Ami Luttwak, chief technologist at Wiz, explains how the rapid adoption of artificial intelligence is expanding the attack surface for cybercriminals. While AI helps developers ship code faster, it also creates shortcuts and insecure implementations that attackers exploit. Luttwak highlights recent supply‑chain breaches, including the compromise of a chatbot startup and a popular JavaScript build system, where AI‑driven tools were used to harvest credentials and infiltrate corporate networks. He urges organizations to embed security from day one, adopt rigorous compliance standards, and rethink every layer of defense as AI continues to evolve. Read more →

Google has alerted users of the Salesloft Drift AI chat agent that authentication tokens linked to the platform may be compromised. The company revoked the affected tokens and disabled the integration between Drift and Google Workspace while investigating. New information indicates the breach is broader than previously reported, affecting more than just Salesforce integrations. Google advises all Drift customers to treat any stored or connected tokens as potentially compromised. Salesloft has not updated its guidance to reflect the expanded scope. Read more →