Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Mike Shema
Connected defense: Turning fragmented security signals into coordinated action
The typical enterprise uses more than 45 separate security products, each giving a different view of a single attack that analysts must connect manually. This fragmentation slows response and takes up valuable time. Sophos' new AI-driven Fusion platform puts those views together automatically. It uses a shared context lake into which signals from different control points flow in real time, turning information into coordinated action.
The Rise of Agentic Identities: Who Governs AI Access to Data?
AI is accelerating the risks that CISOs already struggle to control, such as unmanaged data access, identity sprawl, and limited visibility into who (or what) is touching sensitive information. Today, AI systems and agents are operating across enterprise environments, accessing data at speed and scale that no human team can manually track. But most organizations still can't answer these critical questions: What kind of data are these agents accessing? What are they allowed to do with it?
Rewriting the AppSec Playbook: Ditch the Vulnerability Backlog, Defend What Matters
The vulnerability backlog is a trap—and it's costing you time, trust, and true security. In today's fast-moving threat landscape, simply finding flaws isn't enough. It's time to shift from volume to value. This session is your guide to building a modern AppSec program that prioritizes risk, not noise. You'll hear how forward-thinking teams are aligning security with business outcomes, empowering developers with context—not roadblocks—and proving impact in terms that matter to leadership.
Trust but verify: A security playbook for agentic AI in production
As organizations adopt AI agents, they introduce new attack vectors beyond infrastructure, including prompts, model context, and sensitive data flowing through telemetry between developer environments and cloud services. Security teams must balance innovation with control, as agents without proper safeguards can operate outside expected boundaries and introduce risk. In this session, we'll discuss how leading security teams are building a repeatable playbook for governing agents in production.
AI for better SecOps: A Black Hat preview
Security operations centers are drowning in alerts, false positives, and fragmented tooling. AI promises relief, but without careful implementation, it risks amplifying the chaos. Worse, adversaries are actively probing ways to trick or manipulate AI-driven detection systems. In this webcast, we'll explore how AI can be applied to streamline operations, reduce burnout, and strengthen response workflows. We'll also preview what's likely to dominate the Black Hat 2026 agenda around AI and operations.
Who’s watching your AI? A security-leader panel on runtime visibility and accountability
AI is making decisions across your environment — calling APIs, accessing data, and taking action. Most organizations know it's happening, but far fewer can see it, let alone stop it. In this panel discussion, security leaders will share what they've learned deploying and governing AI workloads at scale on AWS, and what it takes to close the gap between deployment and accountability.
In continuous operation: How Simpson Strong-Tie safely AI red-teams AI-powered applications
Simpson Strong-Tie, a top manufacturer of construction fasteners and part of the S&P 400, reached a point where annual pentests couldn't keep pace with its expanding digital footprint and growing use of AI agents. Seeking a stronger way to assess its security posture, as well as defensible assurance that its applications and the AI systems inside them could stand up to real attacker techniques, the company turned to Novee Security and its continuous, AI-driven pentesting.
Inside monday.com’s Security Strategy: When App Growth Outpaces Identity Control
As monday.com scaled, hundreds of business-critical apps lacking SCIM or security APIs fell outside existing identity tools. With thousands of employees relying on these apps, the gaps became increasingly difficult to manage at scale. Manual access management drove higher risk and slowed IT operations.
Hard to handle: Securing AI-generated code and the AI agents that write it
Organizations are charging heedlessly into AI-driven code generation without understanding the risks. They don't know which models their developers are using, where MCP servers are being used, or even which pieces of their own code are AI-generated -- or imported from elsewhere. Development teams may not realize that AI coding agents must be protected from prompt injection, data poisoning or other external influences.
The Future of Software Engineering in the Age of AI
Over the past few years, since the introduction of LLM-based coding assistants into software development workflows, the practice of software development has been experiencing a significant revolution. Like the combination of DevOps, cloud computing, and agile development which radically changed the craft over the last two decades, the age of AI is yet again reinventing what it means to be a software builder.
Scaling secure software in the age of AI: Turning intelligence into action
I is rapidly changing the software security landscape, enabling faster code reviews, smarter testing, and greater visibility into risk. But the question is not if you will use AI to scale security, it is how . The organizations leading this shift are the ones combining AI-driven insight with a human-first culture of secure development.
Application Security 2.0: AI changes everything
Attendees will learn: Actionable strategies for leveraging AI to enhance application security Techniques to identify and rectify common security flaws in applications Steps to implement best practices that improve your security posture As cyberattacks grow more sophisticated, traditional application security approaches are no longer enough.
AppSec in the age of AI: An RSAC Conference preview
Application security is at a breaking point as development teams move faster than ever, aided by AI-powered coding assistants. While these tools boost productivity, they also introduce subtle errors and insecure patterns at scale. The result: a growing backlog of vulnerabilities that outpaces traditional AppSec models. This webcast examines the risks and opportunities of AI in AppSec and who will be addressing it at RSAC Conference.
Empowering without exposing: A roadmap for security teams in a citizen developers’ world
In this SC Media panelcast, host Mike Shema joins Nokod CTO and co-founder Amichai Shulman to discuss a fast-growing blind spot in enterprise security: the surge of applications created outside traditional development pipelines from applications, automations to AI-driven agents. These shadow apps expand attack surfaces in ways most security programs aren't prepared for.
Securing Vibe Coding: Addressing the Security Challenges of AI-Generated Code
The rise of “Vibe Coding”—leveraging AI tools for software development—is revolutionizing how teams build and ship code. While this trend enhances productivity and democratizes development, it introduces a new class of security risks that traditional secure coding practices weren't designed to handle.
The Brittle Identity Perimeter — Why Behavioral AI Is the Next Frontier of Identity Security
Identity security has spent decades securing authentication and protecting the moment of access. But modern attacks operate inside valid sessions. These attacks continue to grow more sophisticated, from obtaining legitimate OAuth grants to abusing AI agents with over-accumulated permissions, and now through adversarial candidates entering the enterprise through the hiring funnel. Attackers are taking advantage of weak authentication controls to walk through the front door.
Application Security Weekly (Audio) on Apple Podcasts
160 episodes Application Security Weekly decrypts development for the Security Professional - exploring how to inject security into their organization’s Software Development Lifecycle (SDLC) in a fluid and transparent way; Learn the tools, techniques, and processes necessary to move at the speed of DevOps (even if you aren’t a DevOps shop yet).
Glass & Steel, by glitbiter
supported by / Streaming + Download Includes unlimited streaming via the free Bandcamp app, plus high-quality download in MP3, FLAC and more. Purchasable with gift card $6 1. 2. 3. 4. 5. So aligned in perfect lies. You’re outside the walls you built along the lines. Hide your eyes, but can you see, In the middle of the night. Tell me lied when you called me home. Conceal me in light. You fall out of sight, you hurt me tonight. The end is when you follow. Found your life in disarray.
Do It Again, by Primo the Alien
I tried to run away from your memory But I just can’t do it I end up right back where I left you, babe I play it all in my head What went wrong How did we end up like this Can we give it another go Undo what we did We can move fast or take it slow Undo our undoing And then I wanna go back and do it again I wanna do it again, oh I wanna go back and do it again And then we’ll do it again, oh Undo it and do it again Take back the way I left, the things you said We could just forget it Maybe our...
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Mike
Contact Mike, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack