Emerge

09/02/2026

94% of enterprises are confident their AI agents don't have too much access. Only 33% have actually verified it.

New research surveying 202 enterprise security leaders found that gap isn't just theoretical: 65% have already seen an AI agent act outside its intended scope, and 29% saw real damage, data exposure, financial loss, or worse. Most companies still need hours and manual steps to catch it.

Contact us if you'd like to review your security posture.

EMA survey finds 65% of enterprises have seen AI agents act beyond intended scope

09/01/2026

"It's in the cloud" and "it's backed up" feel like the same sentence. They're not.

Microsoft's own documentation says it plainly: their platform guarantees uptime, not point-in-time backup. Once something ages out of the recycle bin, even Microsoft can't get it back.

Our latest post breaks down the gap, and why it matters even more now that AI tools are touching more of your data.

Cloud platforms guarantee uptime and infrastructure resilience, not data backup. Emerge provides backup services needed to protect your data.

08/31/2026

GenAI-related lawsuits in the US grew 978% between 2021 and 2025. Most of that risk is landing on the companies deploying AI, not the vendors building it.

A new Gallagher Re report, produced with MIT and Testudo, found that standard cyber, E&O, and general liability policies were never built for this kind of exposure, and coverage often falls into the gaps between them.

Contact us to discuss our POV on cyber insurance.

A growing category of AI-native risks — including hallucinations, algorithmic bias and model drift — falls outside the scope of standard insurance policies, according to Gallagher Re report.

08/28/2026

We have two Q3 security offers that may interest you, both with a value-add attached:

Sign up for co-managed MDR with 24x7 SOC monitoring, and get a year-long Arctic Wolf Incident Response Retainer, or shore up the fundamentals with our Security Stack + Cyber-Ready Services, and get a year of End User Access Management.

These offers expire September 30. Reach out today.

08/27/2026

One website visit, with no login required. That's all it takes to permanently poison the AI agent running on a developer's machine.

Researchers found that NVIDIA's NemoClaw exposed its local AI model to any webpage a browser visits, letting an attacker quietly rewrite how the model reads instructions, an invisible change that survives every future conversation and can't be caught by normal safeguards. It's patched now, but only on Mac and Linux.

Another reminder that "local" and "sandboxed" don't automatically mean secure.

NVIDIA NemoClaw's Windows-host Ollama path exposes an unauthenticated API that DNS rebinding could use to plant persistent model instructions.

08/26/2026

Copilot doesn't grant any new access. It just makes everything you already had access to instantly searchable, including that folder shared with "everyone" back in 2023.

Our latest post breaks down why the license is the easy part, and what actually has to happen before and after rollout to get real value from it.

Contact us to discuss how your organization can safely extract the most value from Copilot.

A large share of Fortune 500 companies have licensed Microsoft 365 Copilot, yet most studies show daily employee usage remains below 50%.

08/25/2026

New CrowdStrike research shows voice phishing doubled in the past six months, and device code phishing, a newer technique that abuses a legitimate Microsoft login process, jumped 15-fold.

Reach out if you'd like to discuss how we can help strengthen your security posture.

Newer social engineering techniques help attackers ignore entrenched security controls and limit the evidence they leave behind.

08/24/2026

Most companies don't shop for a Managed Service Provider. They inherit one, or they hire whoever answers the phone fastest during an outage.

Our plain-English guide breaks down what an MSP actually does and the handful of questions worth asking before you pick one under pressure.

A Managed Service Provider, commonly called an MSP, is a company that runs all or part of your technology operations on your behalf.

08/21/2026

27 million records. No hacking required.

A new extortion group didn't break into anything to steal data from 13 organizations, including governments, schools, and airlines. They just found misconfigured Microsoft Power Pages portals that let anyone read the data behind them. Yet another sign that bad actors leave no stone unturned in their search for vulnerabilities.

Give this article a read. Then contact us to discuss your security posture.

The exfiltrated data may be related to misconfiguration of Microsoft Power Page portals, according to a new report.

08/20/2026

Here are two ways to strengthen your security posture this quarter, each with a value-add.

Get co-managed MDR with 24x7 SOC monitoring, and Emerge throws in a year-long Arctic Wolf Incident Response Retainer at no cost, so if something gets through, help is already standing by. More here: https://emergeits.com/wp-content/uploads/Emerge-IT-Services-Incident-Response-Q3-2026-Promo.pdf

Prefer to shore up the fundamentals first? The Security Stack + Cyber-Ready Services bundle includes a year of End User Access Management, closing the door on help desk impersonation scams. More here:https://emergeits.com/wp-content/uploads/Emerge-IT-Services-End-User-Access-Q3-2026-Promo.pdf

Both Q3 offers end September 30.