When the Insider Has No Pulse: Rethinking File Security for AI Agents

Machine identities vastly outnumber human ones in a modern enterprise. According to Palo Alto Networks, roughly seven in ten of them are now AI agents.[1] Identity governance was built to manage people, but there is a real security gap in how it manages AI agents. This post argues that the control has to live in the file itself, not only in the identity reaching for it. In 2025, researchers at Aim Labs found a...

Machine identities vastly outnumber human ones in a modern enterprise. According to Palo Alto Networks, roughly seven in ten of them are now AI...

Key Takeaways • Only 16% of security teams have operationalized CTEM — despite broad recognition of its value. • Gartner predicts CTEM-driven organizations are 3x less likely to suffer a breach. • The five CTEM stages are: Scoping, Discovery, Prioritization, Validation, and Mobilization. • Traditional vulnerability management misses identity risks, misconfigurations, and business context. • Unstructured documents — contracts, spreadsheets, design files — are a critical CTEM blind spot. Attackers don’t wait for...

Key Takeaways • Only 16% of security teams have operationalized CTEM — despite broad recognition of its value. • Gartner predicts CTEM-driven organizations are...

Key Takeaways • 40% of law firms experienced a security breach in the past year, with an average cost of $5.08 million per incident. • Silent Ransom Group now sends physical operatives into offices posing as IT staff. The FBI issued a flash alert in May 2026. • ABA ethics rules (Rule 1.6 and Rule 1.1) expose breached firms to state bar complaints, on top of financial penalties and litigation. • Attorney-client privilege can...

Key Takeaways • 40% of law firms experienced a security breach in the past year, with an average cost of $5.08 million per incident....

Key Takeaways • Source code is often a company’s most valuable and least protected asset. • GitHub, Trellix, and Accenture all disclosed source code breaches in 2026. • Verizon’s DBIR found source code is the top data type leaked to shadow AI. • A real source code protection strategy needs kernel-level control, not just file encryption. • FED v6 delivers that control with only a 4% build-time overhead. A source code protection strategy...

Key Takeaways • Source code is often a company’s most valuable and least protected asset. • GitHub, Trellix, and Accenture all disclosed source code...

Begin with what the courts already know. In 2026, a court sentenced an engineer at a major memory-chip maker to seven years in prison for passing more than 600 manufacturing process steps to a competitor abroad. In a separate, documented case, a group of employees left for a competitor with the engineering drawings, CAD files, and build sheets with them, because owning the finished product was not enough to reproduce it; the design documents...

Begin with what the courts already know. In 2026, a court sentenced an engineer at a major memory-chip maker to seven years in prison...

Key Takeaways In recent cases, insiders deliberately switched to photographing their screens with a phone, specifically because a photo leaves none of the traces a file transfer does. Insider risk now costs the average organization $19.5M a year, up 123% since 2018, and data exfiltration spikes 720% in the 24 hours before a layoff. Fasoo Smart Screen changes the decision itself. A screen that visibly carries the viewer’s name, IP, and time tells a...

Key Takeaways In recent cases, insiders deliberately switched to photographing their screens with a phone, specifically because a photo leaves none of the traces...

The two questions every incident comes down to The hardest moment in a data incident is rarely the discovery. It is the morning after, when the regulator’s letter arrives, the litigation hold goes out, and the executive team asks two deceptively simple questions. What data actually left? And can we show we did what was reasonable to protect it? For information that lived on the network, a bank can usually reconstruct an answer from...

The two questions every incident comes down to The hardest moment in a data incident is rarely the discovery. It is the morning after,...

Key Takeaways • JADEPUFFER is the first confirmed AI agent to execute a full ransomware attack with zero human involvement. • The attack exploited CVE-2025-3248, a critical Langflow vulnerability (CVSS 9.8), to harvest cloud credentials and pivot to a production database. • Recovery was structurally impossible: the encryption key was never saved, even after ransom was paid. • AI-driven ransomware collapses attack timelines from weeks to hours, with no human operator required. • FED...

Key Takeaways • JADEPUFFER is the first confirmed AI agent to execute a full ransomware attack with zero human involvement. • The attack exploited...

Key Takeaways • On September 11, 2026, EU CRA vulnerability reporting obligations go live — covering both new and legacy products. • Manufacturers must submit a 24-hour early warning and a 72-hour full notification when an actively exploited vulnerabilities is identified. • Non-compliance carries fines of up to €15 million or 2.5% of global annual turnover, whichever is higher. • The obligations apply to all products with digital elements on the EU market —...

Key Takeaways • On September 11, 2026, EU CRA vulnerability reporting obligations go live — covering both new and legacy products. • Manufacturers must...

Screen capture is the overlooked blind spot in financial services, the one exit a bank’s perimeter was never built to watch. Every financial institution’s worst insider scenario recently played out somewhere else first. In late 2025, a major technology company discovered that one of its own employees, someone with legitimate access to internal systems, had been capturing screenshots of sensitive internal consoles and passing them to a criminal hacking group, which posted them publicly....

Screen capture is the overlooked blind spot in financial services, the one exit a bank’s perimeter was never built to watch. Every financial institution’s...

AI Data Infrastructure