Infosec stories - Page 22

HackerOne launches Agentic PTaaS, blending AI agents with human experts to deliver continuous, always-on penetration testing for enterprises.

Ransomware gangs shrank in number but hit more victims in late 2025, with leak-site postings soaring despite fewer active groups.

AI is transforming data privacy as mistrust soars and cyber attacks accelerate, pushing firms to verify every identity and machine action.

AI crime is shifting from experiments to a stable industry, with jailbreak services, adaptive malware and deepfake fraud becoming routine.

Google has dismantled IPIDEA's vast residential proxy network, which hijacked millions of consumer devices for global cyber operations.

Shadow AI tool Clawdbot quietly spreads across workplaces, alarming security teams as staff grant it broad access on unmanaged devices.

Dell warns Australian firms face mounting “resilience debt” as prevention outspends recovery, leaving backups exposed to cyberattacks.

Zscaler launches an AI Security Suite to tackle soaring enterprise AI risks, promising visibility into shadow AI and non-human traffic.

AI-driven cloud adoption is forcing firms to swap static privacy checklists for continuous, real-time defence of sensitive data flows.

Rapid7 appoints veteran cyber leader Simon Ractliffe as APJ general manager to drive regional growth and deepen Microsoft-focused security.

A critical flaw in Apache bRPC's /pprof/heap endpoint allows unauthenticated remote code execution on exposed services, researchers warn.

AI's rapid spread, weak data governance and rising scepticism are reshaping digital trust and sharply escalating privacy risks.

Security and governance fears keep half of agentic AI stuck in pilots, even as leaders raise budgets and pursue tightly supervised use cases.

WhatsApp launches Strict Account Settings, a lockdown mode offering tighter privacy and security for journalists and other high‑risk users.

SonicWall rolls out NSM 3.5 SaaS, baking credential, data and analytics security into everyday firewall management by default.

QR codes in HTML, bogus Teams callbacks and fake Facebook windows are among new email scams sidestepping traditional security tools.

VaynerX is deploying Keeper's enterprise password manager to centralise credentials and curb risks from password reuse and phishing.

Cloudbrink adds Safe AI controls to its zero trust platform, securing hybrid enterprise use of AI agents and browser-based AI services.

ITSEC Asia teams with Infinix to pre-install AI cyber defence app IntelliBroń Aman on new smartphones, targeting 100,000 users in Indonesia.

Kingston wins FIPS 140-3 Level 3 for its IronKey Keypad 200 USBs, making it the first supplier with three drives at this stringent standard.