This vendor blog from Aikido Security compares nine phishing simulation tools for 2026 and ranks its own early-access platform Noon first. The others are KnowBe4, Hoxhunt, Adaptive Security, Keepnet, Cofense, IRONSCALES, Microsoft Defender for Office 365 Attack Simulation Training and Gophish. It argues that email-only programs miss multi…
This is a vendor-authored buyer's guide from Aikido Security ranking eight security awareness training platforms for 2026, and it does not describe a security incident, vulnerability or threat campaign. It promotes Noon Security (Aikido's workforce security product) first and compares it with KnowBe4, Hoxhunt, Adaptive Security, SoSafe, P…
This Aikido Security blog post ranks eight alternatives to Mimecast and puts its own workforce security platform, Noon Security, first. It is vendor marketing, not incident reporting. The article argues that gateway-centric email security struggles with hijacked but legitimate vendor accounts, internal mail that never crosses the gateway,…
Wiz and Google Cloud announced the Wiz Runtime Sensor add-on for Google Kubernetes Engine (GKE) in Preview. It is available for both GKE Standard and Autopilot clusters. GKE manages sensor deployment, credential injection and lifecycle updates through the control plane, which removes manual Helm and manifest handling. The sensor uses eBPF…
Oracle released its October 2026 Critical Patch Update on October 20, the final quarterly update of the year. It fixes 1209 unique CVEs in 1295 security updates across 33 product families. 112 of the patches (8.6%) are rated critical and cover 95 CVEs. The article does not mention exploitation in the wild. Technical Details - Severity bre…
Hudson Rock announced it is a launch data partner in the Ardence Data Network, which powers TRM Labs' new AI investigation platform Ardence. The platform is aimed at government investigators, cyber threat analysts and compliance teams at more than 600 agencies and institutions in 75 countries. It combines intelligence from more than 60 pa…
The Hudson Rock 2026 Infostealer Index benchmarks 34 threat intelligence vendors against nine criteria on a 100-point scale. The article is a summary by InfoStealers, which Hudson Rock operates, so the ranking is not independent. It frames infostealer malware as a dominant threat and cites a "massive AI supply chain hack of 2026" as an ex…
The weekly InfoStealers report for 12-19 October 2026 summarises stealer-log telemetry on compromised machines, credentials and sessions. The United States ranks 8 by country of infection with 438 machines. Gmail is the most affected email provider with 1,225,748 users, followed by Hotmail (90,554) and Yahoo (33,493). Sessions and saved c…
Flashpoint joined the UK National Crime Agency (NCA), the DOJ, FBI, U.S. Secret Service, Homeland Security Investigations and private-sector partners in "Joint Disruption Week", held in London the week beginning October 6, 2026. The operation targeted West African scam networks running cryptocurrency investment scams, impersonation scheme…
Infoblox introduces Agentic Denial of Service (ADoS), a class of disruption in which AI agents overwhelm systems with excessive requests, actions or computations, or in which an adversary turns a defender's own automation against it. It is not "DDoS with AI": it denies the business effective use of its AI agents, the infrastructure they d…
Citizen Lab's Kate Robertson argues in a Globe & Mail piece that Canada's proposed Bill C-22 (Lawful Access Act) would weaken national cybersecurity. If passed, the bill would let the government require surveillance capabilities to be built into any communications technology in Canada. Covered products could include smartphones, smartwatc…
This Aikido vendor blog argues that AI-assisted coding has outpaced the annual or biannual manual pentest cycle, and presents AI pentesting with fixed per-test pricing as the fix. Citing its 2026 State of AI in Pentesting report, it says 76% of organizations ship significant production changes weekly or faster, while only 21% validate sec…
Aikido Security published a vendor-authored comparison of Horizon3.ai's NodeZero autonomous pentesting platform against seven alternatives for 2026: Aikido Security, Pentera, RidgeBot, XBOW, Hadrian, RunSybil and Terra. The article is marketing content with no incident, vulnerability or threat activity. It argues that NodeZero does not us…
Aikido Security published a vendor comparison of alternatives to Escape.tech, which repositioned in 2026 as an offensive security platform built around its Cascade AI pentesting engine, DAST and attack surface management. The article is marketing content and does not describe a security incident, vulnerability or threat activity. It names…
Aikido Security and Drata announced an integration under which new Drata customers on the Foundation, Advanced or Enterprise tier can claim up to $4,000 in Aikido AI Pentest credits. Aikido findings and evidence sync into Drata to support technical controls for SOC 2, ISO 27001, PCI DSS, DORA and HIPAA. This is vendor product and partners…
Aikido Security has launched Noon, a workforce security platform that extends its developer-focused portfolio to all employees. The vendor argues that humans remain the most likely breach vector (cited as involved in 62% of breaches in the last year), that AI-enabled phishing is increasingly multi-channel and convincing, and that regular …
A Sekoia blog post discusses the Integrated Security Operations Center (ISOC) category, drawing on the March 2026 Gartner Market Overview. It describes ISOC as a delivery model in which the vendor supplies SIEM, endpoint detection, threat intelligence, AI-assisted SOC capabilities, content and workflows as one integrated system, rather th…
Recorded Future has moved its headquarters from Somerville, MA, where it had been based for twelve years in a former laundromat, to downtown Boston at Post Office Square. The article is a corporate culture and recruitment piece. It describes the new open-plan office, which houses nearly 200 employees across customer success, security, dat…
Huntress published an explainer on business email compromise (BEC), a targeted form of phishing in which attackers impersonate or take over trusted email accounts to redirect payments or steal credentials. The article cites roughly $55 billion in worldwide losses and a Huntress survey of 500+ US IT professionals, in which 36% of organizat…
Huntress published a vendor blog post on the role and limits of Microsoft Volume Shadow Copy Service (VSS) in modern data protection. It explains that VSS remains a core framework for application-consistent snapshots on Windows workloads but should not be treated as a complete recovery or ransomware defense. The article warns that modern …