Security Boulevard Verified
Access controls can confirm who or what is allowed to act. They cannot always tell whether the action makes sense. That gap becomes dangerous with AI agents, which can call tools, trigger workflows, and make decisions. The problem is that agents may do all this before anyone gets the chance to read the output or decide whether it was a good idea. There is a real vulnerability in the fact that the industry did not design its security stacks to deal with AI agents.
Open in Who Shared Issue with article?
See all 359 articles