1.150 casos · pág. 24/58
Aikido Security and Drata announced an integration under which new Drata customers on the Foundation, Advanced or Enterprise tier can claim up to $4,000 in Aikido AI Pentest credits. Aikido findings and evidence sync into Drata to support technical controls for SOC 2, ISO 27001, PCI DSS, DORA and HIPAA. This is vendor product and partners…
Aikido Security has launched Noon, a workforce security platform that extends its developer-focused portfolio to all employees. The vendor argues that humans remain the most likely breach vector (cited as involved in 62% of breaches in the last year), that AI-enabled phishing is increasingly multi-channel and convincing, and that regular …
Wiz announced that its Wiz AI Agents are now available in Wiz for U.S. Government (Wiz for Gov), its FedRAMP High authorized environment. Wiz describes this as the first AI-Application Protection Platform (AI-APP) for U.S. public sector organizations that protect highly sensitive, national security and mission-critical data. This is vendo…
Wiz published the first part of a blog series on operationalizing Application Security Posture Management (ASPM) with Wiz Code. It argues that AI models that find vulnerabilities and generate exploits, combined with AI-accelerated development, break manual AppSec triage workflows. The article uses React2Shell (CVE-2025-55182), a critical …
Wiz describes a supply chain detection pipeline that analyzes new npm package versions at publication, so malicious releases can be flagged before a CVE or advisory exists. Wiz Research says notable supply chain attacks rose from about 10% of significant incidents in H2 2025 to 25% in H1 2026. The article cites two compromises: the Axios …
The Wiz Customer Incident Response Team (CIRT) reports a growing number of intrusions in which an AI agent system ran the entire operation: finding entry points, harvesting credentials, pivoting across platforms and debugging its own scripts in real time. In one investigated case, the agent compromised a large multi-cloud organization (GC…
A Sekoia blog post discusses the Integrated Security Operations Center (ISOC) category, drawing on the March 2026 Gartner Market Overview. It describes ISOC as a delivery model in which the vendor supplies SIEM, endpoint detection, threat intelligence, AI-assisted SOC capabilities, content and workflows as one integrated system, rather th…
The supplied page is the Check Point Research weekly threat intelligence report dated 19 October 2026. The captured text contains only a country selection dropdown from the page form. It holds no report body, so no incidents, vulnerabilities, threat actors or indicators can be extracted. No attribution, CVEs or IOCs are asserted. Re-colle…
Volexity published Part 3 of its "Mind the (Patch) Gap" series. It shows how Volexity Volcano and Surge Collect Pro were used to analyze a VM compromised with the zero-day exploit chain and payloads used by UTA0560 (Chrome and Windows zero-days, described in Part 1). The post is mainly product and workflow documentation rather than new in…
Recorded Future has moved its headquarters from Somerville, MA, where it had been based for twelve years in a former laundromat, to downtown Boston at Post Office Square. The article is a corporate culture and recruitment piece. It describes the new open-plan office, which houses nearly 200 employees across customer success, security, dat…
Recorded Future's Insikt Group reports on TAG-193, a cluster that ran a sustained intelligence-collection campaign against government bodies from early 2025 through May 2026. Targets include diplomacy, economic development, agriculture and environmental agencies in Russia, Tajikistan, Belarus, Armenia and Uzbekistan. Lure documents and im…
Since mid-2025 the Kremlin has sharply escalated restrictions on digital communications, according to Insikt Group (Recorded Future). Measures include VPN blocking, state-managed regional internet shutdowns, throttling of Telegram and WhatsApp, promotion of the state-owned Max messenger, and expanded surveillance of Russian and foreign en…
Recorded Future's Insikt Group tracks the actor behind the October 2026 intrusions into South Korean financial institutions as TAG-217, a suspected Chinese-speaking operator. It is not confirmed as state-backed (gbhackers.com). South Korea's Financial Services Commission (FSC) disclosed the attacks in early October (recordedfuture.com). P…
Huntress explains the compliance obligations of Texas law HB 3834, passed in June 2019. It requires state agency and local government employees, and state contractors, to complete a Department of Information Resources (DIR)-certified cybersecurity awareness training every year. Since September 1, 2025, HB 3512 adds a second annual require…
Huntress analyzed an active credential-phishing campaign in which the lookalike domain watchguard-vpn.net harvests WatchGuard SSL VPN credentials. On October 7, 2026, an administrator at a managed service provider searched Bing for "watchguard vpn sll download" and clicked through to the fake page, which Huntress classifies as SEO poisoni…
A Huntress thought-leadership post sets out five priorities for security leaders in 2026: abuse of trusted IT tools, AI-enabled cybercrime, social engineering, multi-extortion ransomware and identity-based attacks including BEC. The article cites internal Huntress telemetry showing RMM abuse rising roughly 277% year over year, with Screen…
Huntress published an explainer on business email compromise (BEC), a targeted form of phishing in which attackers impersonate or take over trusted email accounts to redirect payments or steal credentials. The article cites roughly $55 billion in worldwide losses and a Huntress survey of 500+ US IT professionals, in which 36% of organizat…
A Huntress vendor blog post lists 10 endpoint security trends. It reports no specific incident, vulnerability or campaign. The themes are agentic AI and the hijacking of non-human identities, ransomware shifting to double and triple extortion, incident response (IR) readiness, EDR-to-XDR consolidation, identity-first security and zero tru…
Huntress published a vendor blog post on the role and limits of Microsoft Volume Shadow Copy Service (VSS) in modern data protection. It explains that VSS remains a core framework for application-consistent snapshots on Windows workloads but should not be treated as a complete recovery or ransomware defense. The article warns that modern …
Huntress reports that manufacturing accounted for about 17% of cyber attacks in 2025, up from 9% in 2024, citing its own cyber threat report. The article is a vendor trends piece rather than an incident report. It argues that ransomware operators now target production uptime and operational technology (OT), not just data, because manufact…
