UURL 財經新聞FINANCE
UURL Finance · Taiwan market + in-depth rewrites · hourly

AI Security Upgrade: Endpoint Protection and Monitoring Innovation

Browser TTS · no download

30-second brief

This week in security focuses on AI endpoint protection and network monitoring, with SentinelOne integrating with Anthropic, Fortinet launching cloud protection, and CrowdStrike strengthening agent detection and governance.

AI Deepens Endpoint Security Applications

This week, the security industry focused on endpoint security and network monitoring, with artificial intelligence applications becoming a key trend, covering strengthened defenses, improved operational efficiency, and management of AI agent security risks. SentinelOne announced integration with Anthropic's Claude Cowork, extending security coverage to Anthropic environments. Sysdig announced that Sysdig AI Defense is now generally available, providing runtime security and governance for AI agents on macOS and Windows.

CrowdStrike launched new security operations capabilities that can detect and contain AI agents deviating from expected behavior, and introduced Agent Insider Threat Detection and Falcon Guardian AI Kill Switch. Cycode launched a preview service called Citizen Developer Security for citizen developers who use AI agents to develop applications within enterprises. Ebix partnered with intentyx to provide AI agent security and governance solutions based on the intentyx Synthetic Mind-Aware Risk Engine for regulated industries.

Fortinet Expands Cloud AI Protection

Fortinet launched FortiGuard Inline AI Security Service, extending cloud AI detection and protection to users of its firewall product FortiGate without requiring additional AI security infrastructure. In network monitoring, Action1 announced Endpoint Takeover Prevention, a new security architecture designed to prevent threat actors from exploiting compromised endpoint management platforms to control client endpoints.

Assail introduced Cassandra, a proactive AI agent integrated into its Ares Platform, designed to connect threat modeling with autonomous security testing. Auvik announced that its automation framework and Common Vulnerabilities and Exposures monitoring agent are now generally available. CloudBolt Software added agent governance features to its cloud management platform CloudBolt CMP, allowing administrators to control agent access, ensure policy enforcement, trace sessions, and assign designated users.

Monitoring Integration and Governance Perspectives

Cobalt has joined the Wiz Integration Network, enabling automatic synchronization of vulnerability findings, including exploitability context, reproduction steps, severity ratings, CVSS scores, and remediation guidance. Ontinue launched MXDR Essentials managed security service, based on Microsoft's unified security operations center, extending continuous investigation and response capabilities to Microsoft Defender. Tanium joined OpenAI's Trusted Access for Cyber Program, enabling it to use advanced AI capabilities for threat research, vulnerability research, and remediation.

On the personnel front, Keyfactor appointed Gerald Beuchelt as its new Chief Information Officer. Gigamon Chief Information Officer Grant Yacomeni emphasized that while many organizations have established rules for approved AI tools, accessible data, and employee usage, policies alone are not sufficient for comprehensive governance, indicating that runtime visibility and control remain key follow-up priorities.

FAQ

What new moves did SentinelOne and Fortinet make this week?

SentinelOne integrated with Anthropic's Claude Cowork, extending protection to Anthropic environments; Fortinet launched FortiGuard Inline AI Security Service, extending cloud AI detection to FortiGate users.

What security risks do AI agents bring, and how are vendors responding?

Risks include agents deviating from expected behavior and insider threats. CrowdStrike is responding with behavioral detection and a Kill Switch, while Sysdig, Cycode, and CloudBolt are strengthening runtime security and access governance.

What progress has been made in network monitoring?

Action1 launched ETP to prevent abuse of management platforms, Auvik's CVE monitoring agent is now available, Cobalt joined the Wiz integration network for vulnerability synchronization, and Ontinue expanded managed response for Microsoft Defender.