Enterprise Technology Signals

AOMEI Backupper 8.4.0 amwrtdrv.sys incorrect permissions flaw lets local users write physical disk sectors and inject UEFI payloads with Secure Boot disabled.

Netcraft said five more top U.S. financial institutions selected its digital risk protection services and it reached 4.1 million 2026 takedowns.

Zscaler launched Zscaler Agentic SOC to unify exposure management and SOC workflows using Zscaler telemetry, mesh network, and AI agents.

Proofpoint introduced the Proofpoint SOC Analyst Agent, using OpenAI Daybreak models to support security investigations using Proofpoint security data.

Reco Browser Guard entered general availability, inspecting browser prompts and agent actions using user and business context.

Unisys integrated Microsoft Security Copilot capabilities into its Managed Detection and Response (MDR) offering, delivering AI-assisted threat detection, investigation, and response across hybrid

ISC2 will add ACTion Rooms to the 2026 Security Congress in Denver Oct. 24-28, with six facilitated discussion sessions for attendees.

Kaltura html5lib mwEmbedLoader.php has flaws in unsafe deserialization that enable arbitrary file read and remote code execution (CVE-2026-19912/19913).

Calix GS7 XGS GS5239XG EXOS/6.6.47 has an unauthenticated UPnP WANIPConnection flaw on TCP 5000, enabling NAT mapping changes.

Cribl acquired Radiant Security AI SOC technology to autonomously triage, investigate, and resolve alerts using its telemetry platform.

Apiiro joined Chainguard-led Athena and integrated platforms, making AutoFix free for open source maintainers.

Synack Red Team researcher Malcolm Stagg presented NatJack, a NAT attack class, with two assigned CVEs and interim mitigations.

Darktrace introduced the Behavioral Defense Platform to monitor AI, people, and infrastructure behavior and respond to deviations autonomously.

Reco expanded AI Runtime with browser-level enforcement, prompt analysis and blocking, and automated remediation, plus staged Browser Guard access.

Highway’s Q2 2026 Freight Fraud Index says communication-based attacks were 50% of classified fraud vectors.

Tenda firmware versions include an undocumented backdoor in /bin/httpd login() that grants admin web access via CVE-2026-11405.

The post argues provider native AI guardrails fail SecOps needs and outlines reasons to run enterprise guardrails such as Netskope One AI Guardrails.

CISA guidance says multiple vendor-signed UEFI applications can be abused to bypass Secure Boot and execute unverified code before the operating system loads on systems that trust the vendor’s certificate. Mitigation includes updating firmware/software and updating UEFI DBX revocations to block the affected binaries.

ZeroFox launched ZeroFox AI Analytics, adding real-time external threat visibility, plain-language querying, dashboards, and scheduled PDF/CSV reporting.

Modat mapped internet-exposed RTSP services and reported 8,074 active endpoints that returned live video without authentication in March 2026.