Latest

Agentic AI

Surf Raises $57M to Automate Security Hygiene With AI Agents

Michael Novinson  •  March 17, 2026

Surf AI launched an AI-driven platform designed to automate security hygiene tasks across enterprise environments. Backed by $57 million in funding, the company uses AI agents and contextual asset analysis to identify and remediate risks across identities, cloud assets and sensitive data.

Health Sector Braces for Stryker Hack Supply Chain Shock

Marianne Kolbasuk McGee  •  March 16, 2026

An Iranian cyberattack on medical device maker Stryker's internal IT environment does not appear to affect connected products used by the company's healthcare clients. But an outage of Stryker's electronic ordering system could lead to supply chain issues for its customers.

Cancer Center Research Study Hack Affects 1.2M

Marianne Kolbasuk McGee  •  March 4, 2026

An August 2025 ransomware attack on the University of Hawaii Cancer Center's epidemiology division has affected 1.2 million individuals, including personal information such as Social Security numbers of certain research study participants dating back more than 30 years.

CISA Leadership Shakeup Amid DHS Shutdown

Chris Riotta  •  February 27, 2026

The U.S. cyber defense agency is going through a major leadership shakeup - again - following months of staffing turnover, budget cuts and shutdowns. Acting Director Madhu Gottumukkala is moving into a senior strategy role at the Department of Homeland Security, of which CISA is a component.

Data Breach Notification

PayPal Ties Small Data Breach and Fraud to App Coding Error

Mathew J. Schwartz  •  February 23, 2026

Financial services firm PayPal said it discovered a data breach that lasted for six months, exposed some business customers' personal information and led to fraudulent charges. The company said about 100 customers were affected, and that it has fully refunded them for fraudulent charges.

Fraud Management & Cybercrime

Massiv Attack: Android Trojan Targets IPTV Users

Greg Sirico  •  February 19, 2026

Security researchers warn of "Massiv," an Android Trojan - disguised as an IPTV app - targeting users who sideload streaming apps. The malware enables screen capture, overlays and credential theft - and may soon be marketed on criminal underground forums as malware as a service.

Anti-Money Laundering (AML)

Bretton AI Gets $75M to Use AI for Financial Crime Compliance

Michael Novinson  •  February 12, 2026

Bretton AI has raised $75 million in Series B funding led by Sapphire Ventures to scale AI agents for anti-money laundering sanctions and KYC compliance. CEO Will Lawrence says the company is targeting large banks with automation designed to reduce manual investigations and improve auditability.

Data Governance

Reco Secures $30M as Enterprises Struggle With Governing AI

Michael Novinson  •  February 10, 2026

Reco's $30 million Series B round will fuel expansion of its AI SaaS governance platform as enterprises adopt generative AI at scale. CEO Ofer Klein says traditional security tools can't keep up with the explosion of AI agents embedded across SaaS environments.

Data Loss Prevention (DLP)

Zscaler Purchases SquareX to Secure Browsers Without Agents

Michael Novinson  •  February 6, 2026

Zscaler has acquired SquareX to deliver browser security through extensions rather than endpoint agents or stand-alone browsers. CEO Jay Chaudhry said the approach speeds deployment, improves security for unmanaged devices and accelerates time-to-market by up to a year.

►

Fraud Management & Cybercrime

ISMG Editors: How Deepfakes Are Breaking Digital Trust

Anna Delaney  •  January 23, 2026

In this week's panel, four editors discussed how deepfakes are reshaping digital Know Your Customer practices, what the rise of non-human identities means for CISOs and what Delinea's acquisition of StrongDM tells us about where the privileged access market is heading.

Artificial Intelligence & Machine Learning

StrongDM Acquisition Expands Delinea's Cloud PAM Scope

Michael Novinson  •  January 16, 2026

Delinea's acquisition of StrongDM will combine strengths across legacy, cloud-native and developer-first infrastructure. The move supports just-in-time privilege delivery and AI agent access, delivering unified policy enforcement across IT, developer and machine users.

Access Management

JumpCloud Grows Presence in Brazil With MSP MacSolution Buy

Michael Novinson  •  January 8, 2026

JumpCloud has acquired MacSolution, a longtime partner and its largest MSP in the Americas, to enhance global service delivery and deepen its IT modernization capabilities. The move positions Sao Paulo, Brazil, as a strategic hub and strengthens support for partners and customers in Latin America.