Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
The “City-Forum” Campaign - An advanced attacker is targeting Salesforce and ServiceNow instances worldwide
7+ hour, 36+ min ago (1003+ words) This makes this campaign noteworthy - the threat actor created their own toolset, based on research and techniques which are not well documented online. They studied the services to map different common data leak vectors - this is an advanced actor. The…...
Posture tells you what an agent can reach. Runtime has to control what it's doing right now.
2+ week, 1+ day ago (424+ words) Reco already maps every agent's blast radius: its identity, its permissions, what it's connected to, what it's actually doing. That's posture, and it answers the question a security team asks first: what could go wrong here? It doesn't answer the…...
Reco Launches Agent Security for Enterprise Ecosystems
1+ mon, 2+ week ago (434+ words) ALTAMONTE SPRINGS, FL — June 25, 2026 — Reco, the AI and agent ecosystem security company, today announced Reco Agent Security, which expands the Reco Platform with advanced capabilities that prevent data exposure, unintended use and process disruption caused by AI agents operating across…...
You can now govern Claude the same way you govern Okta, Salesforce, and M365
1+ mon, 4+ week ago (990+ words) A few weeks ago I was speaking with a CISO at a large financial institution. I asked him which AI tools his company was using. He said: "We're only on Copilot." We pulled up Reco. Number one usage across his…...
OpenAI Daybreak and Codex Security, Explained
2+ mon, 13+ hour ago (763+ words) Gal is the Cofounder & CPO of Reco. Gal is a former Lieutenant Colonel in the Israeli Prime Minister's Office. He is a tech enthusiast, with a background of Security Researcher and Hacker. Gal has led teams in multiple cybersecurity areas…...
Hacking Salesforce Sites With an LLM Agent
2+ mon, 1+ week ago (1643+ words) ShinyHunters has scanned thousands of Salesforce Sites. They used a modified version of "AuraInspector". They possibly used an LLM to code their framework, mods, reconnaissance tools, and other aspects of their workflow. But the next step is to use AI…...
Inside the ShinyHunters Experience Cloud Campaign: IOCs, Detection Logic, and What's at Risk
2+ mon, 4+ week ago (527+ words) Reco is actively investigating a campaign attributed to ShinyHunters targeting Salesforce Experience Cloud sites. This post covers what we know about the threat actor, what they're doing, and — most importantly — how to detect it. Their extortion model is strict pay-or-leak:…...
5 misconfigurations Mythos-class AI could find in your environment
2+ mon, 3+ week ago (633+ words) The attack surface isn't in your unknown unknowns. It's in the defaults your team inherited three years ago and never went back to check. The uncomfortable truth about Mythos-class AI as an attack tool is that it doesn't need sophisticated…...
AI Compliance Framework for SaaS Risk Management
3+ mon, 1+ week ago (712+ words) An AI compliance framework is a structured system of governance, policies, controls, and oversight mechanisms that ensures AI systems operate within legal, regulatory, and ethical boundaries. It helps organizations mitigate risks such as misuse, bias, privacy breaches, and accountability gaps,…...
We Rewrote JSONata with AI in a Day, Saved $500K/Year
4+ mon, 2+ week ago (978+ words) A few weeks ago, Cloudflare published “How we rebuilt Next.js with AI in one week.” One engineer and an AI model reimplemented the Next.js API surface on Vite. Cost about $1,100 in tokens. The implementation details didn’t interest me…...