Unosecur

A great start to Black Hat week at the CISO Retreat. Thank you to Ross Young, CISO Tradecraft, and everyone who joined the conversations throughout the day. It was valuable to hear how security leaders are approaching identity risk, access complexity and the operational challenges behind both. The conference day doesn't end when the sessions do. Tonight, we're bringing a small group together for good food and the conversations that usually happen once the crowds disappear. If you'd like to join us: https://luma.com/9rzsw1np #BlackHat #CyberSecurity #IdentitySecurity #IAM #SecurityLeadership #ExecutiveNetworking Chris Gray nick terkay Brian Laing Santhosh Jayaprakash

Your AI agent just read a support ticket. Hidden inside it: instructions to leak confidential data. And because that agent can actually do things, it does. That is the shift nobody planned for. Prompt injection used to mean a bad answer. With MCP, the same poisoned text can trigger a real tool call. Read a file. Send an email. Delete a record. The model reasoning and the execution authority now live in the same workflow. Filtering the prompt will not save you. The fix sits outside the model: least privilege, scoped credentials, human approval that shows what actually happens, and full execution logs. We broke down how MCP tool poisoning works and how to contain it before an injection does. https://lnkd.in/dkByFHNS   #MCPSecurity #PromptInjection #AIAgents #Cybersecurity #AISecurity

Bags packed. Badges ready. Black Hat starts tomorrow. 🖤 Come find the Unosecur team in Vegas and let's talk about securing every identity in the agentic enterprise. See you on the floor. 🤝 Santhosh Jayaprakash Brian Laing nick terkay Chris Gray #BlackHat #BHUSA #AISecurity #IdentitySecurity #NHI

Every identity has a story. Last week, we gathered security leaders from across the BFSI ecosystem for the #Mumbai chapter of The CISO Lounge. An evening built around honest conversations, meaningful connections, and great food, with no agendas beyond bringing the community together. Here's a glimpse of the conversations that made the evening memorable. This is just the beginning. More chapters are on the way. 🥂 #Cybersecurity #CISO #IdentitySecurity Santhosh Jayaprakash Pranav Vattaparambil Abhishek Arya Sanchay Raj Shilu Thomas Priyanshi Mittal Pradeep Mishra Ajay Shekar

Today, Unosecur is announcing the MCP Auth Gateway. AI agents are already reading data, calling tools, and executing changes across your systems. Most were never provisioned as privileged actors. They accumulated access over time, with no owner and no audit trail. 68% of organizations have no identity controls for AI or LLMs. 88% still define privileged users as human only. By 2029, half of all agent attacks will weaponize the agent's own access rights, not a flaw in the model. The MCP Auth Gateway sits inline between your agents and the tools, data, and MCP servers they call. Every request is checked against policy at the individual tool call. Access can be revoked at runtime, without redeploying the agent. Every action is logged and attributed. See it in action book a demo : https://lnkd.in/e-JaWCyp Santhosh Jayaprakash Abhishek Arya nick terkay Gautam B. Priyanshi Mittal #AIAgentSecurity #ModelContextProtocol #AIGovernance #ZeroTrust #AgenticAI #AISecurity

A single prompt triggered a full VM escape in Claude Cowork. SSH keys and cloud credentials on the host, exposed. Zero alerts. The kernel bug, CVE-2026-46331, gets patched. That's the easy part. The harder question is why did the agent have a path to every credential on the machine in the first place? Sandboxing draws a boundary. It doesn't scope what's reachable once that boundary is crossed. That's the SharedRoot chain, and patching the CVE doesn't fix the architecture that put credentials one hop away from a compromised process. Patches fix vulnerabilities. Identity-first governance fixes the exposure. Full breakdown here: https://lnkd.in/dbZ5g_zT At Unosecur, this is the layer we build for. Not another sandbox, but identity security that knows what an agent should reach, so a boundary breach doesn't automatically mean a credential breach. #AIAgentSecurity #MCPSecurity #ZeroTrust #IdentityGovernance #AgenticAI #InfoSec

🎰 Vegas, but make it identity 🎰 Ask a security team to list every human with production access, and they can. Ask them to list every AI agent, and most go quiet. We'll be in Las Vegas at Mandalay Bay this year, and we'd love to walk you through how we map every identity in your stack, human, non-human, and AI agents. Catch us on the show floor. Miss us there, and we'll still be around at: 🛡️ CISO Retreat, Monday August 3 🍽️ CISO Supper Club, Tuesday August 4 Grab a seat before the table fills up, https://lnkd.in/dqtthKUS Santhosh Jayaprakash Brian Laing Chris Gray nick terkay #BlackHat2026 #CISO #Cybersecurity #LasVegas

Cloud gave us infrastructure debt. SaaS gave us application debt. AI agents are now creating permission debt. Each access grant to GitHub, Jira, Slack, or a database makes sense on its own. Months later, no one can explain what an agent can still reach, or why. We break down where this debt comes from and the three capabilities that pay it down. Full piece here: https://lnkd.in/ggsxSgFn #AIAgents #IdentitySecurity #MCP

We’ll be joining the CISO Retreat during Black Hat week in Las Vegas. Unosecur is proud to be one of the event sponsors, supporting a day built around peer learning, practical discussion, and real conversations between CISOs and senior security leaders CISO Tradecraft® Ross Young We’ll also be taking part in the agenda with a short Unosecur spotlight session before the day continues with networking, drinks, and mini golf at PopStroke. 📅 August 3, 2026  📍 Las Vegas We’re looking forward to meeting the security leaders attending and being part of the conversations throughout the day. Attending the CISO Retreat? Come say hello to the Unosecur team. Register here: https://lnkd.in/g3iHDipv Santhosh Jayaprakash Brian Laing nick terkay Chris Gray #BlackHat2026 #CISO #Cybersecurity #IdentitySecurity #Unosecur