News

Huntress has announced it is extending its Managed Identity Threat Detection and Response (ITDR) solution to Google Workspace, marking a significant expansion of the company's cloud identity security coverage and coming at a telling moment. The announcement, made today at RSA Conference in San Francisco, coincides with Huntress surpassing 10 million Microsoft 365 identities protected across more than 93,000 organisations. It signals the company's intent to become the go-to ITDR provider across the two platforms...

Black Duck has announced the general availability of Black Duck Signal™, an agentic AI application security solution designed from the ground up to address the security challenges created by AI-native software development. The launch comes as AI coding assistants move from novelty to norm across enterprise software teams. Industry analysts predict that 90% of enterprise developers will be using AI coding tools by 2028, a shift that is fundamentally changing the volume, velocity, and nature...

Forescout Technologies reported strong financial results for fiscal year 2025, highlighting continued profitability, customer growth, and momentum in large enterprise deals as demand for cybersecurity solutions remains high. The San Jose-based company said it added more than 230 net new customers during the year and closed 58 deals valued at $1 million or more, a 26 percent increase compared to the previous year. Forescout also remained cash flow positive for the third consecutive year and...

Starbucks has disclosed a data breach that exposed the personal information of hundreds of employees after attackers gained unauthorized access to internal employee accounts. In a filing with the Maine Attorney General, the coffee giant said it discovered the incident on February 6 and that 889 individuals were affected. The breach involved accounts tied to Starbucks Partner Central, the internal platform employees use to manage employment information, benefits, and HR-related services. Starbucks operates nearly 41,000...

KnowBe4 has expanded its Artificial Intelligence Defense Agents (AIDA) suite with the launch of a new AI-powered assessment tool designed to help organisations measure human cyber risk more accurately. The company has introduced the Custom SAPA (Security Awareness Proficiency Assessment) AI Agent, which generates tailored security awareness assessments based on an organisation’s own technology environment, policies and workflows. The move aims to address the limitations of traditional standardised testing by providing security leaders with data...

Forescout has introduced Automated Security Controls Assessment, a new capability within the Forescout 4D Platform that is designed to help security and compliance teams continuously evaluate the effectiveness of their security controls across the entire attack surface. The new feature replaces manual, spreadsheet driven audit processes with automated evidence collection and reporting. Instead of relying on periodic scans and point in time reviews, organizations can continuously verify their compliance posture using live telemetry from devices...

Anthropic has launched Claude Code Security, an AI-powered vulnerability scanner built into Claude Code on the web, now available in a limited research preview for Enterprise and Team customers. The tool is designed to flag subtle logic flaws that are difficult to detect through manual inspection. Its launch triggered an immediate and sharp sell-off across the cybersecurity sector. The announcement marks a turning point in how security teams find and fix software flaws. Until now,...

Mobile app permissions are rarely as innocent as they appear. Behind every "Allow" button lies a potential attack vector, one that security teams increasingly struggle to contain. As apps grow more complex and data-hungry, the gap between what permissions are needed and what permissions are requested continues to widen. For cybersecurity professionals, this isn't a small concern. Permission misuse is now the main mechanism for malware distribution, data exfiltration, and device compromise. Understanding exactly where...

Digital money has fundamentally upended how people handle their finances. It has created new ways to buy, invest, and own things, all without relying on traditional banking. Digital art and even property are moving online, and millions now track metrics like the ETH to USD rate to figure out what their holdings are worth.  At the same time, this type of technological upgrade presents a significant problem for security experts. Cryptocurrencies are not only new...

The acceleration of global financial infrastructure has fundamentally altered the expectations for transaction velocity. In an era where consumers and enterprises alike demand instantaneous settlement, the traditional friction of banking security, often measured in days or hours has become obsolete. However, this shift toward real-time payments (RTP) introduces a complex paradox: as transaction speeds increase, the window for detecting and preventing fraudulent activity narrows significantly. IT security professionals are now tasked with re-architecting payment gateways...