Gwendolyn Denise Stripling, Ph.D.

🔐 Cybersecurity and AI risk aren’t just IT issues—they’re business imperatives. At the Momentum AI Risk Forum in San Jose, Vijay Gurbaxani (Founding Director, UCI | Center for Digital Transformation), Brian Fricke, CISSP, CISM (CISO, City National Bank of Florida) and Renee Langeness (Director of Data & AI Governance, Principal Financial Group) delivered a standout session on “Getting Executive Buy-In for Security and Risk Investments.” Their message was clear: in a $750B software economy where intangible assets now outweigh tangible ones, security must be positioned as a strategic enabler, not a cost center. 💥 From SolarWinds to AI-generated misinformation, the risks are real—and rising. The speakers tackled: ✅ AI-related incidents like Grok’s offensive outputs and policy missteps ✅ The growing threat of AI agents and the need for compartmentalization ✅ The importance of robust asset inventories and incident response plans 📊 Brian introduced a five-pronged risk framework—strategic, operational, reputational, compliance, and financial—alongside a metrics-driven approach using: Cyber assurance, Cyber hygiene and Cyber resilience. They also championed cyber risk quantification to translate technical concerns into financial language that resonates with the C-suite. 🏛️ Renee shared how Principal uses security as a differentiator, leveraging certifications and third-party benchmarks to build trust and drive business value. 💡 The takeaway? To secure executive buy-in, security leaders must speak the language of business—linking risk to reputation, compliance, and competitive advantage. #RiskManagement #AIGovernance #MomentumAI #Cybersecurity

31

Cloudflare CASB now scans ChatGPT, Claude, and Gemini for misconfigurations, sensitive data exposure, and compliance issues, helping organizations adopt AI with confidence. https://cfl.re/3HUGkfX

179

2 Comments

Nov 6: Our CEO, Dan Guido, and Security Engineer Riccardo Schirone discuss making Buttercup accessible for real-world security teams at Berkeley's online AI Cybersecurity workshop. Buttercup is Trail of Bits' cyber reasoning system that won second place and $3 million in DARPA's AI Cyber Challenge (AIxCC) at DEF CON 33, automatically discovering 28 vulnerabilities across 20 different vulnerability types and successfully applying 19 patches. https://lnkd.in/gaP5eKKg

30

LLMs are only as useful as the knowledge they have access to. For cybersecurity teams, that knowledge often lives in internal documentation, not public datasets. In his latest Corelight Labs blog, Keith Jones, Ph.D. walks through how to build a secure, local system that combines Open WebUI with Apache Tika and your own content. No cloud required. By pairing a local LLM with a custom knowledge base, you can: ✔️ Get context-aware answers from your PDFs and Zeek source code ✔️ Keep sensitive content private ✔️ Build a Q&A system tailored to your environment If you're exploring retrieval-augmented generation (RAG) for cybersecurity, this is a practical, step-by-step guide. 🔗 Read the full walkthrough: https://lnkd.in/enUaVGbj

28

2 Comments

Prompt smarter. Deepen defenses. As generative AI becomes part of how we work, bad actors are getting creative by using prompt injection attacks to manipulate models, exfiltrate data, and bypass safeguards. Our latest guide breaks down: 👉 How prompt attacks work 👉 The risks they introduce to enterprise AI 👉 What to do about it before it impacts your business Here are the insights on preventative strategies for securing GenAI. https://bit.ly/43Idmqs

78

2 Comments

Irvine, CA — your cybersecurity update is here.🛡️ We’re teaming up with Google Cloud to dive into the next generation of security operations with a half-day of hands-on defense and strategy. Choose Your Track: Cyber Range (CTF) or Strategic Roundtable The Tech: Google's latest on the Agentic SOC and AI-driven defense The Perks: Free lunch & Happy Hour networking 📅 Thursday, March 5 |📍 Google Building FAIR - Irvine, CA 🔗 Secure one of the final spots: https://hubs.la/Q044QQZm0 Google Cloud Partners #Foresite #Cybersecurity #GoogleCloud #SecurityEvents #CASecurity #CloudSecurity #GoogleSecOps #TechEvents

18

Are cyber defenders winning? Read the latest from Jason Healey for The Lawfare Institute detailing how we're doing better than we think.

2

A total of 91,403 sessions targeted public LLM endpoints to find leaks in organizations' use of AI and map an expanding attack surface. https://ow.ly/m6xu50XVMKV

2

Most LLMs sound convincing. In the SOC, that’s not enough. Generic models expand risk. Security-native LLMs contain it. The SOC needs proof, containment, and safety, not shortcuts. Swipe through the carousel to see the difference. Read the full blog here: https://lnkd.in/eAbW6-gT #SIRP #cybersecurity #AI #SOC #AInativesecurity #secops #LLMs

13

🔥 HOT TAKE: More data just equals more noise. 🧊 COLD FACT: Devon Kerr, director of threat research, says data density is what’s most important. Utilizing tools like generative AI can be very effective in cutting through the noise.

90

1 Comment

Keep your data under control with row-level security. https://cockroa.ch/4jz1b5d In large scale organizations in industries such as healthcare and finance, keeping sensitive data is imperative. CockroachDB has historically provided robust mechanisms for managing roles and privileges to restrict access to specific tables. And now, we’re taking it to the row-level. Control access to individual tables or specific rows at user or role levels, keep sensitive data protected, and do so with ease in CockroachDB 25.2. Here’s a demo from our Technical Evangelist Rob Reid. 

22

Threat actors are exploiting misconfigured Machine Control Protocols (MCPs) to gain unauthorized access and execute malicious code through AI agents, exposing organizations to significant risks of data breaches and system compromise. Organizations must prioritize securing MCPs, auditing agent actions, and enforcing strict access controls to prevent AI-driven attacks. 🔒⚠️ #CyberNewsLive https://lnkd.in/g_2rgvp8

1

1 Comment

Kai has emerged from stealth with $125M across seed and Series A to build an agentic AI cybersecurity platform that autonomously handles threat intelligence, exposure management, detection, response, and other security workflows across IT and OT environments. Founded by Galina Antova and Damiano Bolzoni, Ph.D., the San Jose company says it reached seven-figure bookings within 10 months of writing its first line of code and is already working with large enterprise customers across energy, pharmaceuticals, automotive, and hospitality. Why it matters: cybersecurity teams are now facing AI-enabled attackers while still operating through fragmented tools, siloed data, and manual workflows. Kai is pitching a broader shift from point products to an autonomous reasoning layer that can collapse security categories and execute work end-to-end, which is a sharper value proposition than simply adding copilots to an already crowded stack. Demand-driver insight: the strongest signal in this round is not just the size of the raise, but the speed of enterprise adoption for a system aimed at reducing analyst backlog and operational drag. Kai says it can process millions of findings, cut false positives, and deliver measurable outcomes in complex environments, while its graduation from the Chevron Technology Ventures Catalyst Program suggests buyers in asset-heavy sectors are willing to test autonomous security workflows when they produce faster risk reduction. Quick facts👇 ● founders: Galina Antova; Damiano Bolzoni, Ph.D. ● total capital raised: $125M ● HQ: San Jose, California ● Investors: Evolution Equity Partners; N47

6

🚨 Large Language Models are changing the game, but not without risks. Most teams deploying LLMs in production are overlooking critical security concerns. From hallucinations to hidden attack surfaces, here are 5 uncomfortable truths you need to know: https://lnkd.in/d6YG_xax If you’re serious about AI adoption, it’s time to get serious about AI security. #LLM #CyberSecurity #Wallarm #AppSec #DevSecOps

27

This is 🔥, Alex Hurtado. The sunburst visual just gave shape to what most detection engineers already feel: they're bending telemetry toward the paths of least resistance. Windows processes, auth logs, endpoint noise they can wrangle. It’s a tactical reality born from structural limits. But as teams start to scale behavioral detections across data lakes (shoutout Databricks Snowflake + Anvilogic), that center of gravity is going to shift. Not because the ATT&CK matrix changes, but because the architecture does. Let’s keep this convo going!

6

1 Comment