Enterprise security stories

AI-fuelled ransomware hit record levels in 2025, with BlackFog warning that around 86% of attacks worldwide are never publicly disclosed.

Proofpoint snaps up AI security specialist Acuvity to police ‘agentic workspaces’ as enterprises rush to deploy copilots and agents.

Okta launches Agent Discovery to uncover and rein in shadow AI agents, mapping risky app access and tightening identity-based controls.

Arctic Wolf launches Aurora managed endpoint defence, rapid-response SLA and MSP admin portal to help partners scale security operations.

Okta warns North Korean operatives are landing remote tech jobs with stolen and synthetic identities to fund the regime and enable cyber attacks.

ZeroEyes taps former White House advisor Stephen Billy to spearhead federal strategy as it accelerates its push into the US government market.

BADIIS malware is hijacking over 1,800 IIS servers worldwide, quietly boosting illicit gambling and crypto phishing sites via poisoned SEO.

Humanix will pitch its human-layer security platform at RSAC 2026’s Innovation Sandbox after landing a Top 10 finalist spot and USD $5 million.

Endor Labs acquires Autonomous Plane to add reachability-led container image analysis, promising fewer false positives for security teams.

Simbian claims 15-fold customer surge as its AI-driven SOC agents vie to replace rules-based automation in the cyber defence arms race.

Backslash raises USD $19m to secure emerging AI ‘vibe coding’ workflows as autonomous agents reshape how enterprise software is built.

CISOs show strong faith in cyber defences yet less than two-thirds feel ready for fast-rising AI-driven attacks and deepfake threats.

A newly uncovered SSHStalker botnet uses old-school IRC and legacy Linux exploits to hijack outdated corporate and cloud hosts at scale.

Google flags surging attempts to steal AI models as state-backed hackers weaponise Gemini for phishing, intel gathering and malware support.

Keeper rolls out SuperShell, a full-screen terminal interface in Keeper Commander for keyboard-first, zero-trust vault and PAM workflows.

While most slept through Christmas dawn, SonicSentry analysts foiled a 3am brute-force cyber attack on a French client’s firewall.

CISOs rate themselves strong on core cyber resilience but admit worrying gaps on AI-driven threats, deepfakes and software supply chain risk.

SecureW2 launches Nexus Partner Programme, a global channel initiative to drive passwordless, certificate-based network security growth.

Microsoft rolls out fixes for 55 Windows flaws, including six exploited zero-days hitting Shell, MSHTML, Word and key desktop services.

Cyber group FIRST warns CVE disclosures could smash records in 2026, topping 50,000 and potentially surging towards six figures.