News

World Backup Day is often seen as a simple reminder to save your data, but this year, security leaders say backup strategies must evolve into fully tested, secure, and recovery-focused resilience plans. Here’s what organisations should take away from World Backup Day this year: 1. Backups are meaningless if recovery isn’t provenIt’s no longer enough to assume backups will work when needed. Corey Nachreiner, Chief Security Officer at WatchGuard Technologies, said, "Preparedness only matters when...

A critical vulnerability in Citrix NetScaler ADC and NetScaler Gateway is drawing urgent warnings from the security community, with experts cautioning that exploitation could be imminent and that the ghost of CitrixBleed looms large over the disclosure. Tracked as CVE-2026-3055 with a CVSS score of 9.3, the flaw is an out-of-bounds read issue affecting NetScaler deployments configured as a SAML Identity Provider (SAML IDP), allowing remote, unauthenticated attackers to read sensitive memory. Citrix has warned...

The US Federal Communications Commission (FCC) has expanded its “Covered List” to include certain foreign-made consumer routers, a move that will block new models from receiving equipment authorisation and prevent them from being imported or sold in the United States. The decision reflects growing concern around supply chain security and the potential for foreign state interference in critical network infrastructure. Routers occupy a uniquely sensitive position in both home and enterprise environments, acting as gateways...

Huntress has announced it is extending its Managed Identity Threat Detection and Response (ITDR) solution to Google Workspace, marking a significant expansion of the company's cloud identity security coverage and coming at a telling moment. The announcement, made today at RSA Conference in San Francisco, coincides with Huntress surpassing 10 million Microsoft 365 identities protected across more than 93,000 organisations. It signals the company's intent to become the go-to ITDR provider across the two platforms...

Black Duck has announced the general availability of Black Duck Signal™, an agentic AI application security solution designed from the ground up to address the security challenges created by AI-native software development. The launch comes as AI coding assistants move from novelty to norm across enterprise software teams. Industry analysts predict that 90% of enterprise developers will be using AI coding tools by 2028, a shift that is fundamentally changing the volume, velocity, and nature...

Forescout Technologies reported strong financial results for fiscal year 2025, highlighting continued profitability, customer growth, and momentum in large enterprise deals as demand for cybersecurity solutions remains high. The San Jose-based company said it added more than 230 net new customers during the year and closed 58 deals valued at $1 million or more, a 26 percent increase compared to the previous year. Forescout also remained cash flow positive for the third consecutive year and...

Starbucks has disclosed a data breach that exposed the personal information of hundreds of employees after attackers gained unauthorized access to internal employee accounts. In a filing with the Maine Attorney General, the coffee giant said it discovered the incident on February 6 and that 889 individuals were affected. The breach involved accounts tied to Starbucks Partner Central, the internal platform employees use to manage employment information, benefits, and HR-related services. Starbucks operates nearly 41,000...

KnowBe4 has expanded its Artificial Intelligence Defense Agents (AIDA) suite with the launch of a new AI-powered assessment tool designed to help organisations measure human cyber risk more accurately. The company has introduced the Custom SAPA (Security Awareness Proficiency Assessment) AI Agent, which generates tailored security awareness assessments based on an organisation’s own technology environment, policies and workflows. The move aims to address the limitations of traditional standardised testing by providing security leaders with data...

Forescout has introduced Automated Security Controls Assessment, a new capability within the Forescout 4D Platform that is designed to help security and compliance teams continuously evaluate the effectiveness of their security controls across the entire attack surface. The new feature replaces manual, spreadsheet driven audit processes with automated evidence collection and reporting. Instead of relying on periodic scans and point in time reviews, organizations can continuously verify their compliance posture using live telemetry from devices...

Anthropic has launched Claude Code Security, an AI-powered vulnerability scanner built into Claude Code on the web, now available in a limited research preview for Enterprise and Team customers. The tool is designed to flag subtle logic flaws that are difficult to detect through manual inspection. Its launch triggered an immediate and sharp sell-off across the cybersecurity sector. The announcement marks a turning point in how security teams find and fix software flaws. Until now,...