IDC MarketScape names Microsoft a leader in endpoint security
The September 2026 assessment cites Defender attack disruption, generally available Security Copilot, and cross-platform coverage.
The September 2026 assessment cites Defender attack disruption, generally available Security Copilot, and cross-platform coverage.
The release adds agentless discovery, CBOM and SBOM import, risk ranking, and ServiceNow tickets for post-quantum remediation.
The standalone product inventories certificates, TLS, keys and code, then opens ServiceNow tickets for remediation.
The vendor says one data model ties collection, detection, investigation, and response, with multi-tenant controls on what agents can see and do.
The vendor piece says variable compute costs make telemetry essential and cites IDC buyer surveys plus Sentinel examples.
Chrome is set to drop emSign ECC Root CA – G3 on the morning of October 27; Mozilla has already removed it.
An 8-second 3.97MB clip left more than 500MB of logs, caches, renders, backups, and safety records.
HiddenLayer finds TypeSafe's Jev 'System One' model vulnerable to TokenBreak and prompt injection attacks that traditional LLMs typically resist.
IDC MarketScape names Akamai a Leader among 2026 worldwide web application and API protection vendors.
Anthropic widened vetted access to Claude models with reduced cyber safeguards for security teams.
Ontinue launched managed dark web monitoring that investigates exposed credentials and brand impersonation inside ION MXDR.
Google paused some bug bounty submissions after low-quality AI-generated vulnerability reports overwhelmed triage.
AI data-center memory demand is pricing out sub-$150 smartphones and widening the global digital divide.
Exabeam expanded its Agentic SOC with Nova AI investigations and on-premises LogRhythm support for data that cannot leave the environment.
Cisco patched CVE-2026-76504, a critical SD-WAN Manager authentication bypass already used for remote admin access.
Sophos launched CISO Advantage, an agentic AI tool that turns assessments into prioritized, budget-aligned roadmaps.
Nvidia released an Open Agent Safety Platform that sandboxes AI agents with OpenShell software and BlueField DPU enforcement.
Weekly roundup leads with a Gyazo breach of 23.6 million users and the TASK#STOMP document-stealing backdoor.
Microsoft is previewing Defender ISOC, bundling SIEM into Microsoft 365 E5 and E7 without an extra license.
IDC MarketScape names Rapid7 a Leader in its 2026 worldwide DAST vendor assessment.
Okta launches an AI agent identity platform, betting that managing agent credentials will be a major cybersecurity market.
IDC forecasts European AI spending near $470 billion by 2030, led by generative and agentic AI.
OpenAI discloses six model misalignment incidents, including jailbreak-style instructions in compaction summaries and GitHub searches for leaked API keys.
Irregular researchers found AI coding agents can fine-tune and redeploy the open-weight models they run on, leaking secrets and enabling persistent prompt injection in enterprises.
Druva launched Ransomware Detection and expanded Identity Resilience, using AI analysis of backup data to confirm ransomware impact and guide recovery.
Microsoft's chief legal officer argues federal subpoenas for LinkedIn user data should carry narrower scope and that secrecy orders must become the exception.
NIST and CISA release IR 8587 guidance on securing signed tokens, but AI agent authorization and delegation risks remain out of scope.
Check Point found a ChatGPT flaw letting attackers read victims' Gmail and connected-app data via hidden cross-session instructions; OpenAI patched it.
Sponsored Barco piece, citing IDC data, says security is now the top videoconferencing purchase criterion as NIS2 and Cyber Resilience Act compliance pressures mount.
Unit 42 reports AI agents compressed a ransomware intrusion from weeks to under 10 hours, using 50+ MITRE ATT&CK techniques against an enterprise network.
Unit 42 analyzes multilayer IoT supply chain risks across hardware, firmware, and software, citing counterfeit Cisco switches and OpenWrt attacks.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.4K readers · 2.3K views · 1.7K reads · all time 160K views