In his announcement, Gallegos highlighted his enthusiasm for collaborating with a talented team and contributing to the growth of Sophos’ MSSP partner ecosystem. His new position will focus on supporting the company’s MSSP program as it looks to strengthen its partner network and expand its market presence across the region.

The MSSP model plays an important role in the cybersecurity industry by enabling service providers to deliver managed security capabilities to organizations that need continuous protection against evolving cyber threats. As businesses increasingly rely on external security expertise, strong partnerships and scalable service delivery programs remain important to the growth of the managed security market.

Also Read: James Serassio Joins Glow as Head of Strategic Initiatives 

Gallegos’ appointment comes at a time when cybersecurity providers are focused on expanding partner-led business models and helping organizations address increasingly complex security requirements. His role at Sophos will place him within this partner-focused growth strategy, with an emphasis on scaling the MSSP program across the Americas.

The announcement marks a new chapter in Gallegos’ professional journey. By joining Sophos in this leadership position, he will contribute to the company’s efforts to develop its MSSP channel and strengthen relationships with service provider partners.

His appointment also reflects the continued importance of channel partnerships in delivering cybersecurity solutions to businesses across different industries.

The post Victor Gallegos Joins Sophos as MSSP Partner Director for Americas appeared first on ITDigest.

Bluehost launched its AI Builder, a purpose-built platform that lets small business owners create professional websites and working business applications simply by describing what they need, without requiring coding, technical expertise, or a large development budget.

Announced during Bluehost ELEVATE, the company’s inaugural small business growth summit, AI Builder brings website creation, business applications, hosting and human expertise together in one platform built for entrepreneurs.

The Bluehost AI Builder is purpose-built to help small businesses create the applications and tools they need to operate and grow from appointment booking systems and customer relationship management (CRM) to customer portals and internal operations dashboards. Combined with seamless hosting, domains and 24/7 human support, it brings creation and business operations together in one experience.

“For decades, the internet has helped small businesses get online. AI is creating a much bigger opportunity, helping them actually run and grow their businesses,” said Sachin Puri, Chief Executive Officer of Newfold Digital, parent company of Bluehost. “A business owner shouldn’t need a team of developers or a large budget to turn an idea into reality. With Bluehost AI Builder, they can go from an idea to a working website or application in minutes, with the hosting, business tools and human expertise to support them as they grow. Our ambition is simple: give every entrepreneur the tools and confidence to turn an idea into a thriving business.”

From an Idea to a Live Website or Application in Minute

Bluehost AI Builder simplifies the entire website and app creation process, allowing business owners to focus on their business rather than the technical work behind their online presence. Users can describe their vision in plain language, upload their own logos, photos and business documents, or share a link to a website they admire for design inspiration. The AI then asks a few clarifying questions, builds an initial version in minutes and allows users to watch as their website or application takes shape in real time.

Also Read: GitLab Unveils the Governed Software Factory to Secure Autonomous AI Pipelines

Once the initial build is complete, users can continue refining their experience through a simple chat interface, requesting updates, new pages, content changes, and additional functionality without navigating complicated editing tools or writing code. When ready, users can publish their creation to Bluehost hosting with one click, using a Bluehost subdomain or their own domain.

Key Features include:

• From prompt to published: Describe a website or app in plain language, including portfolios, blogs, booking sites and customer portals, then publish it to Bluehost hosting with one click.
• Built around your business: Upload logos, photos and business documents, then refine designs and content through simple conversation with a live preview.
• Business tools built in: Create booking systems, invoices, databases and member portals, complete with user accounts, so small businesses can run key processes directly within AI Builder.
• Ready to be discovered: Automatically generate search-friendly pages, titles, descriptions and image alt text, and buy, transfer or connect a domain without leaving the builder.
• Built to grow with you: Add websites, applications and team members as business needs evolve, all within one Bluehost account, backed by reliable hosting and 24/7 support.

Build with AI. Host without consuming AI credits.

Bluehost AI Builder offers a free starting point, allowing entrepreneurs to build and publish on a Bluehost subdomain without a credit card. Paid plans include a custom domain and hosting. AI credits are used for building and editing, not hosting so a published website can stay online even when building credits run out, subject to the plan’s hosting terms.

Real people behind the technology, 24/7

While AI makes building easier, small business owners still need support from people they can trust. AI Builder is backed by Bluehost’s 24/7 human support, giving customers access to real experts who can help with their websites, applications, domains, email and hosting, during the build and long after launch.

Source: PRNewswire

The post Bluehost Launches AI Builder to Create Websites and Apps in Minutes appeared first on ITDigest.

Microsoft’s Digital Defense Report 2026 found that exposed cloud workloads faced attacks within an average of just 5.3 hours. This means there is no time for painstakingly slow investigations or disconnected teams.

AI in network and security operations is bringing a new perspective-empowering enterprises to proactively predict anomalies, correlate threats, and speed up response. Here we take a closer look at the architecture, deployment, and protection of this change.

The Catalysts Driving NOC and SOC Convergence

Traditional Network Operations Centers (NOCs) and Security Operations Centers (SOCs) often work in separate environments. NOC teams focus on network availability, performance, and uptime, while SOC teams monitor threats, investigate suspicious activity, and protect enterprise systems. This division creates blind spots. It might seem like just another performance degradation to the NOC, but the SOC is actively investigating a security alert unaware that it is the same problem that’s affecting the network. When teams have siloed tools and minimal context, investigations take longer and real issues go unrecognized.

Today’s nexus of network disruption and security threats may be making the distinction less and less tenable. For example, a DDoS event can generate enough network noise to mask the efforts of an attacker trying to exfiltrate data. Or an innocuous network configuration error can create an attack surface that hackers may exploit. AI empowered network and security operations bridge the gap by consolidating network performance and security events.

This means a common telemetry layer. Integrate logs, Net Flow, SNMP, EDR telemetry etc. into one operational data fabric in the 9 June 2016 Google Security Operations update, a model is described that brings together visibility across endpoints, on-premises firewall, identity system, network equipment and custom logs into one shared, tangible, attack story. With this context, teams can know what’s happening and why.

Also Read: Securing AI Agents in Enterprise IT Environments: Best Practices for Managing Security Risks 

Core Architectural Pillars of AI-Enabled Operations

There are three capabilities to AI-powered network and security operations. Predictive monitoring detects anomalous behavior, threat correlation correlates disparate signals and automated response empowers teams to contain before it spreads.

Pillar 1. Predictive Analytics and Dynamic Baseline Monitoring

The extensive training of the AI that occurs in the ‘un-supervised machine learning’ phase defines normal behavior for network traffic, protocol usage, and bandwidth utilization. As these baselines are constantly monitored, the AI can alert teams to slight variations in usage that traditional threshold-based tools might overlook. This enables teams to head off congestion as it begins to develop.

Pillar 2. Automated Noise Reduction and Threat Correlation

AI joins isolated telemetry from firewalls, identity services, endpoint solutions and cloud activity logs to create a single attack story. Connecting the dots enables security analysts to understand attacker TTPs and enables targeted investigations.

Amazon Guard Duty’s AI investigations preview, which was announced on June 23, is an example. Reviewing hit details, activity over the last 90 days, affected resources, and attacker indicators using threat intelligence and knowledge graphs and provides confidence-scored analysis, attack labels, evidence, and recommended actions.

Pillar 3. Closed-Loop Self-Remediation and SOAR Integration

Security orchestration tools can kick off actions like endpoint isolation, VLAN movement, and dynamic firewall rule creation. AI-driven network and security operations can speed up these activities, but humans should still be involved in approving any changes that might impact vital infrastructure.

Comparative Analysis of Legacy and AI-Enabled NetSecOps

AI-powered network and security operations transform the process of identifying, analyzing, and handling security incidents. The contrast between both is made evident through major operations aspects.

AI copilots provide another level of support for, particularly, Tier-1 analysts conducting repetitive investigations. Analysts can ask questions in natural language, obtain incident context, and troubleshooting directions without switching screens. They can also have copilots create runbooks for common, repeat problems so analysts don’t have to do this manually. These functions can be very helpful, but AI depends on well-curated data, and then validated by a human. AI can enable quick decisions, but also cause operational risk when it makes poor suggestions.

Enterprise Implementation Framework for Moving from Reactive to Autonomous Operations

Organizations utilizing AI for network and security operations need to build capabilities gradually. Putting resources into automation without having data and process infrastructure in place may expose organizations to more risks than benefits.

Phase 1. Data Normalization and Ingestion

Begin with network and security telemetry: Normalize network metrics, VPC logs, and syslog feeds. Make the signals from various sources comparable and useful. If this isn’t done, your AI models may produce false positives, or not connect the dots between events.

Phase 2. Supervised Triage and Assistive AI

Assist analysts with incident context, incident summaries and troubleshooting recommendations. In this case, analysts would review and approve AI recommendations before acting. This helps build confidence and uncovers data quality issues and model deficiencies.

Phase 3. Governed Automation with Human Oversight

Once workflows become reliable, enterprises can automate routine Tier-1 triage and predefined responses. However, changes to core infrastructure should require human authorization.

AWS’s Automated Security Response AI Toolkit, published on August 31, illustrates this approach. AWS states that the guided prompts along with the intrinsic safety measures cut down the time for developing custom remediation solutions from days/weeks to just a few hours. AWS works in conjunction with Amazon Inspector, GuardDuty, and Macie.

Governance, Security, and Guardrails for Operations AI

Increased automation results in increased attack surface. Data poisoning can pollute the data that trains/operates models and adversarial prompt injection can trick operational LLMs into recommending harmful tasks. Model drift is an additional risk since nagging model changes in behavior can erode the previous model’s ability to make accurate predictions. For business, it requires regular monitor of models, controlled agent access and approval from human before going ahead with a risky action.

Auditability is important too. All decisions made by automation, all modifications of permissions, all remediation actions need to generate a record on ITSM tools like Jira or Service Now. This will provide security teams the information they need to facilitate any investigation.

New on Nov 5, Dynamic Permissions from Microsoft Let Agents Conduct High-Impact Tasks: Dynamic permissions are task scoped agent permissions only available while a specific task is executing. Dynamic Agent Risk recalculates access when behavior or context change. Dynamic Conditional Access can limit resources or escalate for human approval.

Conclusion and Strategic Next Steps

Autonomy of network and security operations through AI technologies is becoming crucial as environments become more complicated and threats evolve faster. However, autonomy without governance may transform a good efficiency solution into a significant risk. CIOs and CISOs need to start with the consolidation of network and security telemetry and subsequent introduction of AI copilot functionality that will help analysts. Only when they are certain about the quality of data, proper response processes and access control measures, CIOs and CISOs can consider closed-loop execution.

The post AI-Enabled Network and Security Operations: How Enterprises Are Transforming IT Management and Cyber Defense appeared first on ITDigest.

Enterprise technology is moving beyond AI experimentation toward large-scale deployment, bringing new demands for specialist expertise, secure infrastructure and tighter governance. This week’s developments from EXL’s acquisition of Aimpoint Digital to new controls for AI agents and quantum-ready security show how companies are reshaping their technology strategies. At the same time, the growing use of autonomous browser agents is creating attack surfaces that traditional cybersecurity measures may not adequately address.

Three Developments Worth Watching

• EXL acquires Aimpoint Digital: The deal strengthens EXL’s ability to help enterprises move AI initiatives from experimentation into production.
• Citrix addresses agentic AI governance: New workspace and access controls recognize AI agents as a growing category of enterprise users requiring oversight.
• IonQ expands its security portfolio: The completed Elisity acquisition brings zero-trust capabilities into IonQ’s broader quantum security strategy.

Together, these moves point to a new enterprise priority: scaling AI requires not just more capable models, but the infrastructure, access controls and security architecture to manage them responsibly.

Technology News

EXL Acquires Aimpoint Digital to Expand AI Capabilities

EXL has acquired Aimpoint Digital, adding approximately 250 data and AI specialists to its capabilities across analytics, engineering and enterprise AI. The acquisition strengthens its ability to support clients through the full AI lifecycle, from strategy and development to deployment and managed operations.

The strategic value lies in addressing the persistent gap between successful AI pilots and production-scale adoption. Combining specialist talent with EXL’s global delivery infrastructure could help enterprises operationalize AI across complex workflows. It also intensifies competition among IT services providers to offer measurable business outcomes rather than isolated AI projects.

Governing the Non-Human Workforce: How Citrix’s Agentic Workspaces and Governance Framework Reshape Enterprise AI

Citrix is advancing agentic workspace capabilities through SecurSpaces and SecurAccess, designed to give AI agents controlled environments and governed access to enterprise resources. The approach includes isolated workspaces, credential management, access controls and session-level oversight.

As agents begin performing tasks across business applications, organizations face a new identity and governance challenge: software is no longer simply executing predefined scripts but acting with permissions that can expose sensitive systems. Citrix’s model reflects a shift toward treating agents as non-human workforce members, with security boundaries, accountability and lifecycle controls comparable to those applied to employees.

Lumen and Microsoft Expand AI Collaboration

Lumen and Microsoft have expanded their strategic collaboration to support enterprise AI infrastructure, combining Lumen’s network capabilities with Microsoft’s cloud ecosystem. The partnership includes expanded connectivity and go-to-market initiatives intended to help organizations move data more efficiently across AI environments.

As enterprises deploy retrieval-augmented generation and autonomous agents, network performance and reliable data access become central to AI effectiveness. The alliance highlights how AI competition extends beyond chips and models to the underlying connectivity that links distributed data, cloud platforms and applications. Network providers are increasingly becoming strategic participants in enterprise AI delivery.

CrowdStrike Integrates Lovable Workspaces With Falcon Shield

CrowdStrike and Lovable are collaborating to bring Lovable-created applications and workspaces into CrowdStrike’s Falcon Shield security environment. The integration is designed to help organizations discover applications, identify exposed secrets and credentials, and strengthen visibility and governance as more employees build software using AI-powered development tools.

The partnership addresses a growing blind spot in enterprise security: applications can now be created faster than traditional IT approval and review processes can keep pace with. Citizen development expands innovation, but also increases the risk of unmanaged software and exposed data. Security platforms will need to extend oversight closer to where applications are created, not simply where they are deployed.

IonQ Completes Elisity Acquisition to Unite Security Technologies

IonQ has completed its acquisition of Elisity, bringing the company’s identity-based zero-trust security capabilities into IonQ’s broader quantum security portfolio. The combination is intended to connect enterprise access controls with technologies such as post-quantum cryptography and quantum key distribution.

The deal signals IonQ’s ambition to build a broader security business around the anticipated transition to quantum-resistant systems. For enterprises, the challenge is not only preparing encryption for future quantum threats but also managing access across increasingly complex networks today. The opportunity will depend on how effectively IonQ integrates these capabilities into deployable, interoperable security offerings.

Featured Article

Prompt Injection: Why the Next Big Hack Will Arrive as an Ad

Ali Hayat explores how targeted advertising could become a delivery channel for prompt injection against AI browser agents. Drawing on Citizen Lab’s AdFection investigation, he explains how ad auctions can single out devices while malicious instructions hidden in page content could manipulate agents with access to sensitive accounts. The article argues that organizations must restrict agent permissions, monitor activity and treat advertising content as untrusted input.

ITDigest Weekly Observations

This week’s developments reveal two sides of enterprise AI expansion. Organizations are investing in the talent, networks and platforms needed to put AI into production, while security providers are racing to govern the agents and applications that accompany adoption. The emerging risk is that AI systems can inherit broad access while interacting with untrusted content—including advertising. As agentic technology spreads, will enterprises build security and governance into deployment from the outset, or continue treating them as controls to add after adoption?

The post ITDigest Weekly Roundup: Enterprise AI Scales Up as Security, Infrastructure and Governance Take Priority appeared first on ITDigest.

Covering identity threat detection, endpoint defense, security information and event management (SIEM), and behavioral awareness training, the expanded platform enables organizations to close exploitable attack surfaces and sever adversary pathways at machine speed.

Tapping Into Ecosystem-Wide Scalability for Delivering “Herd Immunity” to Fleets

Modern cyber-attacks are enabled by toolkits that automate processes across cloud infrastructure and endpoints within minutes. In order to combat against such fast-paced attacks such as identity theft, session hijacking, and ransomware attacks from remote locations, it becomes important for any defense system to provide automated response solutions.

This is where Huntress can leverage the intelligence gained from its operating footprint that consists of over 300,000 companies, 17 million identities, and 6 million secured endpoints. If there is any sign of malicious activity occurring on one system, it translates them into protection policies for all the fleets. With this comprehensive information coupled with continuous human verification of the same from its 24/7 AI-centric Security Operations Center (SOC), Huntress can neutralize the threat.

Also Read: CrowdStrike to Acquire Automated AI Security Testing Pioneer Dreadnode to Secure Agentic Systems Before Deployment 

Key technical enhancements and product updates across the platform include:

Adversary Infrastructure Blocking (Managed ITDR): Converts confirmed attacker hosting, relay, or proxy nodes into proactive defense mechanisms. When an identity exploit is confirmed, the platform systematically generates and applies blocking Conditional Access policies across all participating Microsoft 365 environments on the same business day, blocking threat actors at sign-in.

Malicious Service Principal Neutralization (Managed ITDR): After researching the compromise of vendors in supply chain, this functionality will watch out for service principal authentications, notify administrators of incidents in structured form, and block all compromised non-human identities. The module is available for organizations that have license of Microsoft Entra ID P1 level or above and will provide more insight on permissions of enterprise applications without manual partner intervention.

Lookback Tenant Audits (Managed ITDR): Searches for 180 days of pre-onboarding authentication logs of newly created Microsoft 365 tenants. The engine reveals concealed IoCs of token theft, adversary-in-the-middle (AiTM), compromised browsers, and compromised data center logins, stopping any active sessions right away on the first day.

Brute Force Sentry (Managed SIEM): Detects ongoing brute-force attacks against Windows RDP, RD Gateway, RDWeb, and Linux SSH connections. Through cross-correlating failed authentication attempts and successful authentication events, the engine will allow visibility into the exposed infrastructure and targeted accounts.

In-the-Flow Defense Drills (Managed SAT): Connects endpoint detections directly with real-time end-user training. When Managed EDR neutralizes an execution attempt such as a ClickFix exploit the system triggers an immediate contextual notification guiding the employee through a brief training module on that specific tactic, transforming an active intervention into a preventative habit.

Remote Ransomware Disruption (Managed EDR): Counters unauthorized lateral ransomware attacks that launch from unmanaged, compromised devices on the same internal network. Using Huntress Ransomware Canaries, Managed EDR detects early malicious encryption behavior and immediately terminates network communications between the unmanaged threat vector and protected devices.

Identity Posture Assessment (Managed ISPM): Delivers on-demand posture evaluations for Microsoft 365 tenants benchmarked against the Huntress Identity Security Framework, pairing gap analysis with automated configuration rollouts.

Unfiltered Industry Statements and Executive Commentary

“Defending against threats moving at machine speed requires knowing the adversary better than anyone else and anticipating their next move by continuously learning from every attack and leveraging our scale and elite security researchers to turn that intelligence into stronger protection,” said Prakash Ramamurthy, Chief Product Officer at Huntress. “These innovations demonstrate how we’re bringing together unrivaled human expertise, AI, and real-world threat intelligence to protect businesses at the speed adversaries operate.”

“At Courser, our goal is to give all businesses access to the same level of cybersecurity protection and expertise that larger enterprises rely on, without the cost or complexity,” said Steven Drew, Chief Technology Officer at Courser. “Huntress is an important part of that strategy, bringing advanced threat detection, expert threat research, and a 24/7 security operations center to our broader security offering. Their continued innovation helps us strengthen protection across our network of managed service providers and deliver better security outcomes for the businesses we serve.”

“The fact that Managed SAT from Huntress is built on real tradecraft that their SOC is seeing in the wild has helped us demonstrate to school administrators and users how an entire district could be compromised in just a few minutes,” said Michael Codis, Systems & Network Administrator, Hunterdon County Educational Services Commission. “Showing how that risk comes to life is incredibly powerful. It helps administration of the districts we support understand just how quickly an attack can unfold and equips our users with the knowledge and skills to stay vigilant and protect themselves and our school systems against whatever kind of threat they may face.”

The post Huntress Rolls Out Advanced Agentic Security Platform Capabilities to Neutralize Cyber Threats at Machine Speed appeared first on ITDigest.

Linxa Connect brings together rating, pricing, routing, billing, and reporting, enabling ZOI to automate processes, optimize traffic routing based on cost and quality, and make faster commercial decisions. It will also provide automated rate management, traffic monitoring, financial reconciliation, and support for bilateral agreements. These capabilities will reduce manual processes, improve coordination between commercial and operational teams, and give ZOI greater visibility and control across its international wholesale business.

“As ZOI continues to expand its international wholesale business, we are investing in the technology, systems, and partnerships needed to operate efficiently at scale,” said Sohail Qadir, Chief Executive Officer of Zain Omantel International. “Our customers expect competitive services, consistent quality, and the ability to respond quickly as market conditions change. Working with Linxa will enable us to simplify how we operate, empower our teams to make better decisions, and deliver greater value to our customers and partners worldwide.”

Also Read: BRI Wealth Management partners with Aveni’s Assist AI tool

Linxa works with leading Tier 1 carriers, international wholesale operators, and telecommunications service providers worldwide. Its software and network solutions support the management of high-volume voice and messaging traffic, bringing together commercial, operational, and financial processes. With a global customer base and a presence across Europe, the Middle East, Africa, Asia, and the Americas, Linxa brings extensive experience supporting the complex requirements of international wholesale telecommunications.

“This agreement is a landmark moment for Linxa and a strong endorsement of our vision to be recognized as the partner of choice for voice and messaging operators and carriers worldwide,” said Simon Dodsworth, Chief Executive Officer, Linxa. “The Middle East is one of the most dynamic wholesale markets in the world, and ZOI sits at its heart. Our focus is on driving ZOI’s digital transformation, enhancing efficiency and delivering unmatched value for the long term.”

This partnership reflects Linxa’s mission to give wholesale telecoms providers high-performance, innovative and scalable software solutions that optimize their core business in an increasingly complex and competitive landscape.

“ZOI is one of the leading international wholesale telecommunications providers, with extensive voice and messaging operations that demand efficiency, flexibility, and consistent service quality,” said Kunal Dave, Chief Revenue Officer, Linxa. “We are proud to partner with ZOI and bring our experience supporting other leading Tier 1 carriers to this project. Together, we will build on ZOI’s existing strengths, improve operational performance, and create a stronger foundation for continued growth.”

ZOI’s Carrier and Mobility business connects operators, carriers, and mobile service providers across regional and international markets, supporting more than 10 billion international voice minutes and roaming services across 200 countries. Its portfolio includes bilateral and transit voice traffic, international toll-free services (ITFS), mobile number portability (MNP) lookup, messaging hubs and firewalls, international roaming, signaling hubs, and IPX/GRX exchange services.

The post ZOI Partners with Linxa to Accelerate its Global Wholesale Transformation appeared first on ITDigest.

“Over the past few years, enterprise AI has moved from ad-hoc experimentation to company-wide deployment. That shift, while introducing significant corporate efficiencies and innovation, has also created security blind spots: an entire layer of administrative and access activity sits outside traditional monitoring,” said Tim MalcomVetter, General Manager of Coalition Security and Co-founder of Wirespeed. “These new integrations help close that gap.”

Rather than treating AI platforms as isolated silos, Wirespeed ingests their administrative telemetry and correlates it with the rest of a business’s security stack. Wirespeed monitors high-impact changes to enterprise AI configurations that could expose sensitive data, suggest non-compliance, grant unauthorized access to the wrong users, or remove a spend limit. When potentially risky behavior or account takeover is detected, Wirespeed will investigate the alert and escalate it.

Also Read: Ontinue Extends Microsoft ISOC with 24/7 Managed Security Operations Through New MXDR Essentials Service

More specifically, Wirespeed’s Enterprise AI Security Integrations offer:

• Rapid Protection: Automated analysis of anomalous behavior from enterprise admin-level logs, guarding access to an organization’s most powerful systems even faster than the AI itself can think.
• Unified Security: Standardizes threat detection policies across AI tools in one platform that’s already protecting against network, SaaS, cloud, and endpoint threats.
• Immediate Control: Converts real-time behavioral anomalies into immediate network enforcement, isolating compromised systems before data can leave the perimeter.

With the addition of these Enterprise AI Security Integrations, Wirespeed now connects to more than 100 security and IT tools, spanning endpoint detection, identity providers, network and perimeter security, email security, cloud, SaaS, attack simulation, and ticketing and Professional Services Automation (PSA) platforms. By connecting all these different signals, Wirespeed gives security teams fuller context for investigations and can respond autonomously.

“Wirespeed layers onto the tools businesses already trust, allowing them to strengthen detection and response without replacing their stack. With all of these integrations, businesses can connect through APIs no downloads, no agents, no vendor lock-in, and no rip-and-replace  making using Wirespeed as easy as possible,” MalcomVetter continued.

The post Coalition Launches Enterprise AI Security Integrations appeared first on ITDigest.

This solution is intended to solve the problem of one of the most rapidly growing attack surfaces in enterprises: autonomous and natural language software development. The platforms like Lovable enable developers from the departments of marketing, sales, products, and operations to develop and launch production-ready web applications through conversational prompts. At the same time, such solutions create an explosion of “Shadow AI” and ungoverned digital assets as the employees who do not have any technical background can build AI-generated applications that include hardcoded API keys, exposed database credentials, wide access permissions, and un-sanitized input data.

“AI is turning every employee into a builder. That’s a massive opportunity for business, and a fundamental shift in how enterprises need to think about security,” said Daniel Bernard, chief business officer, CrowdStrike. “Software is being built and deployed at unprecedented speed, expanding the enterprise attack surface. Together with Lovable, we’re bringing AI-built applications into the Falcon platform, giving organizations the visibility to embrace AI-powered development without losing control of risk.”

Under the Hood: Extending SSPM to Conversational Code Workspaces

Historically, application security focused on centralized source repositories like GitHub or GitLab, relying on static application security testing (SAST) and dynamic testing (DAST) pipelines managed by professional software engineers. AI creation platforms bypass these traditional CI/CD choke points entirely, deploying functional apps directly from conversational prompts to live cloud domains.

Also Read: Bridging the Data Highway: How Lumen and Microsoft’s Expanded Alliance Redefines AI and Enterprise IT Infrastructure

The technical integration between CrowdStrike and Lovable helps in filling the gaps in visibility through an integrated governance approach:

Exposed Application Discovery: Scans automatically and maintains inventory of all published applications from Lovable platform, detects publicly accessible endpoints and privately shared projects that are exposed to the outside world.

Secret and Risk Detection: Detects projects that have exposed hard-coded credentials, unhidden API keys, unverified third-party packages, or security warning from Lovable’s built-in Security Center.

Identity and Access Governance: Audits the enforcement of Single Sign-On (SSO), project owner hierarchy, permissions of external collaborators, and third-party API access.

SaaS Inventory: Collects data on Lovable workspaces, members, and published projects into a centralized Falcon Shield console for SOC teams.

Strategic Impact on the Cybersecurity and IT Industry

Bringing AI software creation platforms under unified security posture management signals fundamental structural shifts across the Cybersecurity and Enterprise IT landscape:

1. Transitioning SSPM and AppSec to “AI-Native Software Creation”

Application security tools were originally built under the assumption that trained developers authored code inside approved repositories with structured pull-request reviews. The mainstream adoption of AI application builders invalidates that paradigm. The CrowdStrike-Lovable partnership establishes a new category requirement: AI-generated application security. Cybersecurity vendors can no longer restrict their monitoring to conventional developer toolchains; they must govern prompt-driven software engines wherever citizen developers build.

2. Recasting Shadow IT in the Age of Autonomous Code Generation

Over the past decades, the term “Shadow IT” was used by CISOs to describe unauthorized SaaS licenses (e.g., file-sharing or messaging services). However, now Shadow IT is shadow development, which refers to employees who develop, publish, and deploy their applications that process sensitive company data without any IT involvement. Embedding security posture capabilities directly into AI development engines can help to close the gap between IT policy and employee innovation and give visibility into shadow apps before any security breach occurs.

3. Enforcing “Security-by-Design” for Non-Technical Citizens

Citizen developers have no knowledge about security measures like proper coding, authentication handshake, and input validation. Asking non-technical people to implement security settings or inspect code repositories would inevitably lead to security gaps. Natively checking security posture on platforms like Lovable would guarantee that baseline security policies (including SSO and secrets masking) are automatically enforced right during the creation process.

Effects on Businesses Working in the Cybersecurity & IT Industry

Alignment of the strategies of CrowdStrike and Lovable provides clear benchmarks in terms of operations and competition in the field of business, software providers, and security purchasers:

Reduced Risk from AI Experimentation: Procurement managers and CIOs of enterprises can more safely authorize AI application creators within their own teams, as apps will be constantly monitored by the enterprise’s existing security system.

Demise of Niche Code Scanners: Software that scans only traditional code bases will be increasingly consolidated into unified platforms like Falcon that analyze telemetry across endpoints, cloud workloads, identities, and AI applications in one pane of glass.

Reduced Risk of Regulatory Compliance Violations and Data Theft: Proactively identifying exposed databases and unauthenticated APIs helps avoid any serious compliance issues under the global laws of data protection.

Conclusion

CrowdStrike and Lovable’s partnership marks a vital maturation point for generative AI in the enterprise. By pairing Lovable’s accessible software creation engine with CrowdStrike Falcon Shield’s enterprise-grade governance, the alliance proves that rapid, prompt-driven innovation does not have to come at the expense of corporate resilience. For the broader cybersecurity and IT industry, this release demonstrates that securing modern enterprises requires extending continuous visibility from the traditional developer repository all the way to the citizen creator’s prompt.

The post Securing the Citizen-Developer Boom: How CrowdStrike and Lovable’s Alliance Redefines Cybersecurity and IT Governance appeared first on ITDigest.

The acquisition deal, which was announced at Fal.Con Europe 2026, involves the integration of automated red teaming and vulnerability testing within the CrowdStrike Falcon® platform. Through continuous testing of machine learning models, applications, and autonomous agents prior to implementation, CrowdStrike provides companies with control to identify any weaknesses in the system.

Addressing the Blind Spots in Architectural Application Security of Conventional Approaches

There is nothing more disruptive than the explosion in agentic workflows and large language models to conventional approaches towards software testing. Conventional techniques for cyber testing were devised for the deterministic nature of static code paths that behaved uniformly in identical conditions. In today’s world of AI and autonomous systems, the inherent probabilities and dynamism in such systems make them susceptible to new adversarial threats like prompt injection, jailbreaks, and loop reasoning attacks.

Also Read: CrowdStrike Expands Deloitte Partnership Across Cybersecurity Advisory and Operations 

Due to the presence of such threats in underlying model weightage and semantic reasoning flows, conventional application security tools often miss out on them. The stakes are huge when organizations are looking to deploy such agents in their business processes.

The planned acquisition expands CrowdStrike’s presence into early development and pre-production testing stages, reinforcing its position within the AI Detection and Response (AIDR) category. The combined solution is slated to achieve general availability within the fourth quarter of CrowdStrike’s fiscal year 2027.

Key technical capabilities delivered by Dreadnode across the Falcon platform include:

Red Team Automation at Scale: Enables operators to scope out evaluations with natural language prompts. The engine automatically generates tests for more than 100 well-known attack vectors, including sophisticated multi-step exploitation, jailbreak, prompt injection, and targeted attacks on individual agents.

Regulatory and Threat Standardization Mapping: Categorizes findings based on their impact and maps them to key regulatory frameworks, including the OWASP Top 10 for LLMs, the OWASP Agentic Security initiative (ASI01 – ASI10), MITRE ATLAS, and the NIST AI Risk Management Framework (AI RMF), to document audit information necessary for making go/no-go decisions regarding production use.

Repository Scanning: Evaluates AI weights, model registries, code repositories, and dependencies before release.

Operator Governance in Human-in-the-Loop Mode: Empowers security analysts to manually update the classification of findings, change severity levels, and add their own reasoning, ensuring instant synchronization of risk scores across enterprise-level dashboards.

Two-Way Integration with Falcon Guardian and SafeMind: Transforms testing results into actionable policies on the Falcon Guardian side for hardening runtimes and uses testing metrics to train CrowdStrike SafeMind security models.
Unfiltered Industry Statements and Executive Commentary

“Enterprises are deploying AI faster than they can prove it is secure. A model can be jailbroken, an agent can be manipulated, and most organizations have no way to find those flaws until the AI is already in production,” said George Kurtz, CEO and founder of CrowdStrike. “With Dreadnode, CrowdStrike will give every enterprise the power to trust AI and deploy faster, with confidence.”

“AI fails in ways traditional testing was never designed to catch, and the people best equipped to find those failures think like attackers. We founded Dreadnode to expose those weaknesses before AI reaches production,” said Brad Palm, CEO of Dreadnode. “As part of CrowdStrike, we will bring Automated AI Security Testing to every enterprise, helping teams confidently find and fix weaknesses.”

Expanding CrowdStrike’s Cyber Superintelligence Lab

Following the close of the transaction, the Dreadnode engineering and research organization will merge into CrowdStrike’s Cyber Superintelligence Lab. The integration adds dedicated adversarial AI talent to CrowdStrike’s research teams while leveraging Dreadnode’s testing frameworks to evaluate frontier model resilience, accelerating research into secure enterprise agent architectures.

The transaction consideration is structured primarily in cash, alongside equity subject to vesting provisions. The acquisition is projected to close during CrowdStrike’s fourth quarter of fiscal 2027, subject to customary regulatory reviews and closing conditions.

The post CrowdStrike to Acquire Automated AI Security Testing Pioneer Dreadnode to Secure Agentic Systems Before Deployment appeared first on ITDigest.

Also Read: IANS Integrates Practitioner-Validated Cybersecurity Intelligence into Microsoft Copilot 

Under the partnership, customers will gain unified AI search and knowledge access across enterprise resource planning (ERP), enterprise service management (ESM), and customer relationship management (CRM) platforms. The companies will also combine Glean Agents with Emergys’ AI agents to support automated workflows, business process optimization, and faster Level 1 to Level 3 service resolution.”Glean creates a tremendous synergy across the Emergys customer base, serving as a powerful add-on to our existing solutions, models, and Agentic AI framework,” said Krishna Prabhu, CEO, Emergys. “By uniting multi-model flexibility with complete enterprise context that makes AI work at scale, we are helping our clients optimize token efficiency and turn fragmented data and processes into real, measurable business outcomes.”

Read More: Emergys Forges Partnership with Glean to Accelerate Enterprise AI and Agentic Adoption

The post Emergys and Glean Partner to Accelerate Enterprise AI Adoption appeared first on ITDigest.