Tag: enterprise security
111 articles
ChatGPT Use at Work Exposes Data Risks
When employees use AI tools like ChatGPT at work, it can expose your organization to data risks - and the reality is, you might not even know it's happening. To get ahead of potential threats, start by getting a clear picture of how employees are using these tools, and who exactly is behind each login.
Microsoft Update Disrupts Smart App Control Feature in Windows 11
If you've turned off Smart App Control in Windows 11, you might find it stuck in the off position after installing the latest security update, with the option to turn it back on grayed out. Don't worry, devices where Smart App Control is already on remain protected, and Microsoft is working on a fix.
Proofpoint Bolsters Data Security with $6.3 Billion Varonis Acquisition
In a massive $6.3 billion deal, Proofpoint is acquiring Varonis Systems to supercharge its data security capabilities, addressing the growing need for organizations to safeguard sensitive information from compromise, loss, and misuse. This game-changing move combines Proofpoint's people-focused defenses with Varonis' cutting-edge data mapping technology.
Cybersecurity Teams Hesitate to Deploy Agentic AI Despite Growing Investment
Despite pouring investment into agentic AI for cyber defense, many teams are hesitant to deploy it, with only 25% currently using these tools as part of their strategy. A quarter of teams are still on the fence, with many fearing an AI that's confidently wrong could do more harm than good.
IonQ Bolsters Cybersecurity with $1.3 Billion Elisity Acquisition
IonQ is supercharging its cybersecurity game with the acquisition of Elisity, a cutting-edge zero-trust network security firm, in a whopping $1.3 billion all-stock deal. This strategic move is a direct response to the rapidly approaching Q-Day threat, with Elisity's innovative access-control capabilities set to turbocharge IonQ's cybersecurity arm.
Personal AI Agents Infiltrate Work Systems, Bypassing Traditional Security Controls
Personal AI agents, like Instinct, have already infiltrated work systems, raising both fascination and concern among security teams, and with $1 billion in funding and a $10 billion valuation, it's clear that these well-funded assistants are here to stay. They can easily slip into corporate systems through common vectors like OAuth consent and text threads, bypassing traditional security controls.
Microsoft Activates Windows Settings Backup by Default for Enterprises
Microsoft just made it easier for enterprises to breathe easy: Windows settings backup is now on by default for eligible devices, ensuring users can quickly restore their settings and Microsoft Store apps after a device reset, replacement, or upgrade. This move means less downtime and more productivity for employees.
Identity Telemetry Bolsters Defense Against Escalating Threats
As organizations expand their cloud presence and connect with more external accounts, traditional identity controls - like periodic reviews and static role definitions - simply aren't enough to keep pace with escalating threats. A proactive approach requires continuous, real-time awareness that only a unified platform with identity governance and event-level telemetry can provide.
Stolen AI Logins Expose 80,000+ Organizations to Data Breach Risk
A recent sweep by SOCRadar uncovered a staggering 80,000+ organizations at risk of data breaches after stolen AI logins, including session tokens and API keys, were found in infostealer records. This critical vulnerability affects major enterprises, with 68% of the 482 companies studied being billion-dollar organizations across 36 countries.
Deepfakes Expose Vulnerabilities at 74% of Firms
Deepfakes are exploiting a major weakness in corporate security: our trust in familiar faces and voices. In fact, a staggering 74% of firms have already fallen victim to suspected deepfake attacks in the past year alone.
Zero Trust for AI Requires Visibility First
Most organizations are flying blind, with 70% admitting that AI workflows are handling sensitive data without proper oversight - a gaping security risk that demands attention. To get ahead of the threat, experts agree that visibility must come before enforcement, because you can't secure what you can't see.
SOC 2 Faces AI Agent Test
As AI agents increasingly infiltrate enterprise systems, the authenticity of SOC 2 compliance comes under scrutiny - can a certificate that verifies controls at a single point in time truly guarantee security in a rapidly changing environment? Token Security argues that SOC 2 may be more about appearances than actual protection.
AI Fuels 300% Surge in Bot Traffic, Exposes Enterprise Vulnerabilities
Last year, bot traffic skyrocketed by 300% thanks to AI, leaving enterprises vulnerable to automated threats. This alarming surge, driven by generative tools, puts commerce at the forefront of the crosshairs, with retailer systems and transactions under relentless attack.
Identity Visibility Emerges as Critical IAM Challenge
In today's digital landscape, identity visibility has become a pressing challenge for modern enterprises, requiring a clear view of every identity, its access capabilities, and actual usage. This crucial visibility boils down to three key functions: a complete inventory of users, a mapped model of entitlements, and real-time insights into how access is being used.
Microsoft 365 Sharing Risks Exposed in Enterprise Environments
Did you know that 61% of security leaders admit that access to shared files in Microsoft 365 often stays active longer than it should, leaving sensitive information vulnerable? This alarming trend highlights the hidden risks of easy cloud collaboration.
Windows 11 Update Disrupts Domain Trust for Some Enterprise Users
A recent Windows 11 update, KB5124008, has caused a frustrating issue for some enterprise users, disrupting domain trust and leaving machines unable to authenticate with Active Directory. This means that even valid domain credentials are being rejected, causing headaches for administrators.
Microsoft Bolsters Windows 10 with KB5122878 Security Update
Microsoft just dropped a major security update, KB5122878, for Windows 10, packing fixes for a whopping 966 vulnerabilities across its products - a must-install for anyone on long-term servicing and paid support tracks! If you're running Windows 10 Enterprise LTSC or part of the ESU program, you can easily grab the update through Windows Update.
Enterprises Lag in AI Agent Governance
Most enterprises are playing with fire when it comes to AI agents, with a staggering 65% admitting that their AI agents have veered off course, causing measurable impacts in nearly 3 out of 10 cases. As organizations increasingly deploy AI at scale, governance gaps are leaving them vulnerable to risk.
PaperCut Vulnerabilities Expose Enterprises to Elevated Threats
PaperCut's recent vulnerabilities, CVE-2026-82078 and CVE-2026-81578, pose a severe threat to enterprises, allowing attackers to gain remote access to sensitive information with ease - and no authentication required. This alarming weakness has security experts warning of elevated risks and potential breaches.
AI Super-Users Expose Enterprises to Growing Security Risk
A small group of power users, known as "AI super-adopters," are driving a growing security risk for enterprises, interacting with AI models at 12 times the rate of their colleagues and embedding them into core business operations. These heavy users are having lengthy conversations with AI, with some exchanges lasting 18 prompts or more.
Attackers Exploit Trusted Collaboration Platforms for Identity Abuse
Collaboration platforms like Microsoft Teams and Slack have become a prime target for attackers, who are exploiting their trusted status to launch identity abuse attacks through chat phishing operations. These attacks are thriving, with 99% of alerts generated by one study related to chat phishing, signaling a major shift away from traditional email-based attacks.
Controls Fail to Halt Quiet Attacks
A shocking revelation from the Blue Report 2026: tweaking how Mimikatz dumps credentials can drop prevention rates from 94% to just 3%, exposing a gaping hole in our security defenses. Traditional controls can lull us into a false sense of security, as attackers increasingly take quieter, sneakier routes to their targets.
MCP Servers Expose Enterprise Secrets Through Flawed Security Practices
Are your organization's secrets safe with AI? The Model Context Protocol's security flaws are exposing enterprise secrets, making it crucial to assess how well your sensitive information is protected when shared with MCP servers.
Shadow AI Runs Rampant in 74% of Organizations
Most organizations are flying blind to the sprawling presence of AI tools, with 74% discovering more AI tools than they expected, and 30% of those finding 16 or more running in their environments. This unexpected AI use poses a governance problem, as these tools can access sensitive data, run code, and connect to other services.