Netskope Researchers Talk Governing AI: Identity, Authorization, and the Next Security Frontier
As organizations move beyond AI experimentation into enterprise deployment, security leaders are confronting a new set of challenges. AI is no longer simply another application—it is becoming an active participant in business processes, interacting with data, third-party services, and autonomous agents. While much of the industry's attention has focused on AI threats, Vini Egerland, Senior Staff Threat Research Engineer, and Dagmawi Mulugeta, Staff Threat Researcher at Netskope, argue that the bigger issues remain governance, authorization, identity, and visibility. Rather than treating AI as an isolated security problem, they emphasize that organizations should strengthen the foundational controls that govern users, applications, third-party providers, and machine identities. Egerland and Mulugeta mulled how AI is changing identity, why governance has become more important than ever, and why human behavior continues to present one of the greatest sources of enterprise risk.
Cohesity Vice President James Blake Discusses Recovery to Resilience: Rethinking Cyber Preparedness
As ransomware and destructive cyberattacks become an operational certainty rather than a remote possibility, organizations are beginning to recognize that backups alone are not enough. True cyber resilience requires more than technology—it demands operational readiness, cross-functional coordination, and the ability to restore trust in systems after an attack. Drawing on years of experience leading global cyber risk programs, building security operations centers, and supporting organizations through hundreds of ransomware incidents, James Blake, Vice President, Global Cyber Resiliency Strategy, Consulting & Response Services at Cohesity, discusses why resilience has become the new objective for security leaders. Throughout the conversation, he emphasizes that organizations must move beyond disaster recovery, rethink trust, prepare through realistic exercises, and adopt pragmatic, incremental approaches to strengthening security.
AI Agents Are Changing the Data Management Stack
As software companies scale agentic AI from isolated pilots to production-ready use cases, the hardest part is rarely the model itself, but the data around it. That’s exactly the bottleneck that Redis Iris, a new context and memory layer for agentic AI, hopes to address. Launched in May, the product is designed to close the gap between an AI agent and the business systems it needs to draw from to function optimally. This way, the agent can retrieve live information, remember previous interactions, and work across otherwise fragmented enterprise data sources. The launch of Redis Iris is just the latest example of a major trend in data management. Until recently, most attention has focused on retrieval-augmented generation (RAG).
Bank of England Redraws Stablecoin Rulebook for Smarter Guardrails
The Bank of England is weighing alternatives to existing holding limits on stablecoins and will release draft rules next month. It is also hoped that the rules will be finalized by the end of the year, in line with the broader U.S. timeline for crypto legislation. The BoE is also carefully considering feedback to a November consultation on transitional limits for individuals’ and businesses’ holdings of systemic stablecoins. That consultation made clear that the bank was open to other mechanisms to achieve the same objective. What’s noteworthy about the BoE’s announcement is that it reflects a marked change in tone. There’s an apparent willingness to talk less about blunt caps and arduous rules and more about alternative guardrails of the sort that don’t stifle market growth.
The US Government vs. Open AI Access: What Claude Fable 5 Reveals
Anthropic’s Claude Fable 5 launch was supposed to show that a highly capable AI system could be released carefully, with public access to useful features and tighter controls around sensitive ones. Instead, it has become an early test of how quickly frontier AI can move from product launch to national security issue. The US government turned that product decision into a national security question. CNN reported that Washington ordered Anthropic to suspend access to Mythos 5 and Fable 5 for foreign nationals, citing national security concerns. In mid-June, Anthropic responded by disabling customer access to its most capable systems entirely, while arguing that the reported jailbreak involved a narrow technique used to identify a small number of already known, minor vulnerabilities.
Microsoft Threatens Legal Action as Vulnerability Disclosure Tensions Explode
Vulnerability disclosure only works when researchers believe they can report serious flaws without being treated as criminals, and when vendors believe researchers will avoid handing attackers a ready-made playbook before a fix is available. But that dynamic is being sorely tested after a security researcher using the names Nightmare Eclipse and Chaotic Eclipse publicly disclosed six Windows vulnerabilities without first notifying Microsoft, prompting the company to threaten possible criminal action over the release of exploit details. Microsoft said the flaws, named RedSun, UnDefend, BlueHammer, YellowKey, GreenPlasma, and MiniPlasma, were “not responsibly disclosed,” arguing that publishing proof-of-concept code for unpatched vulnerabilities gives attackers a practical route to abuse them.