Check Point Starts Renting Out Its Firewalls to Midsize Companies as Appliance Sales Slide and Fortinet Surges
Check Point’s new Firewall-as-a-Subscription swaps upfront hardware purchases for a three-year monthly or annual fee, aimed at midsize buyers as its own product revenue falls.
ProjectDiscovery Gives Away Neo Triage, Betting Proven Exploits Beat CVSS Scores for Clearing Vulnerability Backlogs
ProjectDiscovery’s Neo Triage reproduces each reported vulnerability in a sandbox against the live asset and returns a verdict with evidence, and it ships in every Neo tier including free.
Fewer Than 20 Percent of AI Decisions Have a Named Owner as Nuix, Basware and GovSignals Push Audit Trails
Sopra Steria Next finds few AI-driven decisions have an owner or can be replayed, while Nuix, Basware and GovSignals push audit trails and human sign-off as the fix.
AI Code Still Fails 38 Percent of Security Tests as One in Seven US Healthcare Sites Runs Known Exploited Flaws
Veracode says AI-written code now passes 62% of security tests, up from 56%. SecurityScorecard found known exploited flaws on one in seven US healthcare sites. Read together, they point to triage as the real bottleneck.
CISA Adds Exploited VMware ESX Logging Flaw and Fragnesia Linux Root Bug to KEV Catalog
CISA added two exploited flaws to its KEV catalog on October 28: a low-scored VMware ESX logging gap that lets admins act unseen, and the Fragnesia Linux kernel bug that turns a local user into root. Federal agencies get until October 31 for the Linux fix.
ISC2 AI Security Pilot Puts Governance and Model Defense on the Same Exam
ISC2 has published the outline for its forthcoming AI Security Certification pilot, offering a useful picture of the skills employers may soon expect from people…
Your AI Assistant Is Becoming a New Route Into Your Accounts
Connecting an assistant to email, documents and business software changes the account-security picture. The assistant can now retrieve private material and, depending on the integration,…
Tracking Pixels Are a Compliance Liability Most Sites Never Audit
Hospital settlements, FTC cases, VPPA and CIPA suits and European fines all trace back to marketing tags nobody checked. Here is what a real pixel audit looks like.
Datadog Offers Nearly 4 Billion Dollars for Israeli Cloud Security Startup Upwind
Datadog has offered close to $4 billion for Upwind Security, but the Israeli cloud security startup has not accepted and is finalizing a $300 million round at a valuation of about $3.8 billion.
Cloudflare Deploys PHP2Shell Defenses as Critical PHP Flaws Put Websites at Risk
Precautionary website shutdowns spread as organizations race to patch PHP2Shell, while Cloudflare deploys firewall defenses and security agencies urge immediate action.
Cybersecurity Digest, October 19, 2026: AI-Powered Intrusions, Cloud Compromises and Critical Infrastructure Vulnerabilities
The cybersecurity landscape is changing in ways that make traditional distinctions between sophisticated attackers and ordinary cybercriminals increasingly difficult to maintain. Today’s developments illustrate the…
Continuum AI Pushes Autonomous Cybersecurity From Vulnerability Discovery Toward Tested Repairs
Continuum AI has introduced OrcaCyber Zero 1.5, a cybersecurity reasoning model designed to investigate vulnerabilities, validate exploitability and support remediation. The model includes a million-token context…
Japan’s Cybersecurity Warning Gains Urgency as Disclosed Incidents Surpass Last Year’s Total
TrendAI has issued a threat advisory for organizations in Japan after its researchers found that publicly disclosed incidents during the first nine months of 2026 exceeded…
Lattice Brings Post-Quantum Security to the Firmware Beneath AI Infrastructure
Lattice Sentry 5.0 brings post-quantum cryptography to firmware protection and device attestation, addressing the trusted foundations beneath AI infrastructure.
An AI-Cloned CEO Voice Exposes the Security Risk of Obeying the Boss
KnowBe4’s Singapore survey highlights how executive authority and misplaced confidence can encourage employees to obey an AI-cloned CEO voice before verifying it.
Billington Critical Infrastructure CyberSecurity Summit, Nov. 17–18, 2026, San Antonio, Texas
Nearly 30 speakers are confirmed for the inaugural Billington Critical Infrastructure CyberSecurity Summit, bringing energy, communications, transportation and water security leaders to San Antonio on November 17–18, 2026.
CrowdStrike Faces Another Stock Split, but This Time It Is the Canadian Depositary Receipt
CrowdStrike is approaching another stock-related corporate action, although investors should distinguish between the cybersecurity company’s Nasdaq-listed shares and its Canadian Depositary Receipts (CDRs). The upcoming…
IonQ to Acquire Cybersecurity Firm Elisity in $1.3 Billion All-Stock Deal, Expanding Beyond Quantum Computing
Quantum computing company IonQ has agreed to acquire cybersecurity firm Elisity in an all-stock transaction valued at up to $1.3 billion, marking a significant expansion…
Hadrian Raises $40 Million to Fight the Emerging AI Hacking Crisis
Cybersecurity company Hadrian has raised $40 million in new funding as the security industry prepares for a fundamental change in the economics of hacking: artificial…
Cybersecurity Weekly: Zero-Days Hit the Internet’s Defensive Edge as AI Starts Changing the Attack Cycle
The most important cybersecurity story of the past week was not a single breach but a remarkable concentration of attacks against the systems that are…
Trust Only Software That Can Explain Itself
I’ve put five project sites online lately. AltSql, VPN Works, Precomputing, Preconfiguration, BareProxy. Most of that happened in September; BareProxy squeezed in during the first…
Zenity AI Agent Security Summit New York 2026, October 21, Pier Sixty, New York
The New York edition moves to Chelsea Piers and changes the focus. It covers what happens as agents gain autonomy and anyone in a company…
Zenity AI Agent Security Summit London 2026, October 8, 8 Bishopsgate, London
Zenity is taking its agent security summit outside the US for the first time. The London day looks at what autonomous agents mean for Europe:…
SecTor 2026, October 6–8, Metro Toronto Convention Centre, Toronto
SecTor has run since 2007. It’s Canada’s largest security conference and part of Black Hat’s global portfolio. This year’s lineup has more than 40 briefings…