Infosec stories

AI tools are speeding up vulnerability hunting and could help lower-skilled hackers exploit flaws far sooner, Flashpoint has warned.

Infosecurity Europe to host new GenAI Security Summit after survey finds UK cyber leaders see agentic AI as biggest defence shift.

Barracuda links surge in device code phishing attacks to EvilTokens kit as criminals exploit Microsoft 365 logins and bypass multifactor checks.

Unpatched VPN gateways are leaving organisations open to ransomware and outages, as modern Zero Trust access cuts off the exposed front door.

CrowdStrike unveils AI security coalition with Accenture, EY, IBM Cybersecurity Services, Kroll and OpenAI to spot and fix code flaws faster.

DTEX warns that AI agents controlled via Telegram and WhatsApp can quietly access files, expose credentials and exfiltrate data from endpoints.

Coro elevates Benjamin Morrell to Vice President of Security Strategy as it ties product design more closely to internal operations and AI-led protection.

Apricorn broadens its Aegis Padlock DT FIPS line with a 32TB hardware-encrypted desktop drive for offline backups and sensitive data.

Thrive widens post-Abacode push with managed compliance service for firms facing tougher rules and cyber risk.

Anthropic and OpenAI take rival paths on AI cyber tools, as one keeps access tightly restricted while the other widens vetted user access.

Everywhen warns businesses and consumers to check web addresses, padlocks and browser alerts as fake sites fuel rising cyber fraud risk.

Lineaje survey flags a widening governance gap as most firms use AI-generated code, yet few can fully see or track it.

Proofpoint warns that 36% of FIFA World Cup 2026 commercial partners still lack the strongest DMARC settings, leaving fans exposed to spoofed emails.

NZD $173,000 average ransomware cost masks deeper losses as QBE data shows preparation can trim cyber claims by 20% and protect trust.

Check Point says Anthropic's Claude Code can quietly stash credentials in .claude/settings.local.json, which may be published in public npm packages.

Check Point and Google Cloud add governance and live monitoring to enterprise AI agents as firms race to secure autonomous workflows.

LevelBlue says unsanctioned AI agents are slipping into enterprise systems, creating a hidden governance and security blind spot for businesses.

Rubrik adds Google Cloud controls for AI agents and Cloud SQL backups as enterprises race to govern autonomous systems and protect data.

Fewer New Zealanders are being harmed by cyber attacks as use of two-factor authentication rises, but reporting of threats remains patchy.

Check Point claims fourth straight win in Miercom hybrid mesh security test, scoring 99.8% and beating rivals on phishing and malware blocking.