Black Hat USA 2026: Vendors Announce AI Security Tools, Platform Updates and Research
Summary
A Black Hat USA 2026 vendor roundup covers AI-agent security tools, integrations and research, including prompt-injection defenses, agent identity controls, a $100,000 AI red-teaming challenge and threat-landscape findings.
Key points
- Menlo Security expanded its platform to sanitize files and strip hidden instructions before AI assistants and coding agents receive content, with data-loss prevention and per-agent access controls.
- Rubrik introduced short-lived, scoped tokens for individual AI-agent tool calls, with a gateway that checks behavior, access policies and session identity.
- CrowdStrike and AWS announced a $100,000 virtual AI red-teaming competition beginning August 31, challenging participants to exploit rogue agents using prompt injection and other techniques.
- Palo Alto Networks announced PAN-OS 12.2 Ceres with virtual patching, direct-to-IP attack blocking and AI security agents. Unit 42 also reported findings on vulnerabilities across open-source projects and malware communicating directly with IP addresses.
- Dataminr's 2026 mid-year report says the average patch window grew by 11 days in H1 2026, while alerts rose 69.2% from the second half of 2025.
- A Prophet Security survey of 250 IT and cybersecurity professionals found that 96% of organizations use or are evaluating AI for security operations, while 28% of alerts go uninvestigated on average.
Article Details
- Event Type
- Cybersecurity vendor announcements at Black Hat USA 2026, including product launches, integrations, platform expansions, research reports, and a security competition.
- Impact
- The announcements describe new and expanded capabilities for vulnerability remediation, threat detection and response, cyber resilience, AI-agent security, identity and access controls, and payment-fraud investigation. Reports highlighted longer average patch windows, rapid attacker breakout times, and increased AI-driven attacks. The article reports no specific breach or attack affecting an organization.
Vendors
Above SecurityAbove Security’s strategic investment from CrowdStrike Falcon FundAmazon Web ServicesCrowdStrike announced AI Unlocked: Agents of Chaos, a global AI red teaming competition created with AWS that challenges participants to exploit rogue AI agents using prompt injection and other techniques to betterArmorCodeArmorCode launches vulnerability remediation agentsCommvaultCommvault integrates Threat Scan with Google Threat IntelligenceCrowdStrikeAbove Security’s strategic investment from CrowdStrike Falcon FundDataBahnDataBahn launches Federated Search and OrchestrationDataminrDataminr threat landscape reportFireMonFireMon integrates with Palo Alto NetworksGoogleCommvault integrates Threat Scan with Google Threat IntelligenceIntel 471Intel 471 unveils new AI capabilitiesMenlo SecurityMenlo Security extends platform to secure AI assistants and coding agentsMicrosoftThe solution eliminates standing credentials by generating short-lived, scoped tokens for individual tool calls and integrating with identity providers (including Okta and Microsoft Entra ID).MimecastMimecast unveils Agent Risk Center and Managed Threat ResponseOktaThe solution eliminates standing credentials by generating short-lived, scoped tokens for individual tool calls and integrating with identity providers (including Okta and Microsoft Entra ID).Palo Alto NetworksFireMon integrates with Palo Alto NetworksProofpointProofpoint announces OEM ProgramProphet SecurityProphet Security research on AI in Security Operations Recorded FutureFounding members also include SentinelOne and Recorded Future.RubrikRubrik adds agent identity controls to Agent CloudSentinelOneFounding members also include SentinelOne and Recorded Future.ServiceNowServiceNow announces new security solutions and AI Center for Cyber DefenseSOCRadarSOCRadar launches Human Identity ExposureSurf AISurf AI announces new integration and platform expansion TenableTenable debuts open source AI agent exchange and expands AI risk coverageThalesThales releases Luna 8TrustmiTrustmi announces new AI investigation agent and new payment fraud threatsVanishIDVanishID adds AI exploitability management and external identity protection control
Products
Agent CloudRubrik adds agent identity controls to Agent CloudAgent471Intel 471 announced two new AI capabilities in the Verity471 platform: MCP471 and Agent471.AI Exploitability ManagementVanishID adds AI exploitability management and external identity protection controlAI Investigation AgentTrustmi announces new AI investigation agent and new payment fraud threatsAnya agentsArmorCode announced four new Anya agents designed to help security teams analyze cloud risks, assess vulnerability exploitability, identify mitigation strategies, and coordinate patch orchestration.ClumioThis announcement adds to Commvault’s ongoing collaboration with Google Cloud, including expanded cyber resilience capabilities for Google Cloud environments via Clumio, and support for Google Cloud workloads.Commvault Threat ScanEnterprise cyber resilience company Commvault announced a new integration that will incorporate Google Threat Intelligence into Commvault Threat Scan workflows.Context Graphfrom the Claude environment, maps the connection and access path to an accountable owner inside the Context Graph, and operationalizes remediation, including disabling unsanctioned MCP integrations and lingeringContext Risk GraphThe company also added new Context Risk Graph capabilities for expanded attack path analysis, network reachability, and patch management.CrowdStrike FalconAbove Security’s strategic investment from CrowdStrike Falcon FundCrowdStrike Falcon Next-Gen SIEMThrough the partnership, CrowdStrike customers will be able to extend their Falcon deployment, powering ready-made insider risk investigations with Falcon Next-Gen SIEM telemetry.CyberAgents ExchangeTenable launched CyberAgents Exchange, a free, open source AI agent exchange built for cybersecurity teams.Exposure Reduction Operationsannounced an integration with Claude’s Compliance API, alongside the general availability of Exposure Reduction Operations, extending the platform to govern AI model connectivity alongside identity, cloud, and SaaSExternal Identity ProtectionVanishID adds AI exploitability management and external identity protection controlGoogle CloudThis announcement adds to Commvault’s ongoing collaboration with Google Cloud, including expanded cyber resilience capabilities for Google Cloud environments via Clumio, and support for Google Cloud workloads.Google Threat IntelligenceCommvault integrates Threat Scan with Google Threat IntelligenceHuman Identity ExposureSOCRadar launches Human Identity ExposureIncydrMimecast announced a new expansion of its Incydr technology that discovers every AI agent and tool operating across an organization and ties each one back to the human who deployed it.Luna 8Thales releases Luna 8Managed Threat Response (MTR)The platform will also include a relaunched Managed Threat Response (MTR) service and expanded Google Workspace integrations.MCP471Intel 471 announced two new AI capabilities in the Verity471 platform: MCP471 and Agent471.Menlo Agent Runtime SecurityMenlo Security expanded its cloud-based Menlo Agent Runtime Security platform to protect AI assistants and coding agents from prompt injection attacks and data exfiltration.Microsoft Entra IDThe solution eliminates standing credentials by generating short-lived, scoped tokens for individual tool calls and integrating with identity providers (including Okta and Microsoft Entra ID).PAN-OS 12.2 CeresPAN-OS 12.2 Ceres introduces Advanced Virtual Patching, automated blocking for direct-to-IP attacks, six AI security agents, and expanded hardware for securing AI data centers and critical infrastructure.Rubrik Agent IdentityRubrik expanded its Agent Cloud platform with Rubrik Agent Identity to manage autonomous AI agent access permissions at runtime.Strata Cloud ManagerFireMon announced it has completed its product integration with Palo Alto Networks Strata Cloud Manager to deliver intelligent and interoperable solutions that enable joint customers to innovate faster and solve theirTenable One AI ExposureThe company also unveiled new Tenable One AI Exposure capabilities that expand coverage across every major AI platform and key developer tools.Verity471Intel 471 announced two new AI capabilities in the Verity471 platform: MCP471 and Agent471.