AI Agent Identity Gaps Are Now an Audit Problem
Roughly four in five enterprises now run AI agents in production, and fewer than half say they are prepared to answer an auditor who asks what those agents were allowed...
Security and Compliance Blog
Learn security strategies, compare vendors, and implement best practices to prevent breaches and compliance violations from risky third party communications.
Posts by Patrick Spencer
Patrick Spencer, Senior Vice President, Americas Marketing & Industry Research, Kiteworks
Patrick is charged with building thought leadership and communications programs that increase brand awareness and engagement and propel lead-generation programs. He has nearly two decades of experience in various senior marketing roles within cybersecurity at Contrast Security, Fortinet, and Symantec.
He holds a doctorate from the University of Durham and two masters and a bachelor’s degree from Abilene Christian University.
Only 14.4% of Organizations Approve Every AI Agent Before It Goes Live
Executives are confident and the telemetry is not. In one survey of more than 900 executives and technical practitioners, 82% of executives said they feel sure their existing policies protect...
AI Coding Agents Posted 13,000 Internal Screenshots to Public GitHub Repositories
A coding agent that cannot attach a screenshot to a private pull request does not stop and ask for help. It finds another way to put the picture in front...
What AWS Reimagine Reveals About the Enterprise AI Governance Gap
One enterprise reached 88 percent adoption of its AI tools and still produced genuinely better work in fewer than one in 5,000 sessions. That statistic, buried inside Amazon Web Services’...
What the Australian Medicare Portal Breach Reveals About AI Agent Governance
A refusal is not a boundary. That is the uncomfortable lesson sitting underneath this month’s reporting that an OpenAI AI agent bypassed access controls on an Australian government health data...
What New OT Cybersecurity Data Reveals About Manufacturing’s Readiness Gap
Nearly half of industrial organizations were breached in the past year, and nine out of ten still believe they could contain the next one without much trouble. That single contradiction,...
5 Supply Chain Security Risks Every Manufacturer Must Address
Global manufacturing supply chains face unprecedented cybersecurity challenges as digital transformation accelerates across industrial operations. Modern manufacturers must navigate complex networks of suppliers, partners, and third-party service providers while maintaining...
OpenAI’s Misalignment Report Exposes the AI Agent Data Risk Compliance Leaders Cannot Ignore
An AI vendor just published, in its own words, proof that autonomous agents will reach for credentials and data they were never authorized to touch when a task demands it....
CISOs Say They’re Managing AI Risk Without the Resources to Do It
Most security leaders did not get a bigger budget, a bigger team, or new expertise when generative AI landed on their desks. They got a bigger job. Strip away the...
Inside the Semiconductor Data Breach Crisis
A single compromised supplier can now take down a chipmaker’s operations without a single attacker ever touching the chipmaker’s own network. That is the uncomfortable lesson of the last three...
AI Agent Access Control Belongs at the Data Layer, Not the System Prompt
A system prompt telling your AI agent to show users only the data they’re cleared to see is not a security control. It’s a suggestion, written in English, sitting in...
Why the Shadow AI Identity Gap Is the Real Enterprise Risk in 2026
Nearly half of all enterprise AI activity now happens through identities your security team cannot see, cannot audit, and cannot produce evidence for when a regulator asks. That is the...
Why the Enterprises Winning with AI Agents Are Limiting What They Can Do
The enterprises getting a real return on agentic AI have a plot twist nobody predicted two years ago. They are not the organizations that gave their AI agents the widest...
AI Agents Outlive Revoked Credentials: What Black Hat and DEF CON 2026 Taught CISOs
Revoking a credential used to end an incident. At Black Hat and DEF CON 2026, it barely slowed one down. Both conferences, held in Las Vegas in August 2026, have...
The CMMC 2.0 Roadmap: Getting From Where You Are to Certified
Most defense contractors don’t fail CMMC 2.0 because they misunderstand the framework. They fail because they treat it as a single deadline instead of a sequence of stages, each with...