Also Read: BlueVoyant Launches Solution to Accelerate Adoption of Microsoft’s Integrated SOC

“Frontier AI models represent a new inflection point for cybersecurity. The challenge is not only technological; it is about helping organisations act before risks materialize, understand the implications, assess their exposure, and, if an attack still succeeds, ensure resilience and quick recovery. By combining advanced technologies with strategic and operational cybersecurity services, our ambition is to give customers the insight, expertise and continuous support they need to navigate this new reality with confidence,” said Philippe Vallée, Executive Vice-President, Cybersecurity & Digital Identity, Thales. The company is also strengthening the framework through partnerships with technology providers, including its participation in Google’s Fairwind program, which will provide critical industries access to cyber AI innovations such as Gemini 3.8 Flash Cyber and the CodeMender harness. The initiative reflects Thales’ strategy to combine AI-powered defence, cybersecurity expertise, and continuous resilience to help organizations protect critical infrastructure as attackers increasingly operate at machine speed.

Read More: Thales Unveils a Global Framework to Protect Critical Organisations from Frontier AI Attacks

The post Thales Unveils Global Framework to Protect Critical Infrastructure Against Frontier AI Threats appeared first on ITDigest.

The rise of generative artificial intelligence and niche automated scanning technologies has revolutionized the nature of the cyber-criminal adversary. Today’s threat actors target application software faster than ever by deploying AI algorithms to disassemble executable applications, identify exploits based on zero-day software flaws, and circumvent licensing constraints at an exponentially increased rate. Thales’s Sentinel Envelope Plus tackles this emerging threat by layer-injecting multi-dimensional anti-tamper strategies into application executables, without need for source-code access or developer build-interruption.

Fortifying Application Binaries Against Automated Threat Vectors

Sentinel Envelope Plus operates as a sophisticated security wrapper around application executables and dynamic libraries. By integrating state-of-the-art code transformation techniques, the platform neutralizes static and dynamic analysis attempts conducted by AI-driven automated decompilers and reverse engineering frameworks.

Also Read: Abnormal AI Expands AI Security Suite Built on Behavioral Security Platform

Key technical capabilities and architectural features delivered by Thales Sentinel Envelope Plus include:

Advanced Code Obfuscation: Transforms executable code and control flow logic into complex structures that resist automated static analysis and AI pattern recognition.

Anti-Debugging & Anti-Hooking: Detects and blocks active debugging tools, memory inspection techniques, and malicious process injection attempts in real time.

Source-Code Independent Deployment: Protects compiled binaries directly, allowing software vendors to secure legacy applications and third-party modules without modifying source code.

Cryptographic Integrity Verification: Continuously verifies application memory states and runtime integrity to prevent unauthorized patching, code modification, or license manipulation.

Cross-Platform Compatibility: Delivers unified binary protection across desktop, mobile, cloud, and embedded software environments with minimal performance overhead.

Safeguarding Commercial IP and Software Monetization Streams

As strong safeguards are built against AI-accelerated reverse engineering, Thales makes it possible for CISOs and CTOs, with commercial software vendors, to defend information that matters most. Sentinel Envelope plus guarantees protection of secret algorithms, data structures and licensing techniques intact, reliably holding down corporate revenues and reputation in the ever more contaminated virtual world.

The post Thales Debuts Sentinel Envelope Plus to Defend Software Against AI Threats appeared first on ITDigest.

With the rapid adoption of artificial intelligence and agentic tools by global corporations as part of their operational processes, the threat actors are using the very same technologies to create context-aware attacks. Signature-based email gateways and other security filters often miss these kinds of attacks. Abnormal AI’s expanded suite directly addresses this expanding attack surface by applying baseline human behavioral analytics to continuously evaluate anomalous activity across enterprise communication channels.

Harnessing Behavioral AI to Block Advanced Cyber Threats

In contrast to static security systems that employ historical data about threat signatures or malicious IP addresses, the design of Abnormal AI provides the platform with an overall view of normal human activities inside the enterprise. The detection of anomalies is done by analyzing employees’ communications, identities, vendors, and sign-in activity and revealing suspicious changes that could be signs of account takeover, impersonations, or VEC.

Also Read: PDI Expands Security Portfolio with AI Prompt Protection to Combat Shadow AI 

Key technical capabilities delivered through the expanded AI Security Suite include:

Autonomous Threat Remediation: Automatically identifies and quarantines malicious emails, links, and attachments in real time, reducing manual investigation backlogs for security operations center (SOC) analysts.

AI-Generated Attack Defense: Detects complex, highly personalized phishing attempts generated by large language models (LLMs) and automated scripting tools.

Cross-Platform Collaboration Protection: Extends real-time behavioral monitoring beyond corporate email into cloud collaboration environments, including Microsoft Teams, Slack, Zoom, and enterprise cloud storage services.

Vendor Risk Telemetry: Analyzes compromised third-party vendor accounts and supply chain communication channels to prevent external invoice fraud and lateral movement.

Context-Aware Incident Response: Equips security leads with detailed behavioral risk scoring, anomaly explanations, and automated incident response workflows.

Elevating Security Operations and Mitigating Enterprise Risk

By incorporating deep behavioral intelligence with automated threat response, Abnormal AI empowers the CISO, security architect and IT lead to foodproof enterprise defenses against emerging attack vectors. It is designed to remove the administrative nightmare for security teams, defend high value corporate data assets and provide distributed workers modern cloud tools functionality without any compromise in security posture.

The post Abnormal AI Expands AI Security Suite Built on Behavioral Security Platform appeared first on ITDigest.

Also Read: Keeper Security and SailPoint Partner to Automate Privileged Access Governance 

“ISOC gives customers an opportunity to improve how they run security operations and prepare for teams and AI agents to work from shared data and context. Customers need a practical path from deployment to day-to-day operations, which is exactly where BlueVoyant’s expertise comes in – we don’t just help stand it up, we help run it”. Highlighting the partner ecosystem’s role in driving enterprise value, Rob Lefferts, Corporate Vice President of Microsoft Threat Protection, added: “Our security partners like BlueVoyant play a critical role in helping customers bring these capabilities together, operationalize them in their environments, and turn Microsoft’s security innovation into meaningful outcomes. ISOC is built for agentic security, and the combination of technology and operational experience will be essential to helping customers realize its full value”. Ultimately, this deployment framework empowers enterprise SOCs to optimize financial overhead, eliminate security data silos, and establish governance controls as security operations transition into the era of agentic AI.

Read More: BlueVoyant Launches Solution to Accelerate Agentic Security Adoption of Microsoft’s New Integrated Security Operations Center

The post BlueVoyant Launches Solution to Accelerate Adoption of Microsoft’s Integrated SOC appeared first on ITDigest.

With the enterprise adoption of generative AI tools progressing rapidly, employee are constantly performing sensitive corporate database, confidential operational and customer details into unauthorized public AI tools to get their daily work done. Unauthorized prompt entry poses grave chance of data exposure, regulatory slip-ups and IP erasure. PDI’s AI Prompt Protection directly addresses this expanding threat vector by inspecting, filtering, and governing outgoing prompt traffic across enterprise networks in real time.

Real-Time Prompt Inspection and Automated Data Loss Prevention

PDI’s AI Prompt Protection integrates natively into existing enterprise security stacks and managed network solutions, applying automated policy enforcement at the network boundary. The service scans outbound data streams to identify sensitive data signatures—such as personally identifiable information (PII), payment card industry (PCI) data, confidential intellectual property, and proprietary operational logs—before prompts reach external AI servers.

Also Read: F5 Partners with Omnissa to Safeguard High-Performance Digital Workspaces

Key technical and operational capabilities of PDI AI Prompt Protection include:

Shadow AI Visibility & Discovery: Identifies unauthorized generative AI applications and browser extensions operating across enterprise networks.

Inline Data Loss Prevention (DLP): Automatically redacts or blocks sensitive corporate records, customer PII, and trade secrets embedded within outgoing AI prompts.

Granular Policy Enforcement: Allows IT and security directors to define role-based access rules, restricting public AI usage while establishing safe pathways for sanctioned tools.

Continuous Threat Intelligence & Telemetry: Monitors for malicious prompt injection attacks, malware links, and suspicious data exfiltration patterns.

Centralized Compliance Audit Logs: Maintains comprehensive, auditable tracking logs to support regulatory reporting and internal governance frameworks.

Safeguarding Enterprise Assets in an AI-Driven Landscape

The provision of prompt filtering through automated means and managed security services by PDI Technologies gives the ability to CISOs, CIOs, and IT operations managers to balance productivity and risk management. This gives organizations running multiple sites and enterprise brands the ability to see the need for adoption of AI technology in order to remain compliant and protect their assets from any leakages.

The post PDI Expands Security Portfolio with AI Prompt Protection to Combat Shadow AI appeared first on ITDigest.

Next, to tackle this vital operational friction, data security, privacy, and compliance leader BigID has revealed the launch of AgentIQ, an agentic automation layer purpose-built for data security, AI governance, and compliance workflows:

By coupling BigID’s deep data discovery engine with autonomous, reasoning-capable agents, AgentIQ converts passive data inventory into active, governed execution enabling security and compliance teams to remediate data risks, enforce privacy guardrails, and govern AI data pipelines at machine speed.

The News: Agentic Reasoning for Data Remediation, Privacy, and AI Guardrails

The technological milestone behind BigID’s AgentIQ lies in moving enterprise data governance past passive dashboard monitoring toward autonomous, agent-driven execution. Instead of using fixed and predetermined set of rules and manual human transfers, AgentIQ uses domain-specific agents who are able to comprehend context, plan remediation actions, and implement security policies right within the corporate data stack.

Also Read: GitLab 19.4 Bridges Agentic Execution and Cost Efficiency in DevSecOps 

Key technological and operational capabilities delivered by AgentIQ include:

Autonomous Remediation & Data Cleanup: Automatically flags, quarantines, or revokes exposed sensitive data such as PII, intellectual property, or cryptographic keys found across unstructured cloud repositories, databases, and SaaS tools.

Continuous AI Governance & Data Lineage Guardrails: Audits data fed into corporate large language models (LLMs) and agentic workflows, enforcing strict data minimisation and preventing unverified or sensitive datasets from polluting AI training pipelines.

Automated Privacy Compliance Execution: Streamlines complex privacy workflows including Data Subject Access Requests (DSARs), consent verification, and cross-border data transfer audits by autonomously tracing data lineage and executing policy checks across connected systems.

Policy Enforcement & Access Control Orchestration: Integrates with existing identity and security ecosystems (such as cloud Access Management and Security Operations Center tools) to dynamically adjust permissions based on real-time data sensitivity scores.

Transforming Enterprise Cybersecurity, Data Privacy, and AI Governance

The launch of AgentIQ signals a fundamental structural evolution across the Enterprise Cybersecurity & Data Privacy and AI Governance & Compliance Tech sectors.

The Obsolescence of “Alert-Only” Data Security Tools
For years, DSPM and DLP vendors competed to see who could scan and map the most data assets. But enterprise CISOs and CPOs faced intense “remediation lag”, where tools returned thousands of risk alerts but lacked enough head count in your security team to manually fix over-permissioned buckets or misplaced sensitive files.

BigID’s announcement accelerates the sunset of alert-only data security platforms. The cybersecurity industry is entering an agentic remediation era. Data protection platforms are no longer evaluated merely on their scanning breadth, but on whether their AI agents can autonomously fix security posture flaws, enforce encryption, and eliminate policy violations without human intervention.

Establishing Real-Time Data Guardrails for the AI-Driven Enterprise
AI governance is now not just an abstract concept for enterprise organizations since they use AI agents to perform their activities, and there is a real risk of using AI without proper regulation in the organization. AI models might consume sensitive customer records, violate global privacy laws, or produce irrelevant outputs on outdated data.

By embedding agentic guardrails directly into the data layer, BigID sets a new software baseline for AI Governance Tech. Compliance tools must now act as active gatekeepers continuously monitoring data inputs, validating lineage, and guaranteeing that AI applications operate strictly within authorized, compliant datasets.

Broad Operational Impact on Enterprise Businesses Operating in the Cybersecurity and Compliance Sectors

For enterprise CISOs, CROs and Data Governance directors monitoring trickier regulatory landscapes, the immediate managerial benefit of a agile data security architecture is:

Radical Reduction in Risk Remediation Timeframes: through automation of isolating sensitive data, and revoking access, risk windows that traditionally took weeks, can be reduced to seconds, effectively shielding companies from devastating data breaches.

Reduced Total Cost of Regulatory Compliance: Autonomous handling of privacy requests, data audits, and consent verification replaces costly manual legal and administrative effort on multi-regional privacy policies.

Safe Acceleration of Enterprise AI Initiatives: Set up validated data guard rails provide leaders of technology with assurance to use internally developed generative AI applications without endangering data leakage or regulatory breach.

Reclaimed Security Bandwidth: By offloading the day-to-day classification of data, policy enforcement, and audit logging to autonomous agents, senior cybersecurity analysts can spend their time on active threat hunting and strategic defense.

Transitioning from passive data monitoring to independent agentic governance of data enterprise organizations will be able to protect their most sensitive data assets, stay defensible on regulatory compliance, and scale AI across high-density hybrid clouds.

The post BigID Launches AgentIQ to Bring Agentic Automation to AI Security, Privacy, and Compliance appeared first on ITDigest.

Also Read: Elastic Integrates OpenAI GPT-Cyber Models into Elastic Security 

Such a combination is intended to assist organizations in implementing least- privilege policies, maintaining compliance on a continuous basis and complying with the latest rigorous system like NIST SP 800-53 Rev. 5, all without affecting regular administrative workflows. Commenting on the integration’s impact, Darren Guccione, CEO and Co-Founder of Keeper Security, stated: “Managing privileged access and identity governance separately creates security blind spots and compliance headaches. By connecting KeeperPAM with SailPoint, we are helping organizations automate access controls, enforce least privilege and maintain continuous compliance across human and non-human identities without adding friction to IT operations.” Ultimately, this partnership provides enterprise security teams with a centralized, scalable access management control plane that closes governance gaps, lowers administrative overhead, and accelerates overall operational resilience.

Read More: Keeper Security and SailPoint Partner to Automate Privileged Access Governance

The post Keeper Security and SailPoint Partner to Automate Privileged Access Governance appeared first on ITDigest.

Moving towards distributed work environments has exposed companies to IT and cybersecurity challenges. In this way, a joint company solution will eliminate such issues and bring down both application delivery controller (ADC) and endpoint management in one product. It guarantees safe, fast access to work-critical apps in any location, cloud, hybrid, premises.

Unifying Zero-Trust Security and Application Delivery

The technology integration enables enterprise organizations to transition from fragmented endpoint and network controls toward a unified application access architecture. By pairing F5 BIG-IP and F5 Distributed Cloud Services with Omnissa Horizon and Workspace ONE platforms, the solution automates continuous policy enforcement and dynamic traffic optimization.

Also Read: JumpCloud Expands IAM Capabilities to Secure Agentic Workforce 

Key operational capabilities delivered through the F5 and Omnissa partnership include:

Automated Zero-Trust Access Control: Enforces continuous identity, device health, and posture verification before granting user access to sensitive enterprise applications.

Optimized Digital Experience: Leverages intelligent traffic management to reduce latency and enhance application delivery performance for remote employees.

Unified Workspace Management: Centralizes network control and endpoint administrative workflows into a single operational architecture, reducing IT management overhead.

Proactive Security Governance: Protects distributed endpoints and cloud infrastructure against emerging cyber threats, data leakage, and unauthorized access attempts.

Driving Operational Efficiency across Distributed Enterprises

By embedding F5’s application security framework natively into Omnissa’s digital workspace suite, the joint solution empowers Chief Information Officers (CIOs) and Chief Information Security Officers (CISOs) to simplify infrastructure management. The consolidated architecture allows enterprise teams to lower operational maintenance costs, maintain strict regulatory compliance, and support distributed workforce productivity without compromising network resilience.

The post F5 Partners with Omnissa to Safeguard High-Performance Digital Workspaces appeared first on ITDigest.

The National Cyber Security Centre (NCSC) has warned that AI is accelerating offensive cyber activity, enabling threat actors to move faster, operate at greater scale and reduce the effort required to conduct attacks. For security leaders, this shifts the conversation beyond AI governance and into a more pressing question: can SOCs detect, investigate and respond at machine speed when adversaries increasingly can?

AI Is Exacerbating an Existing SOC Problem

Many organisations already struggle to manage the volume of alerts generated by their security tools. AI-powered attacks threaten to make this challenge significantly worse.

As attackers automate vulnerability identification, phishing campaigns and attack planning, security teams can expect growing volumes of suspicious activity and a greater number of security events requiring investigation. Yet most SOC analysts remain constrained by manual workflows that require them to pivot between multiple tools, gather evidence from disparate systems and spend valuable time performing repetitive investigative tasks.

The challenge facing many organisations is not a lack of visibility. It is a lack of capacity.

Adding more telemetry sources, deploying additional security tools or creating more alerts provides limited value if analysts do not have the time to investigate the alerts they already receive. Without addressing operational efficiency, organisations risk creating larger backlogs while reducing their ability to identify the threats that matter most.

Also Read: How Asset Tokenization Is Changing the Way Real-World Assets Are Owned 

More Alerts Are Not the Answer

When organisations consider strengthening their cyber defences, the instinct is often to invest in additional security tools. New platforms promise greater visibility, more telemetry and broader threat detection capabilities. In theory, this should improve security outcomes.

In practice, however, more data does not automatically translate into better security.

Most security teams already receive far more alerts than they can realistically investigate. Every new detection capability typically generates additional signals that require triage, analysis and validation. Without sufficient capacity and expertise, organisations simply create more work for already stretched teams.

This challenge has become particularly acute as environments grow more complex. Modern organisations operate across cloud platforms, hybrid infrastructure, remote work environments, third-party ecosystems and increasingly AI-enabled applications. Each layer generates new data sources and new alerts.

From a board perspective, this creates a dangerous illusion of control. Large volumes of security data may suggest comprehensive visibility, but if analysts cannot effectively assess and investigate the alerts they receive, significant risks can still be missed.

The question is no longer whether the organisation has enough data. The question is whether it has the operational capability to turn that data into meaningful security outcomes.

The Need for Evidence-Based Investigations

As the risks of AI attacks rise, scrutiny on security teams continues to increase in turn. Following a significant incident, organisations must be able to demonstrate not only what decisions were made, but why they were made. Regulators, auditors and boards are increasingly expecting clear evidence trails that show how threats were assessed, investigated and escalated.

This places additional pressure on SOC teams already struggling with expanding workloads. Analysts need to move quickly, but they also need to be thorough. Balancing speed with accuracy is becoming one of the defining challenges of modern security operations, particularly as AI enables attackers to launch and adapt campaigns at a pace that traditional investigation processes were never designed to match.

AI Central to Security Operations

The same technology accelerating attackers can also help defenders regain the advantage.

The most effective use of AI within an agentic SOC is not to replace analysts, but to amplify them. AI analysts within SOCs can investigate alerts, collect evidence, correlate activity across multiple systems and summarise findings in minutes rather than hours. This allows analysts to focus on higher-value activities, applying context, business knowledge and judgement to response decisions.

Rather than acting as standalone tools, coordinated AI agents can work across the investigation lifecycle, continuously gathering information, assessing activity and surfacing evidence-backed conclusions. By doing so, they reduce the operational burden on analysts while improving consistency, coverage and responsiveness.

In an environment where attackers increasingly operate at machine speed, human-only SOC models are becoming increasingly difficult to sustain.

AI Risk Demands an Operational Response

For boards, AI risk should no longer be viewed solely through the lens of governance and compliance. While policies, controls and oversight remain important, they do little to address the operational realities facing security teams tasked with defending the organisation.

The real question is whether the SOC is equipped to respond to AI-accelerated threats with the same speed and scale at which they emerge.

Boards need confidence that critical threats are identified quickly, investigations progress efficiently and decisions are supported by robust evidence. Delivering that confidence will require a new operating model in the agentic SOC, in which analysts handle the heavy lifting of investigation while experts retain responsibility for judgement, escalation and response.

As AI helps attackers to enact increasingly sophisticated, frequent, and scalable cyberattacks, it must also transform cyber defence – far quicker than we’re currently seeing. The organisations that successfully combine human-led expertise with AI-driven security operations will be best placed to keep pace with an increasingly automated threat landscape.

The post AI Risk Is a Significant Security Operations Challenge appeared first on ITDigest.

Rohde & Schwarz positions the QPS Walk500 precisely in this application area. The scanner was specifically designed for event security with high foot traffic. People pass through the security checkpoint without stopping and without needing to remove their coats or other outerwear. With a capacity of up to 750 people per hour, the new QPS Walk500 enables efficient and reliable security checks.

Its combination of millimeterwave technology and AI-based algorithms makes the reliable detection of a wide variety of materials possible, including metals, plastics, liquids, granules, organic materials and ceramics. It can also detect potentially dangerous objects that cannot be detected by conventional metal detectors.

Also Read: Progress needs proof: Rohde & Schwarz showcases its trailblazing test solutions at EuMW 2026 in London 

Automatic threat detection precisely locates suspicious objects on a neutral avatar. This allows security personnel to immediately identify where a targeted follow-up inspection is necessary, saving time and shortening the interaction with the person being screened. The additional optional hand-masking feature allows people to hold everyday items such as cell phones, wallets and keys in their hands without interfering with the scanning process. This makes security checks more efficient and helps maintain the flow of people even when visitor traffic is heavy.

The QPS Walk500 stands out for its lightweight design, offering a flexible alternative to conventional access control systems. Its open design allows for an intuitive and welcoming security screening process, while audible and visual cues make it easy to use. With the QPS Walk500, Rohde & Schwarz is expanding the QPS Walk portfolio to include a compact model for applications requiring the highest throughput.

The post Rohde & Schwarz launches new security scanner for large events at Security Expo 2026 appeared first on ITDigest.