Salt Security

BIG NEWS! Salt Security’s 1H 2026 State of AI and API Security report just dropped! 🙌 Are you up to date on your AI/API security insights? Bottom line: You can’t secure AI without securing the APIs that power it. Download the report: content.salt.security/State-of-AI-AP… Read the blog: salt.security/blog/the-era-o… #cybersecurity #AIsecurity #APIsecurity #AgenticAI #AIagents #SaltLabs #technology

Are you wondering how to secure your org's evolving Agentic threat landscape? Well, we have the event for you. Come join Salt Security’s exclusive Agentic Security Workshop at Shangri-La, Shard, London, on the 6th of August 🌐 Seats are limited so book your spot today! Register here: events.salt.security/aiagentsecurit…

Attackers are scanning for your MCP servers and AI agent credentials right now. 49+ IPs, structured recon. MCP = access to your internal APIs, DBs, file systems. Most orgs have zero visibility into this traffic, but Salt catches it🧂 Read up here @SANSInstitute: isc.sans.edu/diary/rss/33150

Researchers weaponized AI hallucinations into a botnet: pre-register the fake package names LLMs invent, wait for agents to pull & execute. 85-100% success rate. How do you prevent this? Salt Security flags the anomalous API calls agents shouldn't be making 🛑 Read more @SecurityWeek: securityweek.com/hallusquatting…

Attention all #cybersecurity enthusiasts! Salt Security is #hiring 😎 We’re expanding our Customer Success team and searching for dynamic Technical Account Managers to join us. Please share with your network or apply here: salt.security/job-board?utm_…

In the agentic era, you can’t secure what you can’t see, making Salt Cloud Connect for AWS an absolute game changer. Organizations can instantly discover APIs, MCP servers, and agentic activity across @awscloud environments (without deploying sensors or routing traffic). Check how it’s done → youtu.be/gH9uFXrqbpM

Come say hey in Mandalay Bay! Salt Security will be at Black Hat and we’d love to chat! 😎 Swing by Booth #5938 to: - Get a live demo - See your Agentic Graph - Talk through how Salt is redefining Agentic Security - Learn about Salt Code We have super fun activities you don’t want to miss! Check them out here: events.salt.security/saltsecurityat…

@getaigovernance @nudge_security @oasissec @silverfort @SnapLogic @CycodeHQ @Hacker0x01 @hiddenlayersec Thank you for sharing! 🎉

Best AI Security Platforms 2026 Expert Guide mindguard @nudge_security @oasissec @SaltSecurity @silverfort @SnapLogic WitnessAI @CycodeHQ @Hacker0x01 @hiddenlayersec getaigovernance.net/blog/best-ai-s…

@ForbesTechCncl Thank you for sharing! This is a must-read💡

How AI Agents Are Forcing A Rethink Of Cybersecurity hubs.li/Q04nG2870 Written by Michael Nicosia of @saltsecurity

“Cybersecurity has historically been built around protecting users, devices and infrastructure. AI agents blur those boundaries. They operate as both user and system, authenticating, accessing data and triggering actions, often with broad permissions and without direct human involvement...” Says Michael Nicosia, Salt Security’s COO and Co-Founder, in @Forbes. Read the entire article for key insights on how AI is reshaping cybersecurity: forbes.com/councils/forbe… #Forbes #cybersecurity #AIsecurity

282 of 444 iOS AI apps leak LLM API keys in network traffic. 92 have open relay backends, zero auth required. One token expires in 2125. 72% still unpatched 3 months later. This is an API posture crisis. What could prevent this? The 92 open relay backends accepting unauthenticated AI API traffic are a direct OWASP API2 failure. Salt Security's API discovery would surface these anonymous-access proxy endpoints as critical posture risks. The LLMjacking pattern, sudden AI API call spikes from unexpected source IPs, is exactly the behavioral anomaly Salt's platform detects in real time. Read more about the incident @TheHackersNews: thehackernews.com/2026/06/282-io… #APISecurity

Did you miss out on the live webinar with @CrowdStrike and Salt Security? It’s okay! We have it on demand. Watch the video here: youtu.be/I-FUP--F9so

August is coming up fast 👀 Are you going to be in Vegas for Black Hat 2026? If you are, we’d love to see you! Come visit Salt Security at booth #5938 to connect and see how we’re redefining Agentic Security. We’ve got plenty of fun events to join so check out what Salt has in store (seriously, you’re going to want to take a look): events.salt.security/saltsecurityat…

Nissan just disclosed a data breach affecting employees across the US, Canada, Mexico, and Brazil. Payroll records, Social Security numbers, banking data. The root cause? An unauthenticated HTTP endpoint in Oracle PeopleSoft. No credentials needed. ShinyHunters exploited it at 300+ instances across 100+ organizations. This is OWASP API2 in the wild: broken authentication on an API that enterprises trusted because it was "internal." PeopleSoft's REST API surface is extensive, and one misconfigured endpoint was enough to expose sensitive HR data at global scale. Salt Security's platform monitors API behavioral baselines continuously. Bulk exfiltration of payroll records through APIs that normally see routine, low-volume HR queries? That's an anomaly Salt catches before the breach notification lands. The question isn't whether your ERP has API endpoints. It does. The question is: do you know which ones are unauthenticated? #DataBreach #OracleEBS #OWASP

Oracle EBS CVE-2026-46817 (CVSS 9.8) is being actively exploited. Unauthenticated HTTP takeover of the Payments component. 450+ instances exposed online. No POC needed. Same playbook Clop used against Harvard & WaPo in 2025. Salt can find these unauthenticated endpoints before attackers do 🔍

PSA: Salt Security will be at Black Hat this August. Will we see you there? 👀 Check out the fun activities we’ll have going on: events.salt.security/saltsecurityat…

Can you see where your AI agents, MCP servers, and API-connected workflows are communicating? With Salt Cloud Connect for @databricks, teams can quickly discover Databricks MCP servers, understand what they do, see the APIs they connect to, and identify potential risk or posture gaps. It’s time to get full visibility into the Agentic Action Layer. Discover more on our YouTube channel: @SaltSecurity" target="_blank" rel="nofollow noopener">youtube.com/@SaltSecurity #APISecurity #AISecurity #AgenticAI #Databricks #MCP

Are you registered for the joint webinar with @CrowdStrike + Salt security? Tune in on June 30th to learn how an AI-native security architecture can protect the full chain from intent to action. We’ll deep dive into how to secure: - Model runtime, prompts, inference, and LLM behavior with CrowdStrike Falcon® AIDR - APIs, MCPs, and AI-connected services with Salt Security - Shadow and over-permissioned AI infrastructure before attackers exploit it Don’t miss out: events.salt.security/crwdaidr?utm_m…

Too often, cybersecurity evaluations reward what looks good in week one: fast setup, clean dashboards, polished reports, and checkbox coverage. But real risk doesn’t show up in a controlled demo. It shows up six months later, across messy environments, distributed teams, ownership gaps, and patient attackers. And with AI agents connected to APIs, weak authorization paths don’t just stay hidden. They scale. It’s time to evaluate security tools for what happens after the POV: across real teams, real workflows, real data, and real risk. Read the blog: salt.security/blog/we-traine…