Latest

Data Governance

Reco Secures $30M as Enterprises Struggle With Governing AI

Michael Novinson  •  February 10, 2026

Reco's $30 million Series B round will fuel expansion of its AI SaaS governance platform as enterprises adopt generative AI at scale. CEO Ofer Klein says traditional security tools can't keep up with the explosion of AI agents embedded across SaaS environments.

Data Loss Prevention (DLP)

Zscaler Purchases SquareX to Secure Browsers Without Agents

Michael Novinson  •  February 6, 2026

Zscaler has acquired SquareX to deliver browser security through extensions rather than endpoint agents or stand-alone browsers. CEO Jay Chaudhry said the approach speeds deployment, improves security for unmanaged devices and accelerates time-to-market by up to a year.

Artificial Intelligence & Machine Learning

StrongDM Acquisition Expands Delinea's Cloud PAM Scope

Michael Novinson  •  January 16, 2026

Delinea's acquisition of StrongDM will combine strengths across legacy, cloud-native and developer-first infrastructure. The move supports just-in-time privilege delivery and AI agent access, delivering unified policy enforcement across IT, developer and machine users.

Access Management

JumpCloud Grows Presence in Brazil With MSP MacSolution Buy

Michael Novinson  •  January 8, 2026

JumpCloud has acquired MacSolution, a longtime partner and its largest MSP in the Americas, to enhance global service delivery and deepen its IT modernization capabilities. The move positions Sao Paulo, Brazil, as a strategic hub and strengthens support for partners and customers in Latin America.

Endpoint Security

FCC Loses Lead Support for Biden-Era IoT Security Labeling

Chris Riotta  •  January 6, 2026

UL Solutions has exited its role as lead administrator of the FCC's Cyber Trust Mark, leaving the flagship consumer IoT labeling program without oversight just months after internal security reviews raised concerns over foreign influence in program management.

Governance & Risk Management

Threats to Critical Infrastructure Expected to Intensify

Tony Morbin  •  January 6, 2026

Attacks against critical infrastructure are expected to increase in scope and intensity including hacks on operational technology systems. State actors are now looking for ways to cause damage and disrupt operations, rather than simply steal secrets, according to cybersecurity experts.

Cybercrime

RondoDox Botnet Exploiting Devices With React2Shell Flaw

Akshaya Asokan  •  January 2, 2026

Security firm CloudSEK has uncovered a botnet campaign that is exploiting the React2Shell vulnerability in the Meta-developed, open-source React framework across a variety of devices since December. The security firm attributed the campaign to RondoDox.

Encryption & Key Management

Why 47-Day TLS and SSL Certificate Renewal Cycles Alarm CIOs

Sandhya Michu  •  January 2, 2026

Moving to 47-day TLS and SSL certificate renewal cycles by 2029 will turn certificate management into an enterprise risk. "Automation and crypto-governance are now board-level imperatives. Enterprises can prepare for continuous renewal cycles without losing resilience," says Sectigo CEO Kevin Weiss.

Cybercrime

2025 in Health Data Breaches and Predictions for 2026

Marianne Kolbasuk McGee  •  December 30, 2025

If 2025 lacked a signature attack, hundreds of hospitals, health systems, clinics, physician practices, business associates and other vendors nonetheless experienced breaches in 2025 that cumulatively affected tens of millions of Americans. Hackers will try again harder in 2026.

Endpoint Security

Implantable Brain Devices: Top Cyber and Privacy Concerns

Marianne Kolbasuk McGee  •  December 26, 2025

Implantable brain devices introduce a new and significantly more complex class of cybersecurity risk and critical privacy concerns, compared with traditional medical devices, given the sensitivity of neural data, says Professor Kevin Fu of the Archimedes Center at Northeastern University.

Identity & Access Management

Cyderes Bets on Lucidum to Drive AI-Backed Identity Security

Michael Novinson  •  December 16, 2025

Cyderes has acquired Lucidum to expand its identity threat detection capabilities. Lucidum’s unique tagging and data integration will strengthen Cyderes' AI engine, enabling earlier detection of threats and human risk-based response by unifying off-SIEM telemetry with identity data.

Next-Generation Technologies & Secure Development

Silent Push Buy of Hyas Unlocks Traffic Origin Detection

Michael Novinson  •  December 15, 2025

Silent Push has acquired threat intelligence firm Hyas to strengthen its reach into government cybersecurity markets and improve visibility into adversary infrastructure. The deal includes all Hyas staff and enables the January launch of a tool for tracing proxy traffic back to its true source.