Incident Response stories
The latest data showed 635 ransomware incidents in February, but CL0P and The Gentlemen rose sharply as the threat landscape shifted.
Security teams can now build custom AI agents in Falcon as CrowdStrike opens its platform to partners including Accenture, AWS and OpenAI.
Smaller firms could cut security costs as embedded detection and automated response reduce the need for extra hardware or specialist staff.
The move gives the policy group a stronger voice on data resilience and AI governance as governments weigh new cybersecurity rules.
Security teams gain a forensic trail and workflow hub as Vorlon adds incident response tools for AI agents across SaaS apps and APIs.
Nearly all surveyed CISOs said they faced SaaS or AI security incidents in 2025, even as most rated their controls as strong.
The update could help teams restore dashboards and alerts after outages, reducing the risk of losing visibility when systems fail.
Security teams will gain visibility into AI agents in production, with new runtime controls aimed at spotting misuse, shadow AI and compromise paths.
Enterprises could spot compromised maintainers sooner, as the new tool maps open-source contributors, dependencies and policy breaches across builds.
Audit teams can now trace mobile app controls over time, as the new workspace records policy changes, builds and approvals in one place.
Mental health absences could have already cost cyber teams more than 250,000 work days, threatening monitoring and incident response.
Enterprise security teams could cut nuisance alarms as Brivo and Cobalt AI combine access, video and sensor data in one workflow.
The two-hour glitch exposed company and user data to unauthorised staff, fuelling calls for tighter controls over autonomous agents.
Most firms cannot tell AI agent activity from human use, leaving access controls strained as autonomous software spreads across production systems.
Customers may get faster breach containment as the pair link AI detection with managed response across endpoint, cloud and identity systems.
Expel unveils managed SIEM for Microsoft Sentinel and Splunk, embedding its engineers to tune detections and cut operational overheads.
Exabeam names Chris Hartley to lead UKI and Nordics as it deepens regional focus and pushes AI-driven security operations across Europe.
Rubrik links Microsoft Defender with its identity recovery tools to speed response to credential-based attacks and cut downtime after breaches.
NSS Labs warns many enterprise AI guardrails fail basic security tests, urging independent, real-world validation of protections.
Databricks unveils Lakewatch, an AI-driven security platform aiming to replace legacy SIEM tools and counter automated cyber attacks.
