Incident Response stories
Rising AI workloads are pushing more firms towards managed monitoring as operational complexity and telemetry costs make self-hosted tools harder to justify.
A near-decade of undetected access raises fresh concern after investigators found the group had hidden in a disconnected network since 2016.
Public release of the Mini Shai-Hulud code means copycat attacks can now hit developers, CI/CD systems and open-source supply chains.
Security teams can now trace AI activity across employee and developer environments as Reco links Claude usage to permissions, keys and data paths.
A single phishing email can now compromise identities, bypass multifactor authentication and hit endpoints within five minutes, Barracuda said.
BlueVoyant says a ClickFix malware campaign using fake browser updates is linked to the Rapid Brigantine ransomware ecosystem.
AI workloads are pushing log volumes up 93%, yet most large companies still leave 86% of data unanalyzed to keep costs down.
AWS customers building AI agents gain policy enforcement and recovery tools as Rubrik extends its governance layer into Bedrock AgentCore.
IT teams will be able to use Claude and Microsoft Copilot for real-time Kaseya workflows, with general release due in 2027.
Managed service providers are under rising pressure from ransomware and nation-state attacks as Blackpoint expands intelligence-led security for partners.
Backup and recovery tasks can now be triggered inside popular AI assistants, as Cohesity opens its tools to external workflows through MCP.
Customers can now buy Illumio products through Check Point as the firms join forces to contain AI-driven attacks across hybrid networks.
Thousands of corporate devices may be exposed because many remain unpatched, unseen or missing endpoint protection, Arctic Wolf found.
Clients will get a single security operating model as Grant Thornton Advisors replaces fragmented MDR tools with CrowdStrike Falcon across its global services.
Security teams face a heavier patching burden next year, with disclosure volumes now tracking far above FIRST's earlier estimate.
It aims to help critical infrastructure operators keep sensitive security data and AI models inside UK-controlled systems during cyber incidents.
The expansion could lift local headcount by 50% or more by end-2026 as the cyber group taps Bengaluru's scarce security talent.
The hire comes as customers scrutinise SolarWinds' security posture more closely after its 2020 breach and rising cyber risk across software suppliers.
Phishing is becoming harder to spot as attackers use encryption and AI-generated sites to target organisations more effectively.
More than half of UK technology leaders now rank cyber risk as their top concern, even as hiring shortages threaten security plans.