Latest

Identity & Access Management

Cyderes Bets on Lucidum to Drive AI-Backed Identity Security

Michael Novinson  •  December 16, 2025

Cyderes has acquired Lucidum to expand its identity threat detection capabilities. Lucidum’s unique tagging and data integration will strengthen Cyderes' AI engine, enabling earlier detection of threats and human risk-based response by unifying off-SIEM telemetry with identity data.

Next-Generation Technologies & Secure Development

Silent Push Buy of Hyas Unlocks Traffic Origin Detection

Michael Novinson  •  December 15, 2025

Silent Push has acquired threat intelligence firm Hyas to strengthen its reach into government cybersecurity markets and improve visibility into adversary infrastructure. The deal includes all Hyas staff and enables the January launch of a tool for tracing proxy traffic back to its true source.

Advanced SOC Operations / CSOC

Harness Nets $240M at $5.5B Valuation to Advance DevSecOps

Michael Novinson  •  December 11, 2025

With $200 million in Series E funding and a new $5.5 billion valuation, Harness will scale its AI-powered platform for security, compliance and reliability in software development. The investment will support R&D into AI agents, testing, cost optimization and security for AI workloads.

Fraud Management & Cybercrime

Checkmarx Purchases Tromzo to Boost AI Security Automation

Michael Novinson  •  December 9, 2025

Checkmarx acquired AI security startup Tromzo to jumpstart its roadmap for agentic application security. The deal gives Checkmarx a ready-built platform and team focused on enterprise-grade triage and remediation agents designed to streamline vulnerability management.

Iran Hackers Take Inspiration From Snake Video Game

David Perera  •  December 2, 2025

Iranian nation-state hackers took inspiration from a mobile phone time-killing mainstay, say security researchers who spotted hackers downloading malware masquerading as the Snake video game. A callback to the game isn't nostalgia, say researchers at Eset.

Artificial Intelligence & Machine Learning

Ads Without Eyeballs: Online Shopping's AI Agent Problem

Rashmi Ramesh  •  December 1, 2025

The online retail industry spent decades honing how to nudge people into clicking the buy button. Now it faces a customer who doesn't want anything at all: the artificial intelligence shopping agent. Agentic commerce could hollow out retail media and force a shift in how platforms monetize.

Blockchain & Cryptocurrency

Cryptohack Roundup: WLF Scrambles to Secure User Funds

Rashmi Ramesh  •  November 27, 2025

This week, World Liberty Financial scrambles to secure user funds, the U.K.'s Serious Fraud Office arrests two people over a $28M Basis Markets rug-pull probe, a Gana Payment hack drains $3.1M and Crypto Dispensers weighs a $100M sale following money-laundering charges against its CEO.

Endpoint Security

Asus Routers Hacked in 'WrtHug' Campaign

David Perera , Greg Sirico  •  November 19, 2025

Suspected Chinese cyberespionage hackers have commandeered tens of thousands of Asus routers in an operation showing a heavy emphasis on infecting devices stationed in Taiwan. The campaign tracks with reports that Beijing is actively pressing unpatched routers into ORB networks.

Cryptocurrency Fraud

US Strike Force Takes Aim at Southeast Asian Scam Centers

Suparna Goswami  •  November 13, 2025

The U.S. Attorney for the District of Columbia announced the launch of the Scam Center Strike Force to dismantle criminal networks behind romance bait scams. The initiative targets sophisticated transnational criminal organizations based in Southeast Asia including Cambodia, Laos and Burma.

►

Cyber Insurance

Cyber Risk Redefines the Bottom Line for FIs

Anna Delaney  •  November 13, 2025

FIs face rising cyber complexity as threat actors evolve and insurers raise the bar. David Anderson, vice president of cyber at Woodruff Sawyer, a Gallagher company, explains how proactive defense, governance and privacy controls define the new economics of cyber risk.

Security Operations

Palo Alto Networks Bets Big on Agentic AI

Michael Novinson  •  October 28, 2025

With new products set to launch, Palo Alto Networks is expanding its AI cybersecurity footprint. Chairman and CEO Nikesh Arora introduced the AgentiX platform, a retooled cloud approach, identity enhancements and a deal making Palo Alto the core security provider for Oracle Cloud.

Identity & Access Management

JumpCloud Acquires Breez to Enhance Access Control Strategy

Michael Novinson  •  October 23, 2025

Breez's approach to identity threat detection and data classification made it a strategic fit for JumpCloud, which aims to fully integrate ITDR into access workflows. The deal follows the Stack Identity acquisition and adds product leadership and engineering talent.