Data breaches, privacy, vulnerabilities and practical tips to stay safe online.
Mandiant's M-Trends 2026 report reveals global median dwell time reached 14 days following 500,000 hours of incident investigations. While CrowdStrike Falcon Adversary Intelligence leads in Southeast Asian market scores, Mandiant integrates with Google Cloud to provide machine-speed defense.
Healthcare ransomware attacks rose 40 percent in the third quarter of 2026, highlighting the urgency of CISA's Secure by Design pledge. New HIPAA mandates require technical enforcement of MFA, encryption, and 72-hour data restoration to prevent massive data exfiltration and device wipes.
Microsoft Copilot deployment poses significant security risks due to permission vulnerabilities and agent identity exploitation. Concentric AI reports that 16% of business-critical data is overshared, creating massive exposure through aggregated Microsoft 365 tenant information.
Security teams face significant visibility gaps as 53% of Google Cloud projects contain over-permissioned service accounts. The LiteLLM supply chain breach, affecting 434,000 pipelines, highlights how agentless scanning alone fails to prevent rapid credential harvesting.
Zscaler's AI Data Protection suite addresses risks from 3,400 different AI applications by providing asset discovery and Zero Trust controls. The platform manages massive data transfers, including 18,033 terabytes of AI/ML application traffic recorded in 2025.
Dragos estimates global OT cyber incident costs could reach $172.4 billion annually as ransomware activity targets manufacturing and healthcare. Platform 3.0 introduces risk prioritization and AI-enhanced vulnerability analysis to combat shortening adversary attack timelines.
CrowdStrike Falcon leads in proactive security with its AI-native platform, helping Intermex reduce critical DMZ vulnerabilities by 98%. Microsoft Defender offers significant cost advantages for existing E5 customers, though Falcon maintains an edge in Linux detection and human-led hunting.
Kaspersky Lab transitioned from a 1997 Moscow startup to a global entity reaching $822 million in annual revenue by 2024. The company now faces a complete US market exit following federal bans and sanctions related to national security allegations.
Mandiant's M-Trends 2026 report shows attackers staying in environments for only 11 days before discovery. The analysis highlights how AI automation and credential theft allow attackers to complete full breach cycles in minutes.
FortiOS 7.6 utilizes neural networks trained on 18 million breach patterns to isolate compromised devices within 0.8 seconds. This automation prevents lateral movement in 94% of simulated APT attacks while addressing IT and OT convergence challenges.
SentinelOne reported $1,055.3 million in annual recurring revenue for Q3 FY26 as enterprises diversify security stacks following the CrowdStrike outage. The Singularity Complete tier offers EDR at $179.99 per endpoint, providing a competitive alternative to CrowdStrike Falcon.
Cato Networks released its SSE 360 platform featuring a modular architecture with four standalone modules. The platform uses a GPU-powered global private backbone to maintain latency under 25ms, offering an alternative to Zscaler for enterprises seeking better routing performance.
Cloudflare plans to deploy ML-DSA for post-quantum authentication in mid-2026 to prevent identity forgery. This follows NIST finalizing FIPS 203, 204, and 205 standards to protect data against quantum attacks that could break RSA-2048.
Google completed its $29.5 billion acquisition of Wiz on March 11, 2026, marking the largest deal in Google's history. This transaction reshapes the $11.43 billion CNAPP market as Wiz integrates into Google Cloud while maintaining multicloud support for AWS and Azure.
Palo Alto Networks integrates Prisma Cloud into Cortex Cloud to merge cloud security with detection and response. The platform utilizes agentless scanning for AWS, Azure, and Google Cloud alongside the Defender agent to provide runtime protection and forensic visibility.
