riverbed

New infosec products of the month: May 2026 Here’s a look at the most interesting products from the past month, featuring releases from Alation, AppOmni, Apricorn, ASAPP, Babel Street, Checksum, Cogent, CTERA, Forward, LastPass, Operant AI, Riverbed, Sysdig, Trust3 AI, TrustCloud, VIAVI, Versa Networks, and XM Cyber. Operant AI Endpoint Protector secures AI agents and MCP tools Operant AI has launched Operant Endpoint Protector, a new addition to its AI Defense Platform that enables enterprise IT and security teams to discover, detect, and defend against threats across every AI tool, coding agent, and Model Context Protocol (MCP)-connected workflow used by employees, directly at the endpoint where most consequential AI activity takes place. VIAVI CyberFlood CF1000 pushes 400G validation for multi-terabit AI data centers VIAVI Solutions has announced the launch of its next-generation CyberFlood CF1000 Appliance, a native 400G security and application performance test platform for the validation of multi-terabit security and AI data center infrastructures at scale. Developed for network equipment vendors, hyperscale data center operators and service providers, the CyberFlood CF1000 enables OSI Layer 4-7 validation of critical infrastructure under real-world encrypted and dynamic mixed traffic conditions including Next-Generation Firewalls (NGFWs), Application Delivery Controllers (ADCs), DDoS mitigation systems, VPN gateways, zero-trust architectures and AI inference fabrics. LastPass Mobile Smart Scanner improves password security LastPass has launched Mobile Smart Scanner, a solution that converts photographs of typed or handwritten credentials into structured, ready-to-use password entries that can be reviewed, saved, and autofilled directly from the vault. Available in early access for Free, Premium, and Family plan customers, the feature extracts the site URL, username, and password from a single scan taken with the LastPass mobile app. No manual typing, no third-party upload. Scanning occurs on-device consistent with the LastPass “zero-trust” security approach of the product. Sysdig delivers cloud security that runs inside AI coding agents Sysdig announced headless cloud security, a cyberdefense platform designed for the agentic AI era. Sysdig Headless Cloud Security enables customers to drop the traditional, one-size-fits-all UI approach and equip their AI agents as the primary operators of machine-speed, data-driven cyberdefense. The questionnaire-based TPRM model is broken, and TrustCloud has a fix TrustCloud announced a new version of TrustLens, its third party risk management (TPRM) solution. The new TrustLens agentic AI capabilities focus on delivering four requirements every CISO wants in their TPRM program: speed, accuracy, coverage, and proactive risk mitigation. Alation AI Governance creates a system of record for AI oversight Alation has introduced Alation AI Governance, a new offering that gives enterprises the system of record they are missing for AI compliance. The solution registers every AI model, agent, and tool into a single inventory, maps each to applicable regulations, generates evidence-backed model cards, routes approvals through regulation-aware workflows, and produces a live compliance posture for the executive team on demand, not on deadline. Versa CSPM brings continuous visibility to cloud risk and compliance exposure Versa has announced Versa Cloud Security Posture Management (CSPM), extending the VersaONE Universal SASE Platform to provide continuous visibility, prioritization, and remediation of cloud risk across environments. With CSPM, Versa combines secure access protection and cloud posture risk on a single platform, delivering the visibility security teams need to quantify and reduce enterprise cyber exposure. Apricorn hardens ASK3 encrypted USB drive for extreme conditions Apricorn has announced enhancements to its Aegis Secure Key 3.0 (ASK3), delivering faster performance and new environmental protection capabilities designed to secure the device and its data in the most demanding physical circumstances. Babel Street targets AI-driven threats with new agentic investigation capabilities Babel Street has launched Insights Investigator, a new agentic capability that puts tradecraft-trained AI agents at the front edge of investigative work while ensuring analysts remain in control of scope, logic, and outcomes of their missions. As part of the Babel Street Insights platform, Investigator represents a shift from search and AI-assisted queries to analyst-directed, AI-executed investigations. Trust3 AI focuses on AI agent risks with MCP Security layer Trust3 AI has announced the launch of Model Context Protocol (MCP) Security, establishing a new standard for safeguarding enterprise agentic AI workloads. This solution forms a key capability within Trust3 AI’s enterprise agent control plane, empowering security and governance teams with a unified trust layer to seamlessly and safely connect AI agents with vital business data, applications, and systems. CTERA brings AI insights and automation for unstructured data CTERA has announced the launch of CTERA InsightAI, an agentic AI intelligence layer for the CTERA Intelligent Data Platform. The new capability is designed to help enterprises understand, manage, secure, and optimize unstructured data environments. CTERA InsightAI adds AI-driven insights and automation to data operations, expanding traditional data observability capabilities. Forward launches Predict to test network changes before deployment Forward has unveiled Forward Predict, a new capability that allows organizations to evaluate the impact of network changes before deployment. By testing proposed changes against a digital twin of the production network, Forward Predict helps identify potential issues before they reach live environments and supports safer network operations at scale. Riverbed introduces new Aternity tools for autonomous IT operations Riverbed has announced new capabilities for Aternity designed to support autonomous IT operations for digital experience management. The updates help digital workplace teams move toward prevention-focused operations through broader visibility, context-aware intelligence, and governance controls that support automated workflows. ASAPP expands adversarial testing for enterprise AI systems ASAPP has launched Continuous Red Teaming, a new capability that integrates adversarial AI testing directly into ASAPP’s model evaluation framework. The new capability is built on Promptfoo, an AI security platform that helps enterprises detect and address vulnerabilities in AI systems during development. AppOmni’s Marlin AI automates SaaS threat analysis, triage, and remediation at scale AppOmni has launched Marlin AI to transform how enterprise organizations defend complex SaaS applications. Marlin AI delivers autonomous AI-powered SaaS security that leverages AppOmni’s deep SaaS application observability. It actively correlates SaaS security indicators, performs deep investigations, and guides security teams to immediate solutions. Cogent targets exploit-to-remediation gap with new AI-powered security capabilities Cogent has launched two new platform capabilities designed to reduce the time between vulnerability disclosure and confirmed remediation. Zero Day Response identifies exposure within minutes of public disclosure, without waiting for scanner signatures. Autonomous Remediation determines the right fix, assesses business impact before execution, and confirms that the vulnerability has been resolved. XM Cyber enhances identity risk visibility with continuous exposure management capabilities XM Cyber has announced platform enhancements aimed at helping organizations reduce identity risk, compounded by AI-enabled attackers. According to Gartner, “By 2028, 70% of CISOs will use identity visibility and intelligence capabilities to shrink the IAM attack surface, reducing the risks of credential compromise.” Checksum introduces Continuous Quality Agent for automated test generation and healing Checksum has launched its Continuous Quality Agent, an autonomous system that runs nightly against deployed applications and automatically heals broken tests without waiting for an engineer to open a dashboard or write a prompt.

New infosec products of the week: May 22, 2026 Here’s a look at the most interesting products from the past week, featuring releases from ASAPP, Babel Street, CTERA, Forward, Riverbed, and Trust3 AI. Babel Street targets AI-driven threats with new agentic investigation capabilities Babel Street has launched Insights Investigator, a new agentic capability that puts tradecraft-trained AI agents at the front edge of investigative work while ensuring analysts remain in control of scope, logic, and outcomes of their missions. As part of the Babel Street Insights platform, Investigator represents a shift from search and AI-assisted queries to analyst-directed, AI-executed investigations. Trust3 AI focuses on AI agent risks with MCP Security layer Trust3 AI has announced the launch of Model Context Protocol (MCP) Security, establishing a new standard for safeguarding enterprise agentic AI workloads. This solution forms a key capability within Trust3 AI’s enterprise agent control plane, empowering security and governance teams with a unified trust layer to seamlessly and safely connect AI agents with vital business data, applications, and systems. CTERA brings AI insights and automation for unstructured data CTERA has announced the launch of CTERA InsightAI, an agentic AI intelligence layer for the CTERA Intelligent Data Platform. The new capability is designed to help enterprises understand, manage, secure, and optimize unstructured data environments. CTERA InsightAI adds AI-driven insights and automation to data operations, expanding traditional data observability capabilities. Forward launches Predict to test network changes before deployment Forward has unveiled Forward Predict, a new capability that allows organizations to evaluate the impact of network changes before deployment. By testing proposed changes against a digital twin of the production network, Forward Predict helps identify potential issues before they reach live environments and supports safer network operations at scale. Riverbed introduces new Aternity tools for autonomous IT operations Riverbed has announced new capabilities for Aternity designed to support autonomous IT operations for digital experience management. The updates help digital workplace teams move toward prevention-focused operations through broader visibility, context-aware intelligence, and governance controls that support automated workflows. ASAPP expands adversarial testing for enterprise AI systems ASAPP has launched Continuous Red Teaming, a new capability that integrates adversarial AI testing directly into ASAPP’s model evaluation framework. The new capability is built on Promptfoo, an AI security platform that helps enterprises detect and address vulnerabilities in AI systems during development.

Riverbed introduces new Aternity tools for autonomous IT operations Riverbed has announced new capabilities for Aternity designed to support autonomous IT operations for digital experience management. The updates help digital workplace teams move toward prevention-focused operations through broader visibility, context-aware intelligence, and governance controls that support automated workflows. Organizations are measured by their ability to deliver frictionless digital experiences that keep employees productive and business workflows operating without interruption. While many IT initiatives focus on improving reactive operations, Riverbed is focused on enabling organizations to prevent disruption altogether. By combining contextual intelligence with enterprise-scale observability, Riverbed Aternity helps IT teams identify, diagnose, and resolve issues before they impact employees or business operations. “Riverbed is now shipping our third generation of AI for digital employee experience, where AI moves beyond chatbots and self-service to help organizations proactively prevent disruption before employees are impacted,” said Dave Donatelli, CEO at Riverbed. These innovations bring AI-driven operational intelligence, deeper experience visibility, and high-fidelity data capture into a unified platform designed to help organizations reduce disruption and accelerate resolution. Aternity natively integrates Riverbed’s APM and NPM expertise through a unified agent and high-fidelity data foundation designed to support AI-driven operations across digital workplace environments. Riverbed IQ 4.0 – The intelligence layer for autonomous IT Release 4.0 of IQ advances IT operations from AI-assisted workflows toward autonomous operations through a unified intelligence layer designed for autonomous IT. IQ 4.0 introduces Riverbed’s agentic framework, enabling authorized AI-driven actions, intelligent workflow creation, natural language interaction, and personalized operational experiences across IT roles. Riverbed Q – The conversational front-end for autonomous IT Q delivers a conversational interface that allows users to tap into the power of AI across IT operations. Designed to meet users where they work in the applications they use the most, such as Microsoft Teams, ServiceNow, Slack and many more. Q integrates with existing collaboration and operational tools, enabling personalized, conversational experiences that accelerate investigation, simplify workflows, and drive action. Riverbed AI Assurance – AI observability and control AI Assurance, another DEX industry exclusive from Riverbed, will introduce AI observability capabilities made possible by Riverbed’s decades of deep application performance management expertise. AI Assurance will help organizations monitor AI adoption, shadow AI usage, operational cost, and agentic behavior as AI becomes increasingly embedded across enterprise workflows and operations. Aternity Replay 2.0 – Fleet-wide experience visibility Aternity Replay 2.0, another DEX industry exclusive from Riverbed, extends replay capabilities from individual user sessions to fleet-wide visibility across enterprise applications. Delivered as a new Unified Agent module, Replay 2.0 enables IT teams to see what employees experienced, accelerating root cause identification without requiring users to reproduce issues. Aternity High Frequency Analytics – Fine-grained troubleshooting at 1-second resolution High Frequency Analytics is a new Unified Agent module that will deliver fine-grained telemetry capture at 1-second resolution across devices, applications, and network data. Designed for advanced troubleshooting, it helps IT teams identify short-duration and intermittent issues often missed by traditional telemetry collection intervals. APM+ – Deep application intelligence for digital experience APM+, another Riverbed innovation unique to the DEX market, brings deep application intelligence directly into IT operations and help desk workflows. Built on Riverbed’s application performance management expertise, APM+ connects application behavior and transactions to employee experience, helping IT teams accelerate root cause identification across enterprise applications. Riverbed Data Express – High-speed data movement for AI operations Introduced in October 2025, Riverbed Data Express Service helps organizations move operational and AI data at up to 10x the speed of traditional solutions. New SaaS capabilities now enable high-speed data movement between AWS, Oracle OCI, and enterprise data centers, helping customers reduce transfer bottlenecks and achieve up to 30% cost savings. “The Riverbed Platform has transformed how we monitor our environment, providing full fidelity visibility and unified observability across networks, applications, and end user experience,” said Douglas Horner, SVP of IM Operations at Global Credit Union. “Building on that foundation, we have developed our AI driven operations capability to proactively diagnose issues faster, optimize performance at scale, and deliver secure, high quality digital experiences for our members. We are especially aligned with Riverbed’s Zero Disruption vision, advancing a prevention first approach that stops issues before they impact colleagues, operations, or user experience,” Horner added. “Modern IT environments are increasingly distributed and complex. Managing hybrid work, cloud services, and AI‑assisted workflows requires IT to shift its focus from ‘zero tickets’ to ‘zero disruption,’” said Bob Laliberte, Principal Analyst at theCUBE Research. “Riverbed is driving this prevention-first approach by combining full‑fidelity telemetry across devices, networks, and applications with experience insights. Together, these capabilities enable IT teams to improve visibility across complex, distributed environments while accelerating the identification and resolution of issues before they affect employee productivity or customer experience,” Laliberte concluded.

AI hype hits a wall when the data doesn’t deliver Companies are pouring money into AI for IT operations, but most projects are still far from maturity. A global survey of 1,200 business leaders, IT leaders, and technical specialists found that while spending and confidence are rising, only 12% of AI initiatives have been fully deployed. The report, authored by Riverbed, suggests that optimism at the executive level is colliding with challenges in data quality, tool complexity, and everyday IT performance. Most AI projects remain in early stages, with only 12% fully deployed across the organization. Big budgets, slow rollouts Organizations nearly doubled their AI investments over the past year. Many leaders and technical specialists agree the spending is delivering returns, with most saying outcomes have met or exceeded expectations. Even so, most projects remain stuck in pilot or development phases. Executives often express confidence in their strategies, while technical teams highlight ongoing issues with data, integration, and scaling. This split helps explain why progress feels uneven. Budgets are growing, but systems are not yet ready to run AI at scale. Tool consolidation accelerates The survey found that organizations use an average of 13 observability tools from nine vendors, creating fragmented environments. Leaders acknowledge this patchwork adds overlap and slows teams when problems arise. Almost all respondents are consolidating, and 93% say they are willing to switch vendors to make it happen. The main drivers are integration, productivity, and alignment with business strategy. That level of openness suggests the vendor landscape could look very different in the next few years, as companies move toward platforms that cover more ground with less complexity. Unified communications under pressure Hybrid work has made unified communications tools central to daily operations. Employees spend a large share of their week on video calls, chat, and collaboration platforms. Despite that reliance, performance remains a frequent complaint. Users continue to report dropped calls, connectivity problems, and inconsistent quality. These issues show up in help desk queues, where UC tickets take longer than average to resolve. Responsibility for UC systems is often divided across multiple teams, which makes it harder to identify problems or apply consistent fixes. OpenTelemetry gains traction OpenTelemetry, the open-source observability framework, is moving toward becoming a standard. A large majority of companies report at least partial adoption, and most expect vendor support to be mandatory within two years. Business leaders are more likely to call it a strategic priority, pointing to its value in improving visibility and preparing for automation. Networks carry the weight The ability to move and share AI data is another pressure point. Respondents named cost, security, and performance as their top concerns when shifting workloads across cloud, edge, and on-premises environments. While public cloud and edge storage are expected to grow modestly by 2028, use of on-premises data centers is likely to decline.

Infosec products of the month: August 2025 Here’s a look at the most interesting products from the past month, featuring releases from: Black Kite, Brivo, Cloudflare, Descope, Doppel, Druva, Elastic, ExtraHop, LastPass, Prove, Riverbed, Rubrik, StackHawk, and Trellix. StackHawk empowers security teams to expand their API testing coverage StackHawk releaseed LLM-Driven OpenAPI Specifications, a powerful new capability that creates API documentation directly from source code. With this new capability, StackHawk analyzes source code repositories, extracts API details using homegrown LLMs, and produces accurate OpenAPI specifications automatically. Doppel Simulation combats social engineering attacks Informed by real-world threats and built with autonomous AI phishing agents, Simulation generates customized, hyper-realistic scenarios tailored to each organization and employee role and behavior, making it possible for businesses to strengthen defenses against social engineering attacks. Druva introduces multiple agents to automate critical tasks Built with Amazon Bedrock AgentCore on AWS, DruAI features DruAI Agents, intelligent agents that can interpret user intent, analyze data, and take meaningful action. This shift moves enterprises beyond traditional, query-based AI to agentic systems designed for action, helping teams strengthen cyber resilience. Rubrik Agent Rewind enables organizations to undo mistakes made by agentic AI Agent Rewind, powered by Predibase AI infrastructure, will enable organizations to undo mistakes made by agentic AI by providing visibility into agents’ actions and enabling enterprises to rewind those changes to applications and data. Trellix expands data security support to ARM-compatible devices Trellix DLP Endpoint Complete offers customers protection against data exfiltration from endpoints by stopping data leakage from accidental or intentional data loss, adhering to compliance frameworks, streamlining remediation, and blocking unauthorized devices from installing software on endpoints. Now, customers can extend these benefits beyond x64 processing devices to ARM-compatible endpoints. Brivo Visitor Management, powered by Envoy, boosts front-desk security Together, Brivo Visitor Management powered by Envoy merges workplace experience with physical security, eliminating silos and enabling a secure sign-in process that scales from single offices to Fortune 500 enterprises. Prove Unified Authentication simplifies identity verification Prove launched Unified Authentication, an authentication solution that passively and persistently recognizes customers, no matter where they appear or how often their devices or credentials change. At its core is the Prove KeySM, a next-generation cryptographic key that is persistently bound to a user’s identity and secured directly on the device. Elastic AI SOC Engine helps SOC teams expose hidden threats Elastic AI SOC Engine (EASE) is a new serverless, easy-to-deploy security package that brings AI-driven context-aware detection and triage into existing SIEM and EDR tools, without the need for an immediate migration or replacement. New Black Kite tool identifies which vendors are most vulnerable to targeted threat groups Black Kite has unveiled the Adversary Susceptibility Index (ASI), a tool designed for TPRM teams to proactively identify which vendors are most vulnerable to specific threat actors before threats escalate into breaches. Riverbed rolls out AI-powered tools to find and fix network issues faster Riverbed launched its new AI-powered intelligent network observability solutions, enhancing network visibility for enterprise IT teams and enabling them to proactively identify and resolve problems in real-time before they escalate into business challenges. ExtraHop helps SOCs connect the dots with identity-driven detection ExtraHop unveiled new innovations to accelerate incident response, offering an understanding of cyberattacks by linking disparate detections to compromised identities. Descope enhances AI identity security with Agentic Identity Control Plane Descope launched Agentic Identity Control Plane, a solution that enables security teams to institute policy-based governance, auditing, and identity management for their AI agent and Model Context Protocol (MCP) ecosystems. The Agentic Identity Control Plane builds on top of the existing Descope Agentic Identity Hub to mark a huge step forward in Descope’s vision of becoming the identity provider for AI agents. LastPass unveils SaaS Protect to clamp down on shadow IT, AI risks Building on the company’s existing SaaS Monitoring capabilities, LastPass SaaS Protect introduces a set of policy enforcements that enable organizations to move from passive visibility into proactive access control. Cloudflare secures sensitive data without fully restricting AI usage Cloudflare announced new capabilities for Cloudflare One, its zero trust platform, designed to help organizations securely adopt, build and deploy emerging generative AI applications. With these new features, Cloudflare is giving customers the ability to automatically understand, analyze and set controls on how generative AI is used throughout their organization, enhancing the productivity and innovation of their teams without sacrificing security or privacy standards.

Week in review: SonicWall firewalls targeted in ransomware attacks, Black Hat USA 2025 Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Black Hat USA 2025 Black Hat USA 2025 took place at the Mandalay Bay Convention Center in Las Vegas. Explore related news, photos, product releases, and more. AIBOMs are the new SBOMs: The missing link in AI risk management In this Help Net Security interview, Marc Frankel, CEO at Manifest Cyber, discusses how overlooked AI-specific risks, like poisoned training data and shadow AI, can lead to security issues that conventional tools fail to detect. He explains how AI Bills of Materials (AIBOMs) extend SBOMs to provide transparency into datasets, model weights, and third-party integrations, improving governance and incident response. Security tooling pitfalls for small teams: Cost, complexity, and low ROI In this Help Net Security interview, Aayush Choudhury, CEO at Scrut Automation, discusses why many security tools built for large enterprises don’t work well for leaner, cloud-native teams. He explains how simplicity, integration, and automation are key for SMBs with limited resources. Beyond PQC: Building adaptive security programs for the unknown In this Help Net Security interview, Jordan Avnaim, CISO at Entrust, discusses how to communicate the quantum computing threat to executive teams using a risk-based approach. He explains why post-quantum cryptography (PQC) is an urgent and long-term priority. SonicWall firewalls targeted in ransomware attacks, possibly via zero-day Attackers wielding the Akira ransomware and possibly a zero-day exploit have been spotted targeting SonicWall firewalls since July 15, 2025. Project Ire: Microsoft’s autonomous malware detection AI agent Microsoft is working on a AI agent whose main goal is autonomous malware detection and the prototype – dubbed Project Ire – is showing great potential, the company has announced on Tuesday. Millions of Dell laptops could be persistently backdoored in ReVault attacks A set of firmware vulnerabilities affecting 100+ Dell laptop models widely used in government settings and by the cybersecurity industry could allow attackers to achieve persistent access even across Windows reinstalls, Cisco Talos researchers have discovered. Trend Micro Apex One flaws exploted in the wild (CVE-2025-54948, CVE-2025-54987) Unauthenticated command injection vulnerabilities (CVE-2025-54948, CVE-2025-54987) affecting the on-premise version of Trend Micro’s Apex One endpoint security platform are being probed by attackers, the company has warned on Wednesday. Adobe patches critical Adobe Experience Manager Forms vulnerabilities with public PoC Adobe has released an emergency security update for Adobe Experience Manager Forms on Java Enterprise Edition (JEE), which fix two critical vulnerabilities (CVE-2025-54253, CVE-2025-54254) with a publicly available proof-of-concept (PoC) exploit. Microsoft urges admins to plug severe Exchange security hole (CVE-2025-53786) The privilege escalation can be performed by exploiting CVE-2025-53786, a newly disclosed vulnerability that stems from Exchange Server and Exchange Online sharing the same service principal – i.e., the Office 365 Exchange Online application – in hybrid configurations. (The app is used to authenticate and secure the communication between Exchange Server and Exchange Online.) Cybersecurity and the development of software-defined vehicles In many automotive companies, the same systems-engineering teams are responsible for both safety and security. As a result, cybersecurity is treated as a subset of safety, undergirded by an implicit assumption: “If it’s safe, it must be secure.” What GPT‑5 means for IT teams, devs, and the future of AI at work OpenAI has released GPT‑5, the newest version of its large language model. It’s now available to developers and ChatGPT users, and it brings some real changes to how AI can be used in business and IT environments. August 2025 Patch Tuesday forecast: Try, try again July started slow with a calm Patch Tuesday, addressing 130 CVEs but only one publicly disclosed, so risk was low. Then two SharePoint CVEs were exploited, heating things up with hotfixes late in the month. Add security issues in Microsoft Exchange and major Google and Apple updates, and July ended very active. Open-source password recovery utility Hashcat 7.0.0 released Hashcat is an open-source password recovery tool that supports five attack modes and more than 300 highly optimized hashing algorithms. It runs on CPUs, GPUs, and other hardware accelerators across Linux, Windows, and macOS, and includes features for distributed password cracking at scale. BloodHound 8.0 debuts with major upgrades in attack path management SpecterOps has released BloodHound 8.0, the latest iteration of its open-source attack path management platform, featuring major enhancements and expanded capabilities. Open-source server management platform Proxmox VE 9.0 released Proxmox Virtual Environment (VE) 9.0 introduces advancements in both storage and networking capabilities, addressing critical enterprise demands. AI in the SOC: Game-changer or more noise? In this Help Net Security video, Kev Marriott, Senior Manager of Cyber at Immersive Labs, explores the challenges and opportunities of integrating AI into Security Operations Centers (SOCs). Third-party partners or ticking time bombs? In this Help Net Security video, Ngaire Elizabeth Guzzetti, Technical Director Supply Chain at CyXcel, discusses why a third of U.S. organizations don’t trust third-party vendors to manage critical risks and what that means for supply chain security. What’s keeping risk leaders up at night? AI, tariffs, and cost cuts Enterprise risk leaders are most concerned about rising tariffs and trade tensions heading into the second half of 2025, according to a new report from Gartner. The firm’s second-quarter Emerging Risk Report, based on a survey of 223 senior risk, audit, and compliance executives, ranks the escalating trade war as the top emerging risk, up from third in the first quarter. The surprising truth about identity security confidence Organizations most confident in their identity security are often the least prepared, according to a new report from BeyondID. The study reveals a troubling gap between what organizations believe about their identity security programs and how they actually behave. Surprisingly, those expressing the highest confidence are adopting fewer best practices than their more cautious peers. Average global data breach cost now $4.44 million IBM released its Cost of a Data Breach Report, which revealed AI adoption is greatly outpacing AI security and governance. While the overall number of organizations experiencing an AI-related breach is a small representation of the researched population, this is the first time security, governance and access controls for AI have been studied in this report, which suggests AI is already an easy, high value target. Ransomware groups shift to quadruple extortion to maximize pressure Threat actors are using a new quadruple extortion tactic in ransomware campaigns, while double extortion remains the most common approach, according to Akamai. Your employees uploaded over a gig of files to GenAI tools last quarter In Q2 2025, Harmonic reviewed 1 million GenAI prompts and 20,000 uploaded files across more than 300 GenAI and AI-powered SaaS apps, and the findings confirm that sensitive data is being exposed through GenAI tools, something many security leaders fear but find difficult to measure. Why 90% of cyber leaders are feeling the heat 90% of cyber leaders find managing cyber risks harder today than five years ago, mainly due to the explosion of AI and expanding attack surfaces, according to BitSight. These threats are also fueling high rates of burnout, with 47% of cybersecurity and cyber risk professionals reporting exhaustion. CISOs say they’re prepared, their data says otherwise A new Axonius report, based on a survey of 500 U.S.-based IT and security leaders, shows a disconnect between perceived readiness and actual performance in vulnerability and exposure management. While 90% of respondents said their organization is prepared to act when a threat is found, only 25% said they trust the data in their security tools. Ransomware is up, zero-days are booming, and your IP camera might be next Cyber attackers are finding new ways in through the overlooked and unconventional network corners. Forescout’s 2025H1 Threat Review reveals a surge in advanced tactics, with zero-day exploits up 46 percent and ransomware attacks averaging 20 per day. Energy companies are blind to thousands of exposed services Many of America’s largest energy providers are exposed to known and exploitable vulnerabilities, and most security teams may not even see them, according to a new report from SixMap. AI can write your code, but nearly half of it may be insecure While GenAI excels at producing functional code, it introduces security vulnerabilities in 45 percent of cases, according to Veracode’s 2025 GenAI Code Security Report, which analyzed code produced by over 100 LLMs across 80 real-world coding tasks. Cybercriminals are getting personal, and it’s working Cybercriminals are deploying unidentifiable phishing kits (58% of phishing sites) to propagate malicious campaigns at scale, indicating a trend towards custom-made or obfuscated deployments, according to VIPRE Security. Fraud controls don’t guarantee consumer trust Over a third of companies say they are using AI, including generative AI, to fight fraud, according to Experian. As fraud threats become more complex, companies are accelerating their investments with over half adopting new analytics and building AI models to enhance customer decision-making. From fake CAPTCHAs to RATs: Inside 2025’s cyber deception threat trends Cybercriminals are getting better at lying. That’s the takeaway from a new LevelBlue report, which outlines how attackers are using social engineering and legitimate tools to quietly move through environments before they’re caught. Back to basics webinar: The ecosystem of CIS Security best practices Watch this on-demand webinar to understand how you can use an ecosystem of security best practices built by the Center for Internet Security (CIS) to support this mission. Cybersecurity jobs available right now: August 5, 2025 We’ve scoured the market to bring you a selection of roles that span various skill levels within the cybersecurity field. Check out this weekly selection of cybersecurity jobs available right now. New infosec products of the week: August 8, 2025 Here’s a look at the most interesting products from the past week, featuring releases from Black Kite, Descope, Elastic, ExtraHop, LastPass, and Riverbed.

New infosec products of the week: August 8, 2025 Here’s a look at the most interesting products from the past week, featuring releases from Black Kite, Descope, Elastic, ExtraHop, LastPass, and Riverbed. Elastic AI SOC Engine helps SOC teams expose hidden threats Elastic AI SOC Engine (EASE) is a new serverless, easy-to-deploy security package that brings AI-driven context-aware detection and triage into existing SIEM and EDR tools, without the need for an immediate migration or replacement. New Black Kite tool identifies which vendors are most vulnerable to targeted threat groups Black Kite has unveiled the Adversary Susceptibility Index (ASI), a tool designed for TPRM teams to proactively identify which vendors are most vulnerable to specific threat actors before threats escalate into breaches. Riverbed rolls out AI-powered tools to find and fix network issues faster Riverbed launched its new AI-powered intelligent network observability solutions, enhancing network visibility for enterprise IT teams and enabling them to proactively identify and resolve problems in real-time before they escalate into business challenges. ExtraHop helps SOCs connect the dots with identity-driven detection ExtraHop unveiled new innovations to accelerate incident response, offering an understanding of cyberattacks by linking disparate detections to compromised identities. Descope enhances AI identity security with Agentic Identity Control Plane Descope launched Agentic Identity Control Plane, a solution that enables security teams to institute policy-based governance, auditing, and identity management for their AI agent and Model Context Protocol (MCP) ecosystems. The Agentic Identity Control Plane builds on top of the existing Descope Agentic Identity Hub to mark a huge step forward in Descope’s vision of becoming the identity provider for AI agents. LastPass unveils SaaS Protect to clamp down on shadow IT, AI risks Building on the company’s existing SaaS Monitoring capabilities, LastPass SaaS Protect introduces a set of policy enforcements that enable organizations to move from passive visibility into proactive access control.