See how Kontext helps teams monitor AI agent actions, understand intent, and prevent unauthorized actions before they happen.

Kontext Security has launched publicly with $4 million in funding to expand its runtime security platform for AI agents, backed by 42CAP, a16z CSX, and HTGF. The platform monitors agent actions in real time, applies policy enforcement, and records decisions to help organizations control what AI agents can do before unauthorized...

Docker acquires MCP Defender to secure agentic AI. Expect runtime monitoring, policy enforcement, and real-time threat detection across AI tooling.

# Software Under Siege: Why Production Data is the Key to Secure Code The numbers are staggering and sobering: applications face attacks every three minutes, with defenders taking 84 days to patch cri...

YouTube video by Is it Observable

Falco zu installieren dauert zehn Minuten. Es nützlich zu machen dauert Monate. Ein praxisnaher Leitfaden für Runtime-Security, die den Produktionsalltag überlebt — Regel-Reifegrade, Rauschen abbauen und worauf man wirklich alarmiert.

Installing Falco takes ten minutes. Making it useful takes months. A practical guide to runtime security that survives contact with production — rule maturity, tuning out noise, and what to actually alert on.

Daily Recap, Funding and deal activity included Oligo raising $60 million for runtime security, while Visa agreed to acquire BioCatch for $2.4 billion to bolster identity and fraud defenses. Key incidents covered hotel Wi‑Fi attacks targeting Microsoft 365 via custom malware, account takeover risk from Pass-ta-key against Google-synced passkeys, and active exploitation of N-able N-central and SonicWall SMA 1000 flaws alongside ransomware and data-leak follow-ons. #Oligo #RuntimeSecurity #Visa #BioCatch #HotelWiFi #Microsoft365 #Pass-ta-key #GooglePasskeys #N-able #N-central #SonicWallSMA1000 #INC_Ransomware #ExfilSquad #LiechtensteinRegistry #RiverBank

Oligo Security has raised $60 million in a new funding round, bringing its total funding to $140 million, as it expands its runtime security platform for application code, cloud workloads, and AI systems. The company says its technology helps block exploit attempts, prevent supply chain attacks, and provide zero-day response and...

Get daily updates on cyber attacks, hacking, ransomware, phishing, and more - alongside expert VPN reviews, guides, and privacy tips.

Stuart McClure emphasizes layered defenses and shifting security left to address insecure AI code, business logic flaws, and exploit chaining.

Traditional mobile app security is falling short. Discover why static analysis and periodic testing miss critical runtime vulnerabilities, and how continuous runtime testing with Corellium MATRIX…

Static analysis misses critical mobile app threats like banking trojans & privacy breaches. Discover how Corellium's runtime detection catches what ASPM can't, enabling true real-time security.

Podcast Title: Upwardly Mobile Episode Title: Beyond Obfuscation: Dynamic Defenses for Modern Mobile Security Episode Summary: In this episode, we dive deep into the evolving landscape of mobile application security. While traditional methods like code obfuscation once offered a basic layer of defense, they are proving increasingly inadequate against today's sophisticated threats. We explore the findings of recent security analyses highlighting widespread vulnerabilities, such as weak cryptography and exposed credentials, even in enterprise apps.  We discuss why static defenses like obfuscation fall short , especially against the rise of AI-powered attacks and the relentless targeting of APIs. Attackers are leveraging AI for everything from hyper-personalized phishing to adaptive malware and automated vulnerability discovery, while APIs present a direct path to backend systems and sensitive data.  The core of our discussion focuses on the critical need to shift towards dynamic, runtime security measures. We break down key technologies essential for modern mobile defense: - Runtime Application Self-Protection (RASP): How apps can monitor their own execution and environment in real-time to detect and block threats like tampering, debugging, and compromised devices.   - Runtime Secrets Protection: Moving beyond hardcoded secrets by delivering API keys and credentials securely, just-in-time, only to validated, genuine app instances.   - Dynamic Certificate Pinning: Securing communication channels against Man-in-the-Middle attacks with more flexibility and less operational risk than traditional static pinning.   - App Attestation & Token-Based API Access: Verifying the integrity of the mobile app itself (the 'what') before granting API access, using short-lived tokens to block bots, scripts, and tampered apps.   We compare static vs. dynamic approaches , emphasizing that while static analysis has its place early in development, dynamic defenses are non-negotiable for protecting sensitive data and functionality in today's threat environment. Learn why embracing these advanced, runtime-aware strategies is crucial for building truly resilient mobile applications.  Keywords:Mobile Security, Application Security, API Security, Code Obfuscation, Dynamic Security, Runtime Application Self-Protection, RASP, App Attestation, Runtime Secrets, Dynamic Certificate Pinning, OWASP Mobile Top 10, API Attacks, AI Security, Cybersecurity, DevSecOps, Mobile App Development, Data Protection, Reverse Engineering, Tampering, Man-in-the-Middle Attack, Credential Stuffing, Secure Coding Source Material Links: - Infosecurity Magazine Article:https://www.infosecurity-magazine.com/news/92-mobile-apps-insecure/   - OWASP Resources (API Security, Mobile Security, Cheatsheets, MASTG): - https://owasp.org/www-project-api-security/   - https://owasp.org/www-project-mobile-top-10/   - https://owasp.org/www-community/controls/Certificate_and_Public_Key_Pinning   - Approov Resources (Runtime Secrets, Dynamic Pinning, API Security, Attestation, Obfuscation Limitations): - https://approov.io/   - https://securityboulevard.com/2022/07/hands-on-mobile-app-and-api-security-runtime-secrets-protection/   - https://approov.io/knowledge/owasp-top-10-mobile-risks-m5-insecure-communication   - https://approov.io/mobile-app-security/rasp/runtime-secrets/   - https://approov.io/mobile-app-security/rasp/api-security/   - https://approov.io/blog/mobile-api-security-best-practices   - https://approov.io/blog/is-code-obfuscation-worth-it   - https://approov.io/blog/why-the-owasp-mobile-application-security-project-is-critical   - Promon Resources (API Protection, Obfuscation, App Shielding): - https://promon.io/products/api-protection   - https://promon.io/resources/downloads/guide-app-code-obfuscation   - AI Attack Techniques & Mobile Security: - https://www.nowsecure.com/blog/2024/11/13/the-ai-expansion-of-the-mobile-app-attack-surface-2/   - https://symmetrium.io/how-hackers-use-ai-to-target-corporate-mobile-devices/   - https://www.akamai.com/blog/security/attacks-and-strategies-for-securing-ai-applications   - https://securityboulevard.com/2024/12/why-over-the-air-updates-are-key-for-mobile-app-security-in-the-ai-era/   - https://www.crowdstrike.com/en-us/cybersecurity-101/cyberattacks/ai-powered-cyberattacks/   - https://cyberpress.org/ai-driven-bad-bots-now-make-up/   - https://perception-point.io/guides/ai-security/ai-malware-types-real-life-examples-defensive-measures/   - General Security & Testing Resources: - https://brilliancesecuritymagazine.com/cybersecurity/runtime-secrets-protection/   - https://www.cobalt.io/blog/owasp-mobile-top-10-2024-update   - https://www.devopsdigest.com/avoiding-the-top-mobile-api-security-weaknesses   - https://www.guardsquare.com/   - https://www.cyberdefensemagazine.com/rasp-runtime-application-self-protection-in-mobile-application-security-a-strategic-imperative-for-the-modern-threat-landscape/   Sponsor Link:This episode is brought to you in part by Approov. Secure your mobile apps and APIs against modern threats. Learn more athttps://approov.io/.