Tag: endpoint security

  • Airlock Digital Launches Agentic AI Control and Governance for Endpoint Security at Black Hat USA 2026

    Airlock Digital Launches Agentic AI Control and Governance for Endpoint Security at Black Hat USA 2026

    Airlock Digital, a leader in preventative endpoint security, today announced the launch of Agentic AI Control & Governance at Black Hat USA 2026. The new capabilities extend the company’s existing application control solution by providing visibility into trusted AI agent behavior and real-time governance over what those agents are allowed to do on endpoints.

    As AI agents become an integral part of enterprise workflows, traditional endpoint security—designed to govern applications, not autonomous software—falls short. Airlock Digital’s solution addresses this gap by adding a second layer of policy: once an AI agent is trusted to execute, organizations can define operational boundaries, monitor agent activity, and enforce policy in real time.

    Key Features of Agentic AI Control & Governance

    • Automated Discovery: Automatically discover AI applications and gain command- and session-level visibility into AI agent behavior.
    • Centralized Policy Management: Manage policies for both trusted applications and AI agents with version-controlled changes and granular administrative controls.
    • Real-Time Policy Enforcement: Evaluate AI agent commands against policy and communicate decisions back to supported agents, allowing them to adapt their behavior while staying within policy.
    • Comprehensive Governance Dashboard: Monitor and search AI agent sessions, commands, files, policy decisions, risk activity, token usage, and cost from a single dashboard.

    The urgency for such governance is underscored by recent data from the Cloud Security Alliance, which reported in April 2026 that 82% of organizations had unknown AI agents running in their environments and 65% had experienced an AI agent-related security incident in the prior 12 months.

    “Traditional endpoint security determines what software is trusted to execute. Agentic AI introduces a second layer of policy: what a trusted AI agent is allowed to do once it’s running,” said David Cottingham, Co-founder and Chief Product Officer at Airlock Digital. “AI agents don’t simply stop when an action is blocked; they evaluate alternatives and continue working toward their objective. Rather than repeatedly blocking an agent, organizations can communicate clear operational boundaries, allowing trusted agents to adapt their behavior while remaining within policy.”

    CEO Kevin Dunne added, “What we’re hearing from customers is that the challenge isn’t adopting Agentic AI; it’s governing it. Organizations need to understand what trusted AI agents are doing, define what they’re allowed to do, and ensure they operate within organizational policy. Agentic AI Control & Governance extends our leadership in preventative endpoint security by giving organizations the visibility and governance they need to confidently adopt AI without slowing the business down.”

    Airlock Digital will demonstrate Agentic AI Control & Governance at Black Hat USA 2026 in Las Vegas. Visit Booth #5729 for an exclusive preview ahead of customer general availability in Q3 2026. For more information, read the company’s blog post: AI Agents Behave More Like Employees Than Applications.

  • Essential Zero Trust Security Practices Every Business Leader Should Implement

    Essential Zero Trust Security Practices Every Business Leader Should Implement

    In today’s evolving threat landscape, traditional perimeter-based security models are no longer sufficient. Business leaders must adopt a zero trust security approach that assumes no user, device, or network is inherently trustworthy. Below are the core practices that every organization should implement to strengthen their defenses.

    Verify Every User Continuously

    Authenticate every employee, contractor, and device on a continuous basis, rather than relying solely on network location or past authentication. This ensures that trust is never assumed and access is always verified.

    Enable Multi-Factor Authentication

    Strengthen login security by requiring additional identity verification factors. Multi-factor authentication dramatically reduces the risk of unauthorized access from stolen passwords or compromised credentials.

    Apply Least Privilege Access

    Grant employees only the permissions they need to perform their jobs. Limiting access to sensitive systems minimizes exposure and reduces the potential for insider or external cyberattacks.

    Segment Networks

    Divide your business infrastructure into isolated zones. Network segmentation prevents attackers from moving laterally after gaining access to a single system, containing breaches and limiting damage.

    Monitor User Activity

    Continuously analyze user behavior to detect suspicious actions, unusual login patterns, and potential security breaches early. Proactive monitoring helps stop attacks before significant harm occurs.

    Secure Endpoints

    Protect laptops, smartphones, servers, and all connected devices with endpoint detection, antivirus solutions, and regular software updates. Endpoint security is a critical layer in a zero trust architecture.

    Encrypt Sensitive Data

    Safeguard confidential information both at rest and in transit. Encryption ensures that even if data is intercepted, it remains unreadable without the proper decryption credentials.

    Automate Threat Detection

    Deploy AI-powered monitoring tools to identify vulnerabilities, suspicious activities, and emerging cyber threats faster than manual processes. Automation accelerates response times and reduces human error.

    Regularly Review Access Rights

    Audit employee permissions frequently, removing outdated accounts and unnecessary privileges. Regular reviews maintain strong cybersecurity hygiene and prevent privilege creep.

    By embedding these zero trust practices into your security strategy, you can better protect your organization from modern cyber threats and build a resilient defense posture.