RSAC 2025 Highlights AI Security Products and Agentic Defense
Summary
A HardenStance briefing on RSAC 2025 highlights vendor tools for securing generative AI and using agentic AI in security operations, alongside Unit 42 research describing nine AI-agent attack scenarios.
Key points
- Akamai introduced Firewall for AI to block unauthorized queries, adversarial prompts, and large-scale data scraping against AI applications and APIs.
- Cisco made AI Defense generally available and reported malware embedded in popular generative AI applications.
- CrowdStrike and Google announced AI agents and workflows for tasks including incident investigation, alert triage, response automation, and malware analysis.
- Palo Alto Networks unveiled Prisma AIRS for AI ecosystem security and expanded browser controls for more than 2,000 generative AI apps.
- Unit 42 described nine AI-agent attack scenarios involving potential information leakage, credential theft, tool exploitation, and remote code execution; it attributed many weaknesses to insecure design, misconfiguration, and unsafe tool integrations.
- Qualys expanded Total AI with testing for on-premises LLMs and detection of jailbreak and prompt-manipulation scenarios.
- Sandbox AQ expanded AQtive Guard into identity and AI SecOps use cases, including automated remediation.
Article Details
- Event Type
- Cybersecurity vendor announcements and research on AI security presented at RSAC 2025.
- Impact
- Announcements and research highlight controls for generative AI applications and agentic AI in security operations, including protection against misuse, prompt attacks, information leakage, credential theft, tool exploitation, and remote code execution. The article reports product launches and capability expansions but does not identify a specific breach or victim organization.
Vendors
AkamaiThe report highlights major product launches and research from Akamai, Cisco, CrowdStrike, Google, Palo Alto Networks, Qualys, and Sandbox AQ as the industry shifts from AI experimentation to practical controls,CiscoThe report highlights major product launches and research from Akamai, Cisco, CrowdStrike, Google, Palo Alto Networks, Qualys, and Sandbox AQ as the industry shifts from AI experimentation to practical controls,CrowdStrikeThe report highlights major product launches and research from Akamai, Cisco, CrowdStrike, Google, Palo Alto Networks, Qualys, and Sandbox AQ as the industry shifts from AI experimentation to practical controls,GoogleThe report highlights major product launches and research from Akamai, Cisco, CrowdStrike, Google, Palo Alto Networks, Qualys, and Sandbox AQ as the industry shifts from AI experimentation to practical controls,Palo Alto NetworksThe report highlights major product launches and research from Akamai, Cisco, CrowdStrike, Google, Palo Alto Networks, Qualys, and Sandbox AQ as the industry shifts from AI experimentation to practical controls,Qualysmajor product launches and research from Akamai, Cisco, CrowdStrike, Google, Palo Alto Networks, Qualys, and Sandbox AQ as the industry shifts from AI experimentation to practical controls, detection, andSandbox AQproduct launches and research from Akamai, Cisco, CrowdStrike, Google, Palo Alto Networks, Qualys, and Sandbox AQ as the industry shifts from AI experimentation to practical controls, detection, and autonomous defense.
Products
Agentic WorkflowsCrowdStrike launched Charlotte AI Agentic Response and Agentic Workflows, moving toward AI that can automatically investigate incidents, identify lateral movement, and support playbook execution.AI DefenseCisco made AI Defense generally available, emphasizing protection against misuse of AI apps and reporting malware embedded in popular Gen AI applications relied on by customers.AQtive GuardSandbox AQ expanded AQtive Guard beyond cryptography management into broader identity and AI SecOps use cases, including monitoring of human and non-human identities and automated remediation.Charlotte AI Agentic ResponseCrowdStrike launched Charlotte AI Agentic Response and Agentic Workflows, moving toward AI that can automatically investigate incidents, identify lateral movement, and support playbook execution.Cortex XSIAMCortex XSIAM 3.0 added Gen AI-driven email analysis to detect phishing intent, using language inference to score emails based on urgency, financial pressure, and other cues.Google Unified SecurityGoogle announced multiple AI agents across Google Unified Security, including tools for detection engineering, response automation, alert triage, and malware analysis.Prisma Access BrowserPalo Alto Networks also expanded Prisma Access Browser to control use of more than 2,000 Gen AI apps, showing how browser-based controls are becoming important as encryption limits network visibility.Prisma AIRSPalo Alto Networks unveiled Prisma AIRS to secure enterprise AI ecosystems, with capabilities such as model scanning, posture management, red teaming, runtime security, and AI agent protection.Total AIQualys expanded Total AI to test on-premises LLMs, detect more than 38 jailbreak and prompt manipulation scenarios, and identify “hallucination attacks” that trick models into suggesting malicious third-party packages.