MIND Security

09/04/2026

Around here, stress free is a year-round project. This weekend it's simply the plan.

☀️ Laptops closed. Notifications off. The out-of-office reply doing all the work.

Have a Stress Free Labor Day weekend, from all of us at MIND.

09/03/2026

🌴 "Let's take this offline..."

This week at our MIND QBR we actually took it offline. Offline turned out to be a beach in Miami. Four Stress Free days of in-person planning and fun. Stuff that video calls never quite capture.

Thanks to everyone who made the week happen.

09/02/2026

Every company has an AI policy now. It's a PDF. Everyone acknowledged it in the onboarding portal, right after the fire safety video.

The AI tools never had to complete it.

MIND surveyed 124 CISOs. 90% of enterprises have deployed AI and 70% struggle to enforce their security policies around it.

A policy that can't keep up with machine speed stops at the page it's written on. The research lays out six controls that close the gap. Read the report: https://hubs.la/Q04wfDNn0

09/01/2026

Every company runs a second records system it never audits. It's called the support queue.

Tickets and case notes collect diagnoses, prescriptions and home addresses, none of it labeled on the way in.

Now the group claiming the McKesson breach says it doesn't know how many patients are in the 284 million records it took. Free text nobody classified is hard to count, even for the people who stole it.

New on Mind the Breach, why unstructured data is the hardest part of a breach to account for. https://hubs.la/Q04w28500

08/31/2026

Once a quarter the calendars clear and the we get into one room. This time the room is in Miami, and the room is a beach. A quarter of plans and hard lessons, pressure-tested in person instead of over video.

It's the week the roadmap meets the people building it. MIND's QBR kicks off today!

08/27/2026

Hiring a contractor takes a background check, two approvals and a laptop that ships Tuesday. They get one folder for ninety days.

Standing up an agent takes an API key and somebody's Thursday afternoon. It gets whatever the service account already had, which is everything, forever, because nobody wanted to break the integration.

Nobody chose to give the agent everything. It inherited what was already sitting there.

See how scoped access works when the identity isn't a person. https://hubs.la/Q04vBCCn0

08/26/2026

MIND co-founder and CTO, Itai Schwartz, spoke with John P. Mello Jr at TechNewsWorld about the security blind spot growing inside almost every enterprise: AI agents nobody signed off on, quietly holding the keys to sensitive data.

As Itai put it: Read plus export in a single tool collapses the distance between access and loss. A tool like that doesn't need to be hacked to hurt you. It just needs a prompt that convinces it to do its job with the wrong data."

The harder truth? Most organizations aren't being targeted so much as exposed. Years of unclassified sensitive files, sitting there, now readable by agents IT never vetted. And once one of those agents packages and ships that data out, "it's gone at machine speed."

This is the new perimeter. Not a firewall. Not a login screen. It's every OAuth grant an AI agent quietly picked up on its way to getting the job done.

Read the full piece here:

A new security report finds widespread use of unsanctioned AI tools, with many operating beyond IT oversight while holding permissions that can reach sensitive data and systems.

08/26/2026

☕ A busy employee downloads maybe forty documents in a day. That's a big day. Somebody's earned a coffee.

🚨 An AI agent accesses four thousand before lunch, and your detection stack fires an alert for all of them. Holy false positives, Batman!

See how teams cut false positives without lowering the bar. https://hubs.la/Q04vr49d0

08/25/2026

Every company has a folder with a name so boring nobody has ever clicked on it: Vendor_Docs_OLD.

That's a "great" way to prevent access to sensitive data, until someone connects an AI tool. AI doesn't care that the folder name is boring. It accesses and exposes everything with the same enthusiasm. Even the stuff you don't want AI finding and ingesting.

Obscurity is a bet that nobody's looking, but AI tools are always looking.

See what a real inventory of sensitive data turns up BEFORE you connect AI to it. https://hubs.la/Q04vc8zX0

08/21/2026

🎉 MIND has a new Regional Sales Director, and he’s bringing a competitive streak that extends well beyond cybersecurity.

Please join us in welcoming Kelly Pierce to the team!

Kelly spent the last four years at Arctic Wolf and before that helped build the AE function at one startup and a strategic sales motion at another. Basically, if there's a territory to grow or partnerships to build, he's probably already halfway to doing it.

Why MIND? In his words: he saw a rare combination of the right problem, the right technology and the right team to help security leaders beaten down by traditional DLP. MIND’s approach of using AI to make data security autonomous, precise and genuinely stress-free immediately made sense.

A few things you should know about Kelly:
🏃 He's a purple belt in Brazilian Jiu-Jitsu and is training for his first half marathon, because apparently one competitive outlet wasn’t enough.

🏈 He was a college football captain who also helped run a $10M student lobbying effort, which explains why enterprise sales apparently felt like a light career pivot.

🌳 He would ban the phrase "single pane of glass" from cybersecurity forever, noting that the industry already has enough panes to build a greenhouse.

Welcome to MIND, Kelly. We're thrilled to have you on our side!