Ideco NGFW Novum v23 Adds Shadow AI Discovery, Dynamic Routing and QoS Controls
Ideco has released NGFW Novum v23, bringing together visibility of AI services, advanced dynamic routing, QoS and strict authentication in a single platform. The update targets large distributed networks, data centers, congested WAN links and regulated environments.
Shadow AI begins with everyday actions: employees opening chatbots, developers connecting API models, analysts uploading tables to assistants and engineers running local inference services. The new release adds 83 AI application protocols to the Application Control module, allowing ChatGPT, Claude, DeepSeek, GigaChat, YandexGPT and proxy services such as Chad AI and GPTunneL to be identified by DNS, SNI and connection characteristics without mandatory TLS decryption.
Two new content-filter categories, “AI agents” and “AI services”, complement the existing “AI chatbots” group. Because the firewall sits at the natural observation point for all outbound AI traffic, administrators can immediately apply different policies to approved and unapproved services and build an internal registry of AI tools.
The routing stack has been significantly expanded. Prefix lists and Route maps enable reusable filtering and attribute manipulation for OSPF, EIGRP and BGP. BFD profiles allow sub-second neighbor failure detection, while OSPF areas and key chains support scalable, secure link-state domains. These features eliminate the need to maintain large sets of static routes across multiple sites.
Virtual contexts now communicate internally through Virtual Ethernet (veth) pairs and a Virtual Switch, removing the requirement for external switches when connecting separate VCEs. QoS, per-interface MTU and IPsec-specific MSS settings help maintain voice and video quality on constrained WAN links.
Ideco Client adds certificate-based primary authentication for Windows, Linux and macOS, with CRL checking during active sessions. Support for GOST algorithms in reverse proxy and certificate handling has also been added. The IPS engine now detects SSH tunneling, and a new “Block tunneled traffic” option in TLS/SSL inspection profiles prevents non-HTTP protocols inside decrypted sessions.
Related articles
Troubleshooting AI Bug Hunting: Seven Critical Mistakes That Destroy Report Validity
Two Russian researchers shared detailed lessons from six months of running AI agents on domestic bug bounty platforms. The presentation, originally delivered at OFFZONE, covers hallucinations, lack of validation, threat model misunderstandings, severity inflation, bloated reports, high token costs, and scope violations. Vladislav Bek and Daniil Shushakov describe practical fixes including tool-enabled agents, dual-agent verification, strict templates, and cascaded model architectures. They emphasize that AI must execute real commands in isolated environments rather than fabricate results. The speakers also address scaling on private events, handling model refusals, and the continued necessity of human final validation. Their checklist stresses business context, proven impact, and staying within program boundaries to produce accepted, high-value reports.
SOC Forum 2026 Reveals Full Program Featuring Chen Qiufan on AI Agents and Business Defense
Organizers of SOC Forum 2026 have published the complete agenda for the event scheduled for October 27-28 at Moscow's Lomonosov cluster. The central theme explores how generative AI is used by both attackers and defenders, including the risks when autonomous agents gain access to corporate systems. Over 170 speakers from more than 90 organizations will participate in more than 60 sessions and 82 technical reports selected from over 400 submissions. The first day focuses on business impact, regulation, economic effects of AI, liability for errors, and employee data sent to external models, with Chinese author Chen Qiufan delivering a keynote and joining a plenary discussion. The second day shifts to technical topics such as AI-powered attacks, code security, cloud environments, and autonomous agent protections including access rights, prompt attacks, and incident investigation. The AI & Cybersecurity track received 126 CFP submissions, 2.5 times more than the previous year. The forum is organized by GK Solar as part of Russian Cybersecurity Week.
Skycode: Custom VS Code Extension Optimizes AI Coding Agent for Corporate Closed-Loop LLMs
A developer has released Skycode, an open-source VS Code extension that enables AI-assisted coding inside corporate closed environments using internal models such as Qwen. The project addresses strict data residency requirements in sectors like energy, where external services like GitHub Copilot or Cursor are prohibited because code would leave the perimeter. Key engineering efforts focused on aggressive context preservation within the model's roughly 100k token limit through incremental file reading, symbol-level extraction, history compression, and visual context monitoring. Additional features include tab-based parallel task handling, local voice dictation powered by Sber's GigaAM v3, and safeguards against repetitive loops or truncated file writes. The extension approach was chosen over forking the entire VS Code codebase to simplify deployment and compliance reviews, as extensions can often be installed from the Marketplace without separate approval. Skycode is positioned as a practical alternative for organizations running their own LLMs rather than relying on cloud models.
NICT and MITRE to Host AI Breach Challenge 2026 on Email Agent Security
The National Institute of Information and Communications Technology (NICT) and MITRE are organizing the AI Breach Challenge 2026: Email Agent Security competition in December 2026. The event will take place at George Mason University in Virginia and will focus on identifying security weaknesses in AI agents designed for workplace email operations. Participants will work in teams of two to four people, combining on-site and remote access over a 24-hour period on December 16 and 17. They will attempt to induce unintended behaviors in the agents and gain access to protected information within an isolated environment. NICT plans to analyze the results to evaluate the effectiveness and limitations of current AI agent security measures for future research and development.