EEP || Cybersecurity Investing Trendjacking (7d)

• Aug 25 discovery: McKesson files 8-K noting unauthorized access to third-party apps and data exfiltration in Oncology and Medical-Surgical units,...

LogicGate's Config Newton agent enables self-service design and editing of GRC applications, but CEO Diego Panama stresses that platform reliability...

Agentic AI is expanding attack surfaces through transient agents, MCP/A2A protocols, and east-west traffic, forcing security enforcement into the...

A UK power generator was knocked offline for four days by an Iranian-linked cyberattack, highlighting state actors' focus on disrupting energy...

When scores conflict, active exploitation (KEV) ranks first, followed by exploit likelihood (EPSS) and technical severity (CVSS), adjusted for asset...

The 2026 OWASP LLM Top 10 keeps the same risks but re-ranks for agents.

• Excessive Agency jumps to third place on incident data
• Prompt Injection...

Resilience is replacing prevention as the core CISO metric, with boards now tracking recovery speed amid $19M-per-hour endpoint downtime costs....

The new Project Watershed 250 pilot deploys free AI and cybersecurity tools from Microsoft, Palo Alto Networks, Dragos and others to Texas water...

House markup of the Open-Source AI Leadership Act and Automotive National and Economic Security Act signals tighter rules on AI model safeguards and...

Early-stage investors are backing applied security AI that tackles specific operational problems rather than generic tools, as seen in Apate.AI’s...

Commvault's new connector embeds cyber recovery steps directly into CrowdStrike Charlotte Agentic SOAR, enabling automated actions like restricting...

• LLM backdoors pose hidden risks: models from third-party sources can harbor dormant triggers activated by specific inputs, bypassing standard...

Fortinet shares hit a 52-week high after Fortinet Federal earned CMMC Level 2 certification, mapping 83 requirements to FortiGate alone.

• Platform...

Cyber insurance renewals have shifted from checkbox questionnaires to hard proof of controls. Underwriters now demand MFA on every admin account and...

Globalgig is expanding its MSSP model to deliver one accountable team across edge, endpoint, identity, and AI security layers, addressing the...

AI agents now chain vulnerabilities autonomously at machine speed, escaping VMs and bypassing traditional containment. This forces a pivot from...

Restoration fails if attackers retain access via hidden persistence.

• Isolate immediately: Disconnect systems and disable compromised accounts to...

Trump's national emergency order restricts foreign bulk-power equipment and software for the US grid, adding procurement constraints for data centers...

Organizational integration determines red-team success more than initial access, CISA found in two engagements. One target's multiple SOCs and untuned...

Rhysida is auctioning 5.79 TB of stolen Berlin state data—including contracts, emails, and classified info—for a 30 bitcoin starting bid after...