News

Acumen Cyber has announced a strategic partnership with AttackIQ to help organizations continuously validate their cyber defenses against real-world threats and reduce exposure to modern attacks. The partnership combines Acumen Cyber’s engineering-led security operations expertise with AttackIQ’s Continuous Threat Exposure Management (CTEM) platform. Together, the companies aim to help organizations identify exploitable attack paths, validate security controls, and prioritize remediation efforts based on actual risk rather than theoretical vulnerabilities. Moving beyond traditional vulnerability management As...

Check Point Software has launched Agentic Exposure Validation (AEV), a new AI-driven capability within its Exposure Management platform that uses autonomous agents to reason like attackers and provide security teams with hard evidence of what is genuinely exploitable in their environment, before adversaries can act on it. The launch comes as the threat landscape undergoes a fundamental shift. Frontier AI models are now capable of autonomously identifying and weaponising vulnerabilities at machine speed, compressing the...

Swiss privacy company Proton has rolled out a significant update to Proton Mail that allows users to connect their Gmail accounts directly to the platform. The feature, announced on 28 May 2026, enables Gmail messages to be imported into Proton Mail and allows users to send and receive emails from their Gmail address, all without toggling between separate inboxes. The integration is aimed at users looking to transition away from Google's ecosystem but who face...

New research from offensive security firm Pentest-Tools.com has quantified a growing disconnect between the speed at which AI tools are generating code and the ability of security teams to validate it before it reaches production, with significant implications for enterprise risk and compliance. The survey, conducted in March 2026 with 241 confirmed AI coding tool users across the UK, Europe, and the US, found that just 9% of developers believe vulnerability testing keeps full pace...

Annual audits used to define ISO 27001 compliance. A company would scramble for weeks, pull together evidence binders, pass the audit, and forget about the ISMS until the next surveillance visit. That cycle is collapsing. The ICO's enforcement appetite is growing. As UK procurement contracts increasingly mandate current certification, the October 2025 deadline for transitioning from the 2013 standard to ISO 27001:2022 has already passed. That means many organisations still running outdated controls face uncomfortable...

A growing tension sits at the heart of enterprise AI deployments: organisations want agents to act autonomously, yet handing over passwords and API keys to automated systems represents a significant and largely unresolved security risk. Proton is now attempting to close that gap with the launch of Proton Pass for AI Agents, a capability that wraps credential sharing in a structured token framework built around the principle of least-privilege access. Announced today, the feature introduces...

A critical security vulnerability in NGINX, the web server software underpinning more than 30% of all websites globally, has been confirmed as actively exploited in the wild, less than a week after its public disclosure. The flaw, tracked as CVE-2026-42945 and dubbed 'NGINX Rift', carries a severity score of 9.8 out of 10. It affects virtually every standard NGINX build released between 2008 and May 2026, an exposure window spanning 18 years. NGINX's developer, F5,...

Certes has released new research showing that many organizations remain unprepared for the security risks posed by quantum computing, despite growing awareness of the threat. According to the company’s Emerging PQC Imperative report, 78% of organizations believe legacy systems represent their biggest quantum security risk. The findings highlight growing concerns that outdated infrastructure and applications could leave sensitive data exposed as quantum computing capabilities advance. The study, conducted by Freeform Dynamics and commissioned by Certes,...

Check Point has launched an agentic orchestration platform that can end the policy drift, stalled Zero Trust projects, and manual configuration backlogs that have plagued enterprise security teams for decades. The company's Agentic Network Security Orchestration Platform is built around autonomous AI agents that translate business intent directly into firewall policy, tighten configurations in real time, and respond to threats across multi-vendor environments without waiting for a human to raise a ticket. It's an ambitious...

Cybersecurity firm Huntress has joined forces with global fintech and insurance giant Acrisure to launch a new cyber insurance programme targeting small and mid-sized businesses, with no deductible for eligible applicants. The programme, announced today, gives qualifying Huntress customers and partners access to either Cyber or Tech Errors and Omissions (Tech E&O) insurance policies placed through Acrisure, using a streamlined application process designed to cut through the complexity that often makes obtaining cyber insurance a...