Infosec stories - Page 30

Just 1% of organisations fully use Just-in-Time privileged access, leaving AI agents and cloud systems exposed to “always-on” credentials.

Global cyber defence group FIRST reports record 2025 growth, topping 820 member teams and expanding technical, training and capacity work.

Barcelona cyber start-up Zynap raises EUR €6 million seed extension to scale its AI-driven preventive defence platform globally.

AI is set to transform procurement by 2026, making data governance, security and human-machine collaboration central to buying decisions.

iProov and HYPR partner to embed biometric liveness checks into workforce onboarding, tackling deepfake and synthetic identity fraud.

Yubico experts say 2026 will redefine authentication, with post-quantum security, digital ID wallets and AI-driven threats converging.

Keeper launches a zero-knowledge secrets manager extension for JetBrains IDEs, aiming to eliminate hardcoded credentials in codebases.

Proofpoint flags a sharp rise in Microsoft 365 account takeovers via device code phishing, hitting firms from finance to government.

Black Kite launches Product Analysis tool to expose hidden risks in third-party software, from SaaS subdomains to SBOM dependencies.

Nudge Security unveils expanded AI-in-SaaS controls to monitor chatbot use, browser activity and risky integrations across cloud apps.

AI-powered cyber attacks are outpacing thinly staffed security teams, as firms prioritise defence but starve programmes of people and budget.

Checkmarx snaps up AI start-up Tromzo to fold reasoning-based agents into its AppSec platform and speed autonomous code security.

Storm-0249 hijacks trusted security and Windows tools to stealthily broker high-value network access for ransomware operators.

VIPRE warns AI-native malware, deepfake fraud and IoT attacks will surge in 2026, outpacing defences as regulators tighten AI rules.

Generative AI tools drive a surge in workplace data breaches, with monthly policy violations more than doubling as shadow AI use persists.

AI-driven attacks shifting from data theft to crippling operations mark a 2025 tipping point for UK cyber security, DTP Group warns.

CommScope launches PRiSM-based secure boot signing for TI AM6x chips, aiming to simplify compliance with tightening industrial cyber rules.

SafePay ransomware is quietly crippling small firms, with leaked data showing over 90% of victims are SMBs and many attacks never disclosed.

Radware doubles its global DDoS cloud capacity to 30 Tbps, adding AI-driven DefencePro X to counter rising large-scale and complex attacks.

Accurate address data is emerging as a critical, often overlooked weapon in the fight for reliable digital identity verification and fraud control.