116 casos · pág. 1/6
The US Federal Trade Commission (FTC) opened a rulemaking in September asking whether platforms should be required to stop impersonation scam ads from reaching consumers, citing ad tools that generate copy, images and video and optimize targeting regardless of whether an ad is legitimate. The article reports that nearly one trillion scam …
A reader comment on a Schneier on Security post about the Workshop on Economics and Information Security (WEIS) archive was posted by David Mohring on 21 October 2026. It links older material from 2002 and 2004, including a Usenet archive and a 2004 piece titled "Twelve Step TrustABLE IT". The commenter argues that businesses can historic…
A vendor-contributed article by Pentera argues that the hard engineering in AI-driven pentesting lies in the "harness" around the model, not in the model that writes the attacks. It cites the Hugging Face intrusion that OpenAI disclosed in July, which occurred inside an OpenAI evaluation meant to contain the agents, as an example of a har…
Sekoia announced an integration between Zimperium Mobile Threat Defense (MTD) and the Sekoia autonomous SOC platform. It brings mobile threat telemetry into a single environment for detection, investigation and threat hunting. The post is vendor product content, not a new incident or vulnerability. It argues that mobile devices are now a …
This Aikido Security blog post ranks eight alternatives to Mimecast and puts its own workforce security platform, Noon Security, first. It is vendor marketing, not incident reporting. The article argues that gateway-centric email security struggles with hijacked but legitimate vendor accounts, internal mail that never crosses the gateway,…
This vendor blog from Aikido Security compares nine phishing simulation tools for 2026 and ranks its own early-access platform Noon first. The others are KnowBe4, Hoxhunt, Adaptive Security, Keepnet, Cofense, IRONSCALES, Microsoft Defender for Office 365 Attack Simulation Training and Gophish. It argues that email-only programs miss multi…
This is a vendor-authored buyer's guide from Aikido Security ranking eight security awareness training platforms for 2026, and it does not describe a security incident, vulnerability or threat campaign. It promotes Noon Security (Aikido's workforce security product) first and compares it with KnowBe4, Hoxhunt, Adaptive Security, SoSafe, P…
Wiz and Google Cloud announced the Wiz Runtime Sensor add-on for Google Kubernetes Engine (GKE) in Preview. It is available for both GKE Standard and Autopilot clusters. GKE manages sensor deployment, credential injection and lifecycle updates through the control plane, which removes manual Helm and manifest handling. The sensor uses eBPF…
Hudson Rock announced it is a launch data partner in the Ardence Data Network, which powers TRM Labs' new AI investigation platform Ardence. The platform is aimed at government investigators, cyber threat analysts and compliance teams at more than 600 agencies and institutions in 75 countries. It combines intelligence from more than 60 pa…
The Hudson Rock 2026 Infostealer Index benchmarks 34 threat intelligence vendors against nine criteria on a 100-point scale. The article is a summary by InfoStealers, which Hudson Rock operates, so the ranking is not independent. It frames infostealer malware as a dominant threat and cites a "massive AI supply chain hack of 2026" as an ex…
Infoblox introduces Agentic Denial of Service (ADoS), a class of disruption in which AI agents overwhelm systems with excessive requests, actions or computations, or in which an adversary turns a defender's own automation against it. It is not "DDoS with AI": it denies the business effective use of its AI agents, the infrastructure they d…
Citizen Lab's Kate Robertson argues in a Globe & Mail piece that Canada's proposed Bill C-22 (Lawful Access Act) would weaken national cybersecurity. If passed, the bill would let the government require surveillance capabilities to be built into any communications technology in Canada. Covered products could include smartphones, smartwatc…
This Aikido vendor blog argues that AI-assisted coding has outpaced the annual or biannual manual pentest cycle, and presents AI pentesting with fixed per-test pricing as the fix. Citing its 2026 State of AI in Pentesting report, it says 76% of organizations ship significant production changes weekly or faster, while only 21% validate sec…
Aikido Security published a vendor-authored comparison of Horizon3.ai's NodeZero autonomous pentesting platform against seven alternatives for 2026: Aikido Security, Pentera, RidgeBot, XBOW, Hadrian, RunSybil and Terra. The article is marketing content with no incident, vulnerability or threat activity. It argues that NodeZero does not us…
Aikido Security published a vendor comparison of alternatives to Escape.tech, which repositioned in 2026 as an offensive security platform built around its Cascade AI pentesting engine, DAST and attack surface management. The article is marketing content and does not describe a security incident, vulnerability or threat activity. It names…
Aikido Security and Drata announced an integration under which new Drata customers on the Foundation, Advanced or Enterprise tier can claim up to $4,000 in Aikido AI Pentest credits. Aikido findings and evidence sync into Drata to support technical controls for SOC 2, ISO 27001, PCI DSS, DORA and HIPAA. This is vendor product and partners…
Aikido Security has launched Noon, a workforce security platform that extends its developer-focused portfolio to all employees. The vendor argues that humans remain the most likely breach vector (cited as involved in 62% of breaches in the last year), that AI-enabled phishing is increasingly multi-channel and convincing, and that regular …
A Sekoia blog post discusses the Integrated Security Operations Center (ISOC) category, drawing on the March 2026 Gartner Market Overview. It describes ISOC as a delivery model in which the vendor supplies SIEM, endpoint detection, threat intelligence, AI-assisted SOC capabilities, content and workflows as one integrated system, rather th…
Recorded Future has moved its headquarters from Somerville, MA, where it had been based for twelve years in a former laundromat, to downtown Boston at Post Office Square. The article is a corporate culture and recruitment piece. It describes the new open-plan office, which houses nearly 200 employees across customer success, security, dat…
Huntress published a vendor blog post on the role and limits of Microsoft Volume Shadow Copy Service (VSS) in modern data protection. It explains that VSS remains a core framework for application-consistent snapshots on Windows workloads but should not be treated as a complete recovery or ransomware defense. The article warns that modern …
