Incident Response Stories - Page 3

Global Stories

Incident Response stories

SentinelOne opens Purple AI investigation to all customers

Security teams facing rising alert volumes can now use SentinelOne's autonomous investigations without extra tools or integrations through an opt-in trial.

By Sean Mitchell • 3 min read • Last week

Data Protection

AppViewX launches agent identity security for enterprises

Private preview access is now available as security teams race to govern AI agents and harden identity controls for a post-quantum era.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Software-as-a-Service

Grafana wins AI customers as observability shifts cloud

Rising AI workloads are pushing more firms towards managed monitoring as operational complexity and telemetry costs make self-hosted tools harder to justify.

By Sofiah Nichole Salivio • 4 min read • Last week

Network Security

Sygnia uncovers Velvet Ant breach dating back to 2016

A near-decade of undetected access raises fresh concern after investigators found the group had hidden in a disconnected network since 2016.

By Sean Mitchell • 4 min read • Last week

Cloud Security

Mini Shai-Hulud worm turns public, NCC Group warns

Public release of the Mini Shai-Hulud code means copycat attacks can now hit developers, CI/CD systems and open-source supply chains.

By Sofiah Nichole Salivio • 4 min read • Last week

Data Protection

Reco launches Claude security integration for enterprises

Security teams can now trace AI activity across employee and developer environments as Reco links Claude usage to permissions, keys and data paths.

By Mark Tarre • 4 min read • Last week

Malware

Barracuda launches AI email protection for Microsoft 365

A single phishing email can now compromise identities, bypass multifactor authentication and hit endpoints within five minutes, Barracuda said.

By Sean Mitchell • 4 min read • Last week

Malware

Rapid Brigantine ties ClickFix malware to fake updates

BlueVoyant says a ClickFix malware campaign using fake browser updates is linked to the Rapid Brigantine ransomware ecosystem.

By Mark Tarre • 3 min read • Last week

DevOps

Enterprises spend USD $2.5 million on logging tools

AI workloads are pushing log volumes up 93%, yet most large companies still leave 86% of data unanalyzed to keep costs down.

By Sean Mitchell • 4 min read • Last week

Data Protection

Rubrik ties AI security tools to AWS Bedrock AgentCore

AWS customers building AI agents gain policy enforcement and recovery tools as Rubrik extends its governance layer into Bedrock AgentCore.

By Joseph Gabriel Lagonsin • 3 min read • Last week

Software-as-a-Service

Kaseya opens Intelligence platform to Claude, Copilot

IT teams will be able to use Claude and Microsoft Copilot for real-time Kaseya workflows, with general release due in 2027.

By Sofiah Nichole Salivio • 4 min read • Last week

Ransomware

Blackpoint names Erin Whitmore to lead threat intel

Managed service providers are under rising pressure from ransomware and nation-state attacks as Blackpoint expands intelligence-led security for partners.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Stories from Other Regions

Incident Response stories

Disaster Recovery

INC ransomware surges as Australia stays in sights

Australian businesses face renewed ransomware pressure as INC expands quickly after LockBit and BlackCat were disrupted, researchers say.

By Mark Tarre • 3 min read • Last week

Ransomware

Willis report says cyber cover meets most breach losses

Ransomware losses and third-party risks are testing policy limits as Willis data show most breach costs are still covered.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Security Operations Centres

FIRST raises 2026 vulnerability forecast to 66,000 CVEs

Security teams face a heavier patching burden next year, with disclosure volumes now tracking far above FIRST's earlier estimate.

By Sofiah Nichole Salivio • 4 min read • Last week

Security Information and Event Management

e2e-assure launches sovereign AI security platform

It aims to help critical infrastructure operators keep sensitive security data and AI models inside UK-controlled systems during cyber incidents.

By Sofiah Nichole Salivio • 4 min read • Last week

Data Protection

N-able opens Bengaluru centre to boost cyber hiring

The expansion could lift local headcount by 50% or more by end-2026 as the cyber group taps Bengaluru's scarce security talent.

By Mark Tarre • 4 min read • Last week

Security Operations Centres

SolarWinds appoints Justin Henkel as chief security officer

The hire comes as customers scrutinise SolarWinds' security posture more closely after its 2020 breach and rising cyber risk across software suppliers.

By Sofiah Nichole Salivio • 4 min read • Last week