Security

Acalvio Deception Guardrails: Securing Agentic AI at Runtime

Acalvio Deception Guardrails are Securing Agentic AI at Runtime

Agentic AI, AI, AI/ML, Application Development, DevSecOps, Security /

Acalvio Technologies has launched Deception Guardrails, a capability that embeds deceptive honeytokens, decoy MCP servers, and fake credentials into AI agent workflows to detect compromise before enterprise systems are impacted. As agentic AI deployments scale, traditional input/output guardrails leave a critical detection gap that deception technology is well positioned to fill. This note examines the product logic, the security risk context, and what it means for ITDMs and developers building production AI agent infrastructure.

Acalvio Deception Guardrails are Securing Agentic AI at Runtime Read More »

Eclipse Foundation & OWASP Unite for CRA Open Source Security

Eclipse Foundation & OWASP Unite for CRA Open Source Security

Application Development, Compliance, Open Source, Security /

The Eclipse Foundation and OWASP have signed an MOU to strengthen open source security and support EU Cyber Resilience Act compliance. With mandatory reporting obligations taking effect September 11, 2026, the partnership targets SBOM adoption, supply chain security, and maintainer readiness. ECI Research data shows supply chain security is a top-12-month investment priority for nearly half of enterprise respondents.

Eclipse Foundation & OWASP Unite for CRA Open Source Security Read More »

Conifers Resilient Cyber Defense: The AI SOC Built for Frontier Models

Conifers Resilient Cyber Defense: The AI SOC Built for Frontier Models

Agentic AI, AI, Application Development, DevSecOps, Security /

Conifers has introduced Resilient Cyber Defense, an agentic AI SOC platform that connects threat intelligence, detection engineering, and remediation into a single governed operating loop. The platform claims 99%+ accuracy across nearly 500,000 investigations and reduced median detection-to-containment time to under ten minutes in production. ECI Research data shows AI-assisted development has increased security risk for over 60% of practitioners, making this launch timely.

Conifers Resilient Cyber Defense: The AI SOC Built for Frontier Models Read More »

Google Public Sector AI: NOAA, Genesis Mission & CodeMender

Google Public Sector AI: NOAA, Genesis Mission & CodeMender

AI, Application Development, Platform Engineering, Programming, Security, Software Development /

Google Public Sector’s July 2026 announcements span HPC infrastructure for NOAA, a $40 million AI commitment to the DOE Genesis Mission, and the preview launch of CodeMender, a managed AI code security agent. The moves reveal a deliberate strategy to anchor federal AI credibility on hard scientific workloads before expanding into the broader government IT stack. EU public sector organizations also get a boost from Google Cloud’s Dutch DPIA approval.

Google Public Sector AI: NOAA, Genesis Mission & CodeMender Read More »

AI Agent Governance: What Two Incidents Reveal About Enterprise Risk

AI Agent Governance: What Two Incidents Reveal About Enterprise Risk

Agentic AI, AI, AI Governance, AI/ML, Application Development, DevSecOps, Security /

A Claude data-sharing exposure and an OpenAI agent sandbox breach look different on the surface, but both reveal the same enterprise blind spot: organizations lack visibility into where their AI systems’ authority actually ends. ECI Research analyst coverage examines the governance gap and what enterprises should do about it.

AI Agent Governance: What Two Incidents Reveal About Enterprise Risk Read More »

Cyera Acquires Oasis to Build an Agentic Security Platform

Cyera Acquires Oasis to Build an Agentic Security Platform

AI, Application Development, Enterprise Software, Machine Learning, Security /

Cyera has signed a letter of intent to acquire Oasis Security, combining data classification with non-human identity management in a single platform. The move targets the fastest-growing gap in enterprise security: AI agents that act with human-level access but without human-level oversight. Agent Guardian and a new Endpoint Security capability extend the platform from cloud to browser to device.

Cyera Acquires Oasis to Build an Agentic Security Platform Read More »

The 2026 Artifact Management Enforcement Gap | ECI Research

The 2026 Artifact Management Enforcement Gap | ECI Research

AI, Application Development, Compliance, Machine Learning, Security /

Cloudsmith’s second annual Artifact Management Report finds that AI-generated code has become near-universal, but governance hasn’t kept pace. Three in four organizations generate SBOM data without using it for real-time security enforcement. ECI Research examines what the EU Cyber Resilience Act deadline means for teams still relying on manual remediation.

The 2026 Artifact Management Enforcement Gap | ECI Research Read More »

Act Security Launches $60M Platform to Fix Cloud Access Sprawl

Act Security Launches $60M Platform to Fix Cloud Access Sprawl

Application Development, Cloud, Enterprise IT Strategy, Security /

Act Security has launched an action-centric cloud security platform backed by $60 million from Team8, Bessemer, and Notable Capital. Rather than surfacing vulnerability findings, the platform removes the access paths that make breaches possible. The announcement arrives as AI agents inherit unused cloud permissions and operate at machine speed inside production environments.

Act Security Launches $60M Platform to Fix Cloud Access Sprawl Read More »

Kata Containers 4.0: Open Source AI Agent Sandboxing Grows Up

Kata Containers 4.0: Open Source AI Agent Sandboxing Grows Up

Application Development, Cloud-Native, Open Source, Security /

Kata Containers 4.0 promotes its Rust-based runtime to default, replacing Go, and positions the project as the open source standard for isolating AI agents in Kubernetes. The release addresses real production risk as nearly two-thirds of organizations report elevated security exposure from AI tooling. Confidential Containers integration broadens the appeal to regulated industries facing data sovereignty requirements.

Kata Containers 4.0: Open Source AI Agent Sandboxing Grows Up Read More »

Cinchy PeriMind: AI Action Governance for Enterprise Trust

Cinchy PeriMind: AI Action Governance for Enterprise Trust

AI, Application Development, Compliance, Enterprise Software, Security /

Cinchy has launched PeriMind, an AI governance suite that gives enterprises real-time visibility and policy enforcement over AI agents in production. The product targets the growing gap between AI adoption speed and operational trust. ECI Research data shows AI governance spending is rising, and software supply chain security is a top enterprise investment priority for 2026.

Cinchy PeriMind: AI Action Governance for Enterprise Trust Read More »