Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Michael Vizard
Ten Great Cybersecurity Job Opportunities
Security Boulevard is now providing a weekly cybersecurity jobs report through which opportunities for cybersecurity professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for cybersecurity professionals to advance their careers.
Top 10 Breaches of the Week
Security Boulevard’s weekly after-action roundup returns with the incidents from the past seven days that security teams should study closely. Trusted intermediaries were the story this week: a bank’s service provider, a hosting security tool’s update channel, a certificate authority’s internal portal and the developer platforms that hold AI access tokens. Two actively targeted flaws in widely deployed developer tooling round out the list, labeled separately from confirmed breaches.
Cyberhaven Extends Data Security Reach to AI Agents
Cyberhaven extends data protection to AI agents. Its Agentic Data Security module enables teams to discover AI tools, monitor data access and enforce policies through the Cyberhaven Flow platform. Visibility connects agent activity to its source. Security teams can inspect prompts, tool calls, file reads and responses, and identify the person or system behind agent activity. AI agents introduce new insider risks.
CrowdStrike Extends Scope and Reach of AI Portfolio
CrowdStrike announced Agent Insider Threat Detection for Falcon Next-Gen SIEM to identify abnormal AI agent behavior, even when no policy is violated. Human approval gates and agent interruption controls help security teams oversee sensitive actions and stop running agents. Agentic Adversary Emulation uses CrowdStrike’s SafeMind technology to simulate attacks, uncover exploitable weaknesses and verify that fixes close attack paths.
Ten Great Cybersecurity Job Opportunities
Security Boulevard is now providing a weekly cybersecurity jobs report through which opportunities for cybersecurity professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for cybersecurity professionals to advance their careers.
CrowdStrike Adds AI Agent Kill Switch to Expanded Portfolio
CrowdStrike introduced an AI kill switch in Falcon Guardian that lets security teams block AI agents’ access to models through connected gateways. Planned endpoint controls would expand containment by stopping agents where they run and preventing them from relaunching. CrowdStrike agreed to acquire Fiddler AI and Dreadnode to expand AI agent observability and security testing.
Novee Extends AI Penetration Testing to Unknown Assets
Novee takes AI pentesting beyond known assets. Its new External Surface Testing capability discovers internet-facing systems and automatically tests them for exploitable vulnerabilities. Annual penetration tests can’t keep pace with AI-powered attackers. Continuous, automated testing helps security teams identify weaknesses before adversaries exploit them. Real-world exploitability matters more than vulnerability scores alone.
CrowdStrike Extends Project QuiltWorks Initiative to Europe
CrowdStrike is expanding Project QuiltWorks across Europe, adding partners to help organizations assess risks, prioritize vulnerabilities and accelerate remediation. Falcon IQ automates assessment and remediation workflows, combining AI models with CrowdStrike threat intelligence and security data. The expansion adds local expertise and delivery capacity as cybersecurity teams face growing pressure to address AI-driven threats.
Cisco Plans to Extend eBPF to Improve Application Security
Cisco plans to extend its eBPF-based security capabilities to Linux applications early next year, allowing security teams to mitigate vulnerabilities without immediately applying patches. Cisco’s Shield technology provides temporary protections that give organizations more time to develop, test and deploy permanent fixes as AI accelerates vulnerability discovery.
Vicarius Revamps AI Platform to Unify Cybersecurity Workflows
Vicarius vRx 2.0 unifies vulnerability discovery, prioritization, patching and remediation in a single AI-powered workflow. Enhanced vRadar and vComply capabilities extend asset visibility and simplify compliance mapping across major security frameworks. Natural-language asset grouping and AI-generated remediation scripts help security teams reduce manual work and accelerate response.
Cato Networks Extends Reach to Secure AI Clients
Shadow AI gets harder to hide. Cato AI Endpoint helps security teams discover and control AI activity across browsers, desktop applications and locally running agents. AI security moves beyond the browser. Inline inspection of prompts, responses and agent activity helps enforce policies and reduce sensitive data exposure. The agentic AI threat is growing.
Ten Great Cybersecurity Job Opportunities
Security Boulevard is now providing a weekly cybersecurity jobs report through which opportunities for cybersecurity professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for cybersecurity professionals to advance their careers.
ProjectDiscovery Adds Free Tool to Validate Vulnerabilities
Proof, not just another alert. ProjectDiscovery’s free Neo Triage tool reproduces vulnerabilities in isolated sandboxes, giving security teams evidence of which findings represent genuine risks. Less noise, faster fixes. Automated validation, severity assessment and retesting could dramatically reduce manual triage work and help developers focus on vulnerabilities that matter. AI demands smarter security workflows.
Aviatrix Adds Ability to Restrict Outbound and Lateral Access to Cloud Workloads
Aviatrix introduces default-deny containment: Clearance restricts unauthorized outbound and lateral workload connections to help prevent attackers from spreading across cloud environments. Shadow policies reduce disruption risks: Security teams can monitor traffic flows and evaluate the impact of blocking connections before enforcing restrictions.
Top 10 Breaches of the Week
Security Boulevard’s weekly after-action roundup is back with the incidents from the past seven days that deserve a closer look from defenders. Supply chain abuse dominated this week. Attackers turned a cloud backup service, a maritime IT provider, an open source AI gateway and a developer platform into ways to reach thousands of downstream organizations. Large consumer breaches in Japan and disruptive attacks on a U.S. hospital and a state capital round out the list.
Descope Adds Governance Capability to Identity Management Platform for AI Agents
– Descope adds AI agent governance: Agentic Identity Hub 3.0 introduces onboarding and approval workflows that establish each agent’s purpose, ownership and access permissions. – Expanded identity capabilities: New MCP gateway integrations, single sign-on support and workload identity federation help manage agents across enterprise environments.
Sweet Security Adds Virtual Patching to Platform for Securing Runtime Environments
Virtual patching closes the security gap: Sweet Security enables teams to block cloud exploits with runtime-enforced policies before permanent vulnerability fixes become available. One-click protection across workloads: Security teams can deploy virtual patches across affected cloud nodes using Sweet Security’s policy catalog and existing runtime sensors.
Mondoo Extends AI Reach of Exposure Management Platform to Close Remediation Loop
Mondoo is expanding automated remediation: New capabilities include source code inspection, external attack surface scanning and enhanced CIS Benchmark remediations. Existing tools can deliver fixes: Integrations with Microsoft Intune and CrowdStrike Falcon let teams deploy endpoint fixes through platforms they already use. Teams control AI autonomy: Organizations can automate routine fixes while requiring human approval for sensitive systems or higher-risk changes.
Cyware Adds AI Agents to Analyze Threat Intelligence for Specific IT Environments
Cyware introduced three Last Mile Agents to help cybersecurity teams turn threat intelligence into priorities relevant to their organizations. The agents match advisories to organizational requirements, rank vulnerabilities and generate threat briefings. Cyware plans to extend these capabilities into automated remediation workflows as AI accelerates vulnerability exploitation.
Analysis Surfaces Spike in First-Part Fraud in the AI Era
An analysis of transactions shared today by Socure finds there has been an uptick in first-party fraud, with Gen Z males disproportionately represented among those using artificial intelligence (AI) tools to create fake evidence of, for example, a crushed package or broken item after it has been delivered.
TransUnion Adds Scoring Capability to Help Thwart Synthetic Fraud
TransUnion adds fraud scoring: The new scores help financial institutions identify synthetic identities and credit washing within existing workflows. Lender exposure reaches $2.4 billion: TransUnion estimates that amount was at risk from synthetic identity fraud as of June 2026. AI raises the stakes: Cheaper synthetic identity creation is increasing pressure on organizations to improve verification and share fraud intelligence.
Survey Surfaces Impact Cyberattacks in Healthcare Sector Have on Patient Care
– Cyberattacks are disrupting patient care: 97% of surveyed healthcare organizations experienced an attack, and 74% of those reported care disruptions. – The financial toll is rising: The average cost of organizations’ most expensive attack reached $4.2 million, with operational disruption the largest cost category. – AI adoption is outpacing safeguards: 60% lack controls governing sensitive data used in AI systems, while 24% cited AI agents without guardrails as a cause of data loss.
Tenable Adds Ability to Vet Open Source AI Agents for Cybersecurity Teams
– Tenable adds security reviews for shared AI agents and skills, combining automated inspection, OpenAI model assessments and human review. – Exchange Inspector checks for prompt injection, exposed secrets and customer data, addressing risks that could undermine adoption. – Shared agents could reduce development work for security teams, but vetting still needs to be paired with deployment guardrails and access controls.
Ten Great Cybersecurity Job Opportunities
Security Boulevard is now providing a weekly cybersecurity jobs report through which opportunities for cybersecurity professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for cybersecurity professionals to advance their careers.
Top 10 Breaches of the Week
This week’s after-action roundup from Security Boulevard looks at the incidents disclosed or materially updated over the past week that defenders should study most closely. A theme runs through the list: attackers who didn’t need to break anything. They walked in through a trusted vendor, a reused or trivial password, an exposed controller or a stolen token. Confirmed incidents are kept separate from unverified claims and near misses.
AI Scanners Demand Smarter Vulnerability Prioritization
More scanner findings can mean more work without a corresponding improvement in security. Every result still needs a decision: is it real, is it relevant and what should happen next? AI-assisted discovery adds volume to backlogs that security teams already struggle to manage, while false positives consume attention. Sorting that work has a cost whether people perform the triage or additional AI systems process it on their behalf.
Qualys CEO Calls for Standards to Secure AI Agents
Qualys CEO Sumedh Thakar is calling for industrywide security standards and best practices to address the growing risks posed by AI agents. AI agents can bypass established guardrails and security controls, creating new challenges for cybersecurity teams. A standardized security framework could establish minimum requirements for AI agent isolation, network segmentation and risk mitigation.
Survey Sees AI Transforming Critical Infrastructure Security for Better and Worse
A global survey of 1,607 cybersecurity leaders responsible for critical infrastructure finds that nearly all (95%) are concerned that advanced artificial intelligence (AI) models will lead to more attacks being launched on critical infrastructure. Conducted by Sapio Research on behalf of Palo Alto Networks, the survey also finds that 44% expect to “fight fire with fire” to thwart those attacks, while 47% said they expect AI to play a role.
Qualys Applies AI to Assess Need to Apply Emergency Patch
Qualys, Inc. today at its ROCon Americas conference revealed it has added a remediation intelligence and orchestration engine, dubbed TruConfidence, to its platform that leverages multiple artificial intelligence (AI) agents and models to assess which patches are most critical to prioritize based on how lethal any given vulnerability is to a specific IT environment.
Report: Deepfakes Are Driving $40B of Fraudulent Transactions
Deepfake-enabled fraud is becoming a major financial threat. identifAI reports that AI-generated deepfakes are driving $40 billion in financial fraud, with the United States accounting for 34.1% of observed incidents and video synthesis emerging as the leading attack method. Cybercriminals are exploiting readily available executive content.
Ten Great Cybersecurity Job Opportunities
Security Boulevard is now providing a weekly cybersecurity jobs report through which opportunities for cybersecurity professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for cybersecurity professionals to advance their careers.
Top 10 Breaches of the Week
Security Boulevard’s weekly after-action report looks at the incidents disclosed or materially updated over the past week that matter most to defenders. This edition spans healthcare, public services, energy, finance, retail, education and technology, focusing on the control gaps and response decisions behind the headlines. Confirmed exposure is separated from unresolved scope and attacker claims.
Hack The Box Adds Enterprise Edition of Platform to Assess AI Cybersecurity Agents
Hack The Box (HTB) launched AI Range Enterprise Edition to help cybersecurity teams evaluate whether AI agents can effectively perform assigned tasks. The platform enables continuous assessments of AI agents as IT environments evolve and new vulnerabilities and attack techniques emerge. HTB also helps organizations assess whether cybersecurity professionals have the skills needed to evaluate and oversee AI agents.
Elastic Brings Agentic AI to the SIEM Platform
Elastic today previewed an agentic artificial intelligence (AI) capability that it has embedded into its security information and event management (SIEM) platform. Announced at an Elastic{ON} event, a layer of agentic AI capabilities, dubbed AlertZero, has enabled Elastic to add AI agents that have been trained to handle alert triage, investigate issues, hunt for threats, tune detections and, finally, conduct forensic analysis.
Report Surfaces Sharp Increase in Malware Detections
– Malware has overtaken phishing as the most commonly detected DNS-based threat, according to EfficientIP’s analysis of 150 billion DNS transactions. – Malware activity nearly doubled to 3.84 billion detections, while overall threat signal volume increased 24% to 13.85 billion. – Domain-generation algorithm activity and newly observed malicious domains rose sharply during the first half of the year.
Vijil Adds Red AI Agent Team to Stress Test AI Agent Security
– Vijil has added its Diamond Adaptive Red Teaming for Agents (DART) module to automate security testing of AI agents before and after deployment. – DART uses adversarial AI agents to dynamically probe agentic workflows, adjusting attacks based on how targeted agents respond. – The module can be integrated with agent frameworks and CI/CD pipelines, enabling AI agent security testing to become part of DevSecOps workflows.
Cowbell Adds AI Agent to Assess Risk to Cyberinsurance Portfolio
Cowbell added an AI agent called Risk Advisor to assess cybersecurity risk and recommend ways policyholders can improve their security posture. The agent builds on Cowbell’s OMNI decision engine, using continuously collected environmental data to identify vulnerabilities, governance gaps and factors affecting risk scores. The broader aim is to reduce cyber insurance claims by helping organizations understand and remediate risk before incidents occur.
Report Details AI Tactics and Techniques Used to Launch Cyberattacks
An analysis of cyberattacks launched using artificial intelligence (AI) coding tools conducted by Abstract Security and Gambit Security surfaces insights into how adversaries are using them to, among other things, find ways to end-run web application firewalls (WAFs) and content delivery networks (CDNs).
Ten Great Cybersecurity Job Opportunities
Security Boulevard is now providing a weekly cybersecurity jobs report through which opportunities for cybersecurity professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for cybersecurity professionals to advance their careers.
Top 10 Breaches of the Week
Security Boulevard’s weekly after-action report tracks the breaches that matter most to defenders—not just the biggest headlines, but the failures and response decisions behind them. This edition spans the past two weeks because the first-week scan produced fewer than ten well-supported, non-duplicate cases after recent organizations were screened out. Confirmed scope is separated below from attacker claims and unresolved forensic findings.
– RSA Agent ID extends the RSA Unified Identity Platform to discover, secure and govern AI agents and MCP servers. – Agent ID Discover inventories AI agents and MCP servers, assigning ownership, risk tiers and lifecycle states. – Agent ID Secure applies policies to AI agent and tool calls through an AI/MCP gateway and can revoke access when agents are decommissioned.
Cribl Adds SIEM to Growing Cybersecurity Portfolio for Analyzing Telemetry Data
– Cribl launched Cribl Detect, a federated SIEM platform designed to analyze telemetry data where it already resides rather than requiring it to be centralized first. – Cribl Detect can apply security logic to telemetry both at rest and as it moves through data pipelines. – The platform includes detection posture management that maps detections against MITRE ATT&CK techniques to identify coverage gaps, noisy rules and missing telemetry.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Michael
Contact Michael, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack