42
30
30
30
30
30
30
30
30
New CISO appointments 2026
Companies including Mistral AI, Trellix, Marriott, and ANZ appointed new CISOs in July-September 2026 amid high security-leadership turnover.
CSO Online's rolling column tracks senior security appointments, noting many companies are hiring a CSO/CISO for the first time. Notable moves include Thomas Coudray leaving Ledger to become Mistral AI's CISO, David Soto joining Trellix from Amazon, and Daniel Dubowski becoming Marriott International's SVP and CISO. Other appointments span ANZ, Gigamon, Axonius, Tricentis, Remitly, Allied Universal, and the State of California.
14
30
30
42
42
30
55
30
30
30
30
55
30
30
30
30
30
30
30
30
30
30
Flock Once Touted Its Cameras as ‘Made in the USA.’ Now It’s Not So Clear
WIRED investigation finds Flock Safety stopped marketing cameras as Made in USA, with imports from Taiwan's Primax Electronics facilities in Thailand.
WIRED reviewed US import records showing Flock has increasingly imported commodity cameras and radar components from Primax Electronics in Thailand. Earlier marketing claimed cameras were manufactured in the United States, with assembly in Atlanta and later contract facilities run by East West Manufacturing and Plexus. Flock says its products are National Defense Authorization Act compliant amid activist backlash, local government pullouts, and possible congressional legislation on license plate readers.
25
ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories
Hacker News ThreatsDay digest: malicious browser extensions, AI-agent intrusions, NCSC shadow AI warning, M&A wire fraud, and 119,000-domain fake shops.
Socket found four malicious Chrome and Firefox extensions (J7Tracker, VREO, Orbit Tracker) stealing session tokens and wallet data from Axiom Trade and Padre users via attacker-controlled Vercel deployments. Hunt.io reported a Chinese-speaking operator using Claude Code, Alibaba Qwen, and DeepSeek with the SecFlow orchestration framework to automate intrusions against government and financial targets in Afghanistan, Thailand, Taiwan, and the US. The UK NCSC warned shadow AI use risks breaches and regulatory failure, Microsoft announced privacy-preserving Windows Age APIs, and Gen Digital described fake M&A wire-fraud scams. A 119,000-domain fake-shop operation called DoppelCart was also highlighted.
25
Cybersecurity M&A Roundup: 33 Deals Announced in August 2026
SecurityWeek tallied 33 cybersecurity M&A deals announced in August 2026, headlined by Visa's $2.4B BioCatch buy and Munich Re's $575M At-Bay acquisition.
Thirty-three cybersecurity M&A deals were announced in August 2026. The largest include Visa acquiring fraud-detection firm BioCatch for $2.4 billion in cash and Munich Re buying cyber insurtech At-Bay for $575 million through its HSB unit. Fortinet acquired AI security company Virtue AI, Palo Alto Networks bought agentic workflow platform Console, Cribl acquired AI-native SOC startup Radiant Security, and Deel bought deepfake-detection firm Clarity for a reported $40-50 million. Brinqa, Datavault AI, Echo, and Kiteworks also announced acquisitions.
45
Upcoming Speaking Engagements
Bruce Schneier lists upcoming 2026 speaking engagements at LAcon V, Elevate Festival, CanSecWest, and events in Anaheim, Toronto, Vancouver, and Montreal.
Bruce Schneier posted his upcoming schedule, including LAcon V in Anaheim, an online League of Women Voters event on September 22, 2026, Elevate Festival in Toronto (September 22-24), CanSecWest 2026 in Vancouver (September 30-October 1), and ATTENTION: Democracy, Rebuilt in Montreal (October 21-23, 2026).
12
30
30
30
30
30