Threats

A 2026 NASCIO–Deloitte survey found state CISOs’ confidence fell, with more focus on effectiveness metrics and generative AI security work.

Censys added integrations with AI, SIEM, and SOAR platforms, including Cisco Splunk SOAR and ES, Microsoft Sentinel, and Google SecOps.

Netskope Threat Labs reports a ClickFix campaign delivering an AppleScript macOS infostealer that harvests Keychain data and browser session cookies via forced password prompts.

Atos announced an integration of Google Threat Intelligence into its 17 security operations centers and threat research capabilities. The company positions the move as threat-led, AI-assisted intelligence for detection and response, including expanded monitoring features for digital risk protection across its managed security services.

Arctic Wolf released Decipio, a gated community beta tool to detect credential-stealing attempts using LLMNR and NBT-NS abuse.

Netskope says MCP-based agents shift risk to identity and data flows, while many enterprises lack real-time AI governance.

Nokia and Cinia will deliver a managed 24/7 DDoS protection service for Finland using Deepfield Defender capabilities.

Netskope adds an Abnormal AI plugin that ingests email IOCs into CTE and applies web and cloud enforcement near real time.

IBM introduced a cybersecurity assessment for frontier model threats and IBM Autonomous Security, a multi-agent service for coordinated response.

Quest Software announced the Quest Security Management Platform, a unified AI-powered ITDR offering for Microsoft environments. It combines identity threat detection and response with identity defense, faster ransomware recovery via hybrid AD/Entra ID, standby forest provisioning, and secure Microsoft 365 tenant migrations.

Cyble announced its inclusion in Forrester’s External Threat Intelligence Service Providers Landscape, Q1 2026. The release frames its Cyble Blaze AI platform as unifying external threat intelligence, digital risk protection, and SecOps through correlated data, with contextual prioritization and automated response for enterprise and government security teams.

Aviz and Nozomi outline a traffic intelligence pipeline that filters and enriches TAP/SPAN data before sending high-fidelity telemetry to Nozomi sensors.