Industry News – Help Net Security

ServiceNow has announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration, and comprehensive oversight, all inside ServiceNow’s operational AI harness. Specifically, AI Passport is a new authority layer that gives enterprises runtime control over what AI agents and Model Context Protocol (MCP) servers are authorized to do at every point in a multi-agent workflow. ServiceNow also enables enterprises to … More → The post ServiceNow gives AI agents a passport, and limits on what they can do appeared first on Help Net Security.

Optro has expanded its portfolio of autonomous AI agents for enterprise risk teams. Its GRC Intelligence Platform combines purpose-built governance, risk, and compliance capabilities with human oversight, allowing agents to operate within team-defined guardrails and risk appetites. Every agent action, decision, model entry, and evidence trail is logged and cited to support transparency and audit readiness. “Every risk leader is asking two questions: what are your AI agents standing on, and how are you governing … More → The post Optro automates GRC workflows with auditable AI agents appeared first on Help Net Security.

Qualys has announced TruRisk Eliminate 2.0 with TruConfidence, a new remediation intelligence and orchestration engine that powers Qualys’ vision for Autonomous RemOps, a new category for the frontier AI era. Built on Qualys’ extensive experience of deploying half a billion patches with less than 0.1% rollback, of which 40% were deployed autonomously, TruRisk Eliminate combines the latest advances in autonomous remediation, remediation intelligence and orchestration to help organizations confidently eliminate cyber risk at machine speed … More → The post Qualys introduces TruConfidence to orchestrate cyber risk remediation appeared first on Help Net Security.

Radware has announced Radware Model Context Protocol (MCP) Server Protection, a purpose-built solution designed to help organizations more securely adopt MCP as AI agents gain greater access to enterprise applications, data and business workflows. The solution is intended to give organizations visibility into their MCP infrastructure, help protect MCP servers against MCP-specific attacks and establish governance as deployments scale. MCP is rapidly emerging as a standard way for AI agents to connect to enterprise applications, … More → The post Radware MCP Server Protection monitors agent activity and guards against protocol abuse appeared first on Help Net Security.

SolarWinds has announced the launch of Avior, a standalone, goal-oriented agentic AI system purpose-built for mission-critical IT environments. Built on the SolarWinds Platform, Avior will help IT teams securely define goals, coordinate specialized agents, and track progress toward measurable outcomes across hybrid digital ecosystems. As technology infrastructure grows more complex and business-critical, variable outcomes can introduce unacceptable risk and costs that most IT organizations already quietly absorb in outage minutes, audit exposure, and senior engineering … More → The post SolarWinds Avior pairs IT automation with human approval and audit trails appeared first on Help Net Security.

Chainguard has announced Chainguard Harness, a new cyber harness that uses frontier AI models like Anthropic’s Claude Mythos 5.1 to find and fix exploitable vulnerabilities in an organization’s application code. Harness builds an application from an organization’s source code in an isolated microVM, instructs a frontier model to hunt for exploitable vulnerabilities in a live, running instance, and reproduces every finding before delivering a tailored, staff-reviewed fix. Teams benefit from frontier vulnerability hunting without needing … More → The post Chainguard Harness uses frontier AI to test running applications for vulnerabilities appeared first on Help Net Security.

Scytale has announced the launch of Scytale MCP, a Model Context Protocol server that connects a customer’s AI tools directly to their compliance program. With Scytale MCP, tools such as Claude and ChatGPT can query live compliance data and complete routine work through plain language instead of screen-by-screen navigation. The release reflects how AI-native teams increasingly operate, where the preferred AI tool is expected to pull the answer or do the task directly rather than … More → The post Scytale MCP gives AI tools scoped, read-only access to compliance data appeared first on Help Net Security.

Trellix has announced Trellix Wise for Private Cloud, an on-premises, federated AI core for agentic security operations. The solution extends a security fabric across an organization’s existing infrastructure to improve threat detection and response while preserving data sovereignty, governance, and predictable costs. “The threat landscape has fundamentally shifted, where AI isn’t just accelerating attacks; it’s commercializing them,” said Vishal Rao, Chief Executive Officer, Trellix. “Our strategy for the AI era is clear: meet AI-powered threats … More → The post Trellix Wise for Private Cloud delivers auditable AI investigations for security teams appeared first on Help Net Security.

NinjaOne has announced Katana AI, an agentic AI technician that supports and elevates IT workers, and the NinjaOne MCP server, an agentic orchestration connector that extends the platform’s governed access to the AI tools teams already use. “Modern IT environments generate more data than any technician can process,” said Phil Hochmuth, research VP, endpoint management and enterprise mobility at IDC. “Hunting for a problem’s context instead of actually solving the issue wastes time for IT … More → The post NinjaOne combines Katana AI and MCP server to accelerate IT problem resolution appeared first on Help Net Security.

Lattice Semiconductor has released version 5.0 of its Lattice Sentry solution stack, adding post-quantum cryptography (PQC) to its platform firmware resilience (PFR) and attestation capabilities. The update provides CNSA 2.0-aligned, NIST-compliant protection for AI data centers and critical infrastructure, giving system designers a validated, production-ready approach to quantum-resistant security. “AI infrastructure and the threat landscape are evolving rapidly. Platform firmware has become a primary attack vector, and the quantum era will upend decades of security … More → The post Lattice Sentry 5.0 brings quantum-resistant firmware security to AI data centers appeared first on Help Net Security.