Infosec stories - Page 26

Codific urges boards to prioritise preemptive cyber defence, identity and supply-chain control as 2026 scrutiny and rules tighten.

CSPM tools will vanish as a separate market by 2026, Tenable says, as CISOs pivot spend to machine identity risk and permissions sprawl.

NCC Group links Silver Fox's false-flag malware campaigns to ValleyRAT and uncovers critical PowerG flaws that can fully compromise alarms.

CrowdStrike teams with Nord Security to bundle Falcon tools with secure access for SMBs via NordLayer and MSP marketplace Pax8.

Rapid AI rollout, geopolitical rifts and fragile supply chains are upending cyber risk, straining outdated security and compliance regimes.

Zama predicts privacy-first compliance tools and quantum-safe cryptography will become standard for regulated onchain finance by 2026.

Astra launches a continuous cloud scanner for AWS, Azure and GCP, promising fewer false alerts by validating which risks are truly exploitable.

AI-powered 'Truman Show' scam uses OPCOPRO app and fake trading rooms in official stores to steal cash and victims' digital identities.

Concentric AI launches Private Scan Manager on Azure, letting regulated sectors keep sensitive data in private cloud while using SaaS tools.

Intruder finds over 42,000 sensitive tokens hidden in JavaScript bundles, exposing a major blind spot in modern web app security tools.

HP reports a surge in convincing fake software updates and staged prompts that trick users into installing stealthy, rapidly evolving malware.

Kiteworks and Concentric AI join forces to tie AI-driven data discovery to automated controls on sensitive information shared externally.

Thales launches AI Security Fabric to shield enterprise LLM and agentic AI apps from runtime threats like prompt injection and data leakage.

AI-native malware, deepfake fraud and attacks on connected devices will dominate enterprise cyber risk in 2026, VIPRE has warned.

OWASP has launched its first Top 10 list for agentic AI, warning autonomous systems act as a powerful but risky new digital workforce.

iProov and HYPR integrate liveness checks with passwordless login to stop deepfake workers infiltrating enterprises at onboarding.

Just 1% of organisations fully use Just-in-Time privileged access, leaving AI agents and cloud systems exposed to “always-on” credentials.

Global cyber defence group FIRST reports record 2025 growth, topping 820 member teams and expanding technical, training and capacity work.

Barcelona cyber start-up Zynap raises EUR €6 million seed extension to scale its AI-driven preventive defence platform globally.

AI is set to transform procurement by 2026, making data governance, security and human-machine collaboration central to buying decisions.