Maya Anaya

25 de octubre de 2026

When an AI Agent Connects to Work Apps, the Permission Boundary Moves

Connected AI agents can reach more than a user meant to share. Map connector scope, source permissions y endpoint controls before scaling employee access.

21 de octubre de 2026

AI Agents Should Not Be Their Own Security Witness

An agent log is not independent proof. Learn how to separate agent intent, execution y evidence, and test the security boundary around employee AI use.

14 de octubre de 2026

An AI Agent's Workaround Is a Security Decision

An agent can finish a task while changing its authority. Review recovery routes, data boundaries y verified outcomes after Anthropic's October 9 report.

11 de octubre de 2026

AI Can Find More Bugs. Who Owns the Fix Queue?

AI vulnerability discovery is speeding up, but a finding is not a fix. Build a governed path from reproducible evidence to patch, release y regression test.

27 de septiembre de 2026

The AI Data Leak You Miss Is the Agent Acting on Someone's Behalf

AI agents can move sensitive data with legitimate user access. Learn how to test on-behalf-of traffic, block risky transfers y prove control outcomes.

10 de septiembre de 2026

Deje de preguntar si su agente de IA es autónomo. Pregunte quién es responsable de sus acciones.

AI agents can act autonomously, but accountability stays human. Learn four practical controls for ownership, permissions, approvals y auditability.

7 de septiembre de 2026

La nueva prueba de gobernanza de IA: ¿puedes detener a un agente a mitad de tarea?

AI agent governance now depends on runtime visibility, scoped permissions, approval gates y a tested kill switch—not just pre-deployment review.

23 de agosto de 2026

Los agentes de IA están obligando a que el zero trust salga de la red

AI agents demand action-level zero trust. Learn how to replace standing access with bounded authority, verified tool calls y an action ledger.

29 de julio de 2026

La Soberanía en IA no es una Ubicación en la Nube. Es un Plano de Control.

IBM's new APAC AI-first blueprint puts sovereignty at the centre of enterprise AI. Here is why data residency alone will not control shadow AI or agent risk.

26 de julio de 2026

Su despliegue de agentes de IA tiene un problema de deuda de aprobación

New joint cyber guidance says never give AI agents broad access. Learn how approval debt builds, why discovery is not governance, y what to control.

22 de julio de 2026

El 54 % de las empresas han tenido un incidente con un agente de IA. La causa raíz es la identidad.

New research shows most enterprises let AI agents share credentials. Here is what that means for your blast radius - y how AI governance closes the gap.

9 de julio de 2026

Los agentes de IA no solo actúan. Recuerdan.

AI agent memory changes enterprise risk. Learn how CISOs should govern stored context, access revocation, memory poisoning, retention, y audit logs.

4 de julio de 2026

Tu empresa tiene agentes de IA. Tus controles no han alcanzado ese nivel.

IBM y NIST just made the enterprise AI problem harder to ignore: agents are scaling faster than governance, and static guardrails are not enough. Here's what mature control actually looks like.

17 de mayo de 2026

El Riesgo del Agente IA que Nadie Puede Corregir con una Regla DLP

AI security has moved beyond prompt leakage. Learn why agent permissions, mobile AI usage, y action-level auditability are the next enterprise governance gap.

10 de mayo de 2026

Forrester dice que un agente de IA causará una brecha empresarial importante en 2026. La mayoría de los equipos de seguridad no están preparados.

Forrester predicts an agentic AI deployment will cause a major public breach in 2026 — y it won't come from external attackers. Here's what the data shows and what enterprise security teams need to do now.

6 de mayo de 2026

Tu SBOM Está Perdido la Mitad del Panorama. Bienvenido a la Era de los AI-BOMs.

Shadow IT became shadow AI. Now enterprises need AI Bills of Materials to track every model, agent, MCP server, y agentic workflow in their environment. Here's why your SBOM can't cover it.

3 de mayo de 2026

Tu proveedor de IA decide qué puedes hacer con sus herramientas. Al Pentágono no le gustó esa respuesta.

OpenAI is gatekeeping GPT-5.5 Cyber. Anthropic fought the Pentagon over guardrails. Both stories reveal the same uncomfortable truth: your AI vendor controls your AI governance — unless you build your own layer.

1 de mayo de 2026

Las mismas herramientas de IA que adoran tus desarrolladores se están usando para hackearlos

North Korean hackers used ChatGPT and Cursor to steal $12M. PyTorch Lightning was compromised in a supply chain attack. AI tools are now both the productivity layer and the attack surface — here's what enterprise security teams need to know.

27 de abril de 2026

Sombra de IA, Identidad Agentiva y Por Qué Bloquear la IA Falla - con Abbas Kudrati

Aona AI interviews Abbas Kudrati on shadow AI, agentic identity, AI governance, y why blocking AI tools often creates more risk than it removes.

26 de abril de 2026

Tus empleados confían en Microsoft Teams. Los atacantes cuentan con ello.

A new malware campaign called Snow exploited Microsoft Teams to bypass enterprise defenses. Here's what it reveals about the blind spots in most AI governance strategies — y what to actually do about them.

19 de abril de 2026

Cuando Tu Agente de Codificación de IA Se Convierte en el Atacante: La Amenaza de Inyección de Prompts que las Empresas Ignoran

Security researchers hijacked Claude, Gemini, y GitHub Copilot using a new prompt injection technique — stealing API keys with a single PR title. Here's what enterprise security teams need to act on now.

12 de abril de 2026

Agentes Sombríos en 2026: La Guía del CISO para Agentes de IA Construidos por Empleados

Employees are building AI agents that touch CRM, email, files y workflows outside IT visibility. Learn the governance controls CISOs need now.

5 de abril de 2026

Un agente de IA hackeó un sistema operativo reforzado en cuatro horas. Esto es lo que significa para la seguridad empresarial.

An autonomous AI agent compromised a hardened OS kernel in four hours. Combined with growing shadow AI exposure, here's what enterprise security teams need to do now.

1 de abril de 2026

Microsoft acaba de añadir controles para IA oculta en Edge. Por qué eso no es suficiente.

Microsoft announced Shadow AI protection in Edge for Business at RSAC 2026. It's a useful control — but browser-level DLP alone doesn't give enterprises the full AI governance picture. Here's what it misses.

26 de marzo de 2026

¿Qué es un Agente de IA? Guía Empresarial para Líderes de Negocio

26 de marzo de 2026

Riesgos de Seguridad para Agentes de IA: 8 Vectores de Ataque que Todo CTO Debe Conocer

Discover the 8 critical AI agent security risks every CTO must understand — from prompt injection to privilege escalation. Learn how to test y defend your AI systems.

23 de marzo de 2026

Agentes Shadow IA: El Riesgo Invisible en Tu Empresa

Employees are deploying autonomous AI agents—Cursor, Windsurf, GPT Actions—without IT visibility. Here's what the risk looks like y how to find them.

23 de marzo de 2026

Servidores MCP y Seguridad Empresarial: Lo que su equipo de seguridad necesita saber

Model Context Protocol (MCP) is the new enterprise attack surface. How MCP servers expose internal tools to AI agents—and the specific risks your security team must address.

23 de marzo de 2026

Cumplimiento de IA Agente: Implicaciones para GDPR, SOC 2 e ISO 27001

Agentic AI creates specific compliance gaps under GDPR, SOC 2, y ISO 27001. Here's what breaks and how to address data residency, audit trails, and consent.

19 de marzo de 2026

Cumplimiento de Microsoft Copilot 2026: Controles para CISOs en Empresas M365

Microsoft Copilot can expose sensitive M365 data through permissions, retention y eDiscovery gaps. See the compliance controls CISOs need before rollout.

16 de marzo de 2026

Cumplimiento de IA oculta 2026: el manual para CISOs para todas las regulaciones

GDPR, EU AI Act, APRA, SOC 2, ISO 42001 — Shadow AI creates exposure under all of them. This CISO playbook maps every regulation, the enforcement risks, y the governance steps that actually reduce liability.

16 de marzo de 2026

Agentes de IA en la sombra: 7 riesgos que tu stack de seguridad no puede ver en 2026

Shadow AI agents bypass CASB, DLP, y SSO logs without a trace. Discover the 7 invisible risks - and the CISO controls that find them before damage is done.

11 de marzo de 2026

Trae Tu Propio Modelo: La Amenaza de IA Sombra que Tu Red No Puede Ver

Employees are running powerful AI models locally on corporate laptops — no cloud, no network traffic, no audit trail. BYOM is the shadow AI blind spot your security tools will miss.

13 de febrero de 2026

Agentes de IA Oculta: 7 vectores de ataque que todo CISO debe conocer en 2026

Unmanaged AI agents exfiltrate data, abuse credentials, y move laterally without triggering a single DLP alert. Here are the 7 attack vectors security teams must address now.

10 de febrero de 2026

El problema del Shadow IA: por qué las herramientas de IA favoritas de tus empleados son tu mayor punto ciego

Shadow AI is the fastest-growing security blind spot in enterprise. Learn why blocking AI tools fails, y how to govern AI adoption with visibility, guardrails, and real-time coaching.

29 de octubre de 2025

7 amenazas de seguridad de IA para empresas australianas en 2026, con defensas

From prompt injection to AI supply chain attacks, Australia faces a distinct AI threat landscape in 2026. Security leaders share the seven risks you must address — y the controls that work.