Latest news
Global cybersecurity provider CyberFOX announced on June 29, 2026, the acquisition of Timus Networks, a vendor of 100% cloud-native SASE and Zero Trust Network Access. This acquisition adds secure access, secure web browsing, and adaptive policy enforcement to the CyberFOX platform, enabling IT teams to access a wider set of proactive defense capabilities from a single vendor.
360 Privacy announced the appointment of George L. Sax as Senior Vice President, Enterprise Security Operations. Sax brings over 30 years of federal and private sector security leadership, including roles at the U.S. Secret Service and as CSO of a global security firm. The move underscores the company's focus on addressing threats originating from personal data exposure.
Onspring released the 2026 GRC Benchmark Report on July 8, 2026, revealing that AI adoption in the GRC field remains in its early stages: only 13.5% of organizations have embedded AI into core workflows, 45% are in pilot phases, and 16.7% have not used it at all. Data privacy (28.6%) and output accuracy (25.4%) are the primary limiting factors. The report emphasizes that enterprises must first address process fragmentation and data silos to achieve scalable value from AI.
On July 8, 2026, Blackpoint Cyber released an AI SOC Agent for Identity Threat Detection and Response (ITDR), employing a hybrid AI-and-human model to autonomously contain high-confidence threats to Microsoft 365 and Google Workspace accounts, with an average containment time of under two minutes and as fast as 21 seconds. The product is included in all Blackpoint ITDR service tiers at no additional cost.
Cloud security company Upwind disclosed findings from an investigation into a coordinated supply chain attack targeting the AsyncAPI ecosystem. Attackers compromised multiple GitHub repositories and release pipelines, implanted backdoor code in multiple official npm packages, and exploited OIDC publishing identities to launch attacks against different release branches within a short period. The malicious code no longer relies on traditional installation scripts but executes during normal package imports. Upwind CEO Amiram Shachar noted that this is not just a malicious package issue, but a breach of trust mechanisms.
Security operations teams face the risk of detection disruption due to rapidly changing environments. Fig has launched an extended platform covering the full SecOps engineering lifecycle, introducing CI/CD practices and a security data lineage graph to help teams continuously validate detection capabilities before and after deployment, shortening the cycle of large projects such as SIEM migration.
On July 22, 2026, AppViewX announced support for hybrid composite post-quantum cryptography (PQC) certificates and launched the AppViewX MCP server to help enterprises modernize certificate lifecycle management in the AI and quantum era.
Realm Security announces the launch of Detection Integrity, which uses Realm Clarity AI to analyze detection rules and log dependencies within the SIEM, automatically generating protection rules when log ingestion is reduced to prevent detection failures. Additionally, Data Haven adds new search capabilities, allowing data not sent to the SIEM to be queried directly. Both features aim to address the trade-off between log costs and detection coverage.
Whalebone announced that it completed ten service launches in a single quarter, covering nine countries and four markets, achieving double-digit operator launches in a single quarter for the first time. Operators such as MTN Nigeria, MTN Ghana, ZET-MOBILE, A1 Slovenia, and IPKO have launched network-level security services based on Whalebone Aura.
TrustScale announced the launch of Argus, an AI assurance platform based on empirical evidence and deterministic verification, designed to detect and correct hallucinated outputs from large language models. The platform offers support for 12 languages for enterprises and has opened a preview for individual researchers.