Geek Guy

Category: AI

Explore the latest in Artificial Intelligence at Geek Guy. From deep-dive AI tool reviews to practical tutorials and news, stay ahead of the curve with our expert guides.

Vorlon adds forensics and response to secure AI agents

Vorlon has unveiled AI Agent Flight Recorder and AI Agent Action Center, adding forensics and coordinated response to secure enterprise agentic ecosystems and close a key security gap. The agentic ecosystem contains SaaS applications, AI agents, API integrations, non-human identities, and the sensitive data flows connecting them. It’s become the fastest-growing attack surface in the…

DigiCert Document Trust Manager enhancements improve document security and compliance

DigiCert has announced enhancements to its Document Trust Manager solution to help organisations combat rising document fraud, simplify global compliance, and strengthen trust in digital transactions in the age of AI. Unlike traditional signing tools that require separate regional or departmental infrastructure to meet standards such as AATL and eIDAS, Document Trust Manager centralises signing…

Security for the Quantum Era: Implementing Post-Quantum Cryptography in Android

Posted by Eric Lynch, Product Manager, Android and Dom Elliot, Group Product Manager, Google Play Modern digital security is at a turning point. We are on the threshold of using quantum computers to solve “impossible” problems in drug discovery, materials science, and energy—tasks that even the most powerful classical supercomputers cannot handle. However, the same…

Dell Addresses Emerging Quantum Risks, AI Era Resilience

Dell Technologies is taking a step in expanding cybersecurity and resilience for the AI era and emerging quantum threats by introducing new security capabilities to help organizations secure, detect, and recover from next-gen threats. Quantum computing and AI continue to introduce new security threats These latest enhancements address risks from quantum computing and AI by…

Auvik: Shadow IT, AI Gaps Challenge IT Teams in 2026

Auvik’s 2026 IT Trends Report finds a growing disconnect between AI ambition and operational reality, as IT teams struggle with visibility, staffing, and shadow IT despite rising budgets. While most organizations are increasing investment and expressing optimism around AI, the report shows many lack the governance, time, and infrastructure needed to translate that momentum into…

World Backup Day 2026

World Backup Day is an important reminder of the ever-increasing likelihood that your organization will be the next cyberattack target. While backup remains essential, today’s threat landscape means businesses need to think more broadly about recovery, resilience and what it takes to restore operations with confidence after an attack.

Recent Navia data breach impacts HackerOne employee data

A Navia breach exposed personal data of nearly 300 HackerOne employees after attackers compromised the benefits provider. HackerOne revealed that a data breach at Navia Benefit Solutions exposed the personal information of nearly 300 of its employees. The incident stems from an attack on the third-party benefits provider, highlighting how breaches at external partners can…

Barracuda Advances Cybersecurity Platform and Partner Program

Accelerates Innovation to Strengthen Cyber Resilience and Fuel Partner Growth News highlights: Barracuda unveils BarracudaONE cybersecurity platform innovations and modernised global partner program. New BarracudaONE innovations strengthen cyber resilience across email, network access and generative AI usage. The enhanced partner program introduces new benefits, incentives and tools to help MSPs, resellers and hybrid partners accelerate…

Trivy supply chain breach compromises over 1,000 SaaS environments, Lapsus$ joins the extortion wave

What started as a supply chain attack on Trivy, a widely used security scanner, has become a Lapsus$-linked extortion campaign, with more than 1,000 enterprise SaaS environments already compromised. Charles Carmakal, CTO of Mandiant Consulting, made the assessment at a Google-hosted threat briefing held alongside the RSA Conference 2026 in San Francisco on Tuesday. “We…

Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse

Cybersecurity researchers are calling attention to an active device code phishing campaign that’s targeting Microsoft 365 identities across more than 340 organizations in the U.S., Canada, Australia, New Zealand, and Germany. The activity, per Huntress, was first spotted on February 19, 2026, with subsequent cases appearing at an accelerated pace since then. Notably, the campaign…

Telemetry Pipeline: How It Works and Why It Matters in 2026

A telemetry pipeline has become a core layer in modern security operations because teams no longer send data from applications, infrastructure, and cloud services straight into a single backend and hope for the best. In 2026, most environments are distributed across cloud, hybrid, and on-prem systems, which means more services, more data sources, more formats,…

Akamai Brand Guardian detects and removes AI-driven brand impersonation

Akamai has introduced Akamai Brand Guardian, an evolution of Brand Protector that uses AI to identify and manage brand impersonation at scale. Scammers are exploiting the widespread availability of generative AI to deploy sophisticated fake websites and digital identities in seconds, making it nearly impossible for businesses to keep pace using manual discovery methods. For…

FCC targets foreign router imports amid rising cybersecurity concerns

The FCC will ban new foreign-made routers in the U.S. over security risks, unless approved by DHS or defense authorities. The U.S. FCC announced a ban on importing new foreign-made consumer routers, citing unacceptable cyber and national security risks. The decision, backed by Executive Branch assessments, means such devices can no longer be sold or…

PyPI warns developers after LiteLLM malware found stealing cloud and CI/CD credentials

PyPI is warning of possible credential theft from AI applications and developer pipelines after two malicious versions of the widely used Python middleware for large language models, LiteLLM, were briefly published. “Anyone who has installed and run the project should assume any credentials available to the LiteLLM environment may have been exposed, and revoke/rotate them…

Njordium AI blocks fake invoices and fraudulent payments

Njordium Cyber Group has launched its new AI Fraud Detection Module, a self-learning AI engine integrated into the recently released Vendor Management System (VMS). The module instantly detects and neutralises fake invoices, phantom services or products, and inflated pricing. Fully transparent and compliant with the EU AI Act, it delivers a regulator-aligned solution to Europe’s…

Microsoft hands Entra ID users new option for MFA

Organizations rely on MFA to enforce identity checks before granting access to systems and services. Microsoft has made external MFA generally available in Microsoft Entra ID, expanding support for third-party identity providers. Configure external MFA in Microsoft Entra ID (Source: Microsoft) External MFA supports organizations that use third-party MFA solutions to meet regulatory or business…

Kamasers Analysis: A Multi-Vector DDoS Botnet Targeting Organizations Worldwide 

DDoS attacks are no longer only an infrastructure problem. They can quickly turn into a business issue, affecting uptime, customer experience, and operational stability. Kamasers is a strong example of this new reality, with broad attack capabilities and resilient command-and-control mechanisms that allow it to remain active under pressure. Let’s explore the Kamasers botnet through…

Kamasers Analysis: A Multi-Vector DDoS Botnet Targeting Organizations Worldwide 

DDoS attacks are no longer only an infrastructure problem. They can quickly turn into a business issue, affecting uptime, customer experience, and operational stability. Kamasers is a strong example of this new reality, with broad attack capabilities and resilient command-and-control mechanisms that allow it to remain active under pressure. Let’s explore the Kamasers botnet through…

6 key trends reshaping the IAM market

The identity and access management (IAM) market has shifted its focus from traditional “login and MFA” mechanisms toward treating identity as a security control plane. Buyers are prioritizing phishing-resistant authentication, including passkeys, and the management of non-human identities, according to an array of experts quizzed on developments in the market by CSO. “Workforce access is…

Cybercrime group Lapsus$ claims the hack of pharma giant AstraZeneca

Cybercrime group Lapsus$ claims it hacked AstraZeneca, stealing 3GB of data including credentials, code, and employee information. The Lapsus$ group claims it breached AstraZeneca, stealing about 3GB of sensitive data. The alleged leak includes credentials, tokens, internal code repositories (Java, Angular, Python), and employee information, though the company has not yet confirmed the breach. Even…

AI is breaking traditional security models — Here’s where they fail first

Traditionally, enterprise security operating models operated a fixed and regular cycle: Findings surfaced through periodic scans, security teams triaged results and remediation followed through ticket-based workflows. It was almost an SOP of sorts; the accountability existed, but it was often implicit and fragmented. The remediation would travel across tools, teams and handoffs rather than designed…

Malicious LiteLLM versions linked to TeamPCP supply chain attack

TeamPCP backdoored LiteLLM v1.82.7–1.82.8, likely via Trivy CI/CD, adding tools to steal credentials, move in Kubernetes, and keep persistent access. Threat actor TeamPCP compromised LiteLLM versions 1.82.7 and 1.82.8, likely through a Trivy CI/CD breach. LiteLLM, with over 95 million monthly downloads, helps developers route LLM requests via a single API. The malicious releases, now…

Codenotary introduces AgentX for autonomous Linux infrastructure security

Codenotary has announced the availability of AgentX, an autonomous platform designed to manage, secure, and protect large-scale Linux infrastructure in the cloud or on-premises through coordinated networks of AI agents. AgentX introduces a new approach to infrastructure operations by allowing distributed AI agents to collaborate, automating security enforcement, operational tasks, and lifecycle management while maintaining…

Spur Intelligence delivers deeper visibility into anonymized infrastructure

Spur Intelligence has announced new enhancements to its IP intelligence platform, designed to give security and fraud teams deeper visibility into anonymized infrastructure and enable informed, real-time decisions on risky user sessions. New capabilities include AI service identification, a policy API for real-time session decisions, and enhanced geographic infrastructure insights. AI service tagging in the…

Tenable Hexa AI automates exposure management and security workflows

Tenable has revealed Tenable Hexa AI, the agentic AI engine of the Tenable One Exposure Management Platform that automates security workflows and transforms exposure intelligence into coordinated action to reduce cyber risk. AI-powered cyberattacks, rapid vulnerability discovery and the explosion of AI-driven tools are expanding the attack surface faster than security teams can keep up.…

Barracuda strengthens cyber resilience with BarracudaONE platform updates

Barracuda Networks has announced advancements to the BarracudaONE cybersecurity platform and Barracuda Partner Success Program. The latest innovations strengthen cyber resilience across email, network access and generative AI usage, while the enhanced partner program delivers new benefits, incentives and tools that help partners accelerate growth and profitability. “Email and identity‑based attacks are intensifying at an…

Google’s TurboQuant cuts AI memory use without losing accuracy

Large language models carry a persistent scaling problem. As context windows grow, the memory required to store key-value (KV) caches expands proportionally, consuming GPU memory and slowing inference. A team at Google Research has developed three compression algorithms: TurboQuant, PolarQuant, and Quantized Johnson-Lindenstrauss (QJL). All three are designed to compress those caches aggressively without degrading…

HPE enhances security to support AI and distributed enterprise environments

HPE has unveiled new security innovations designed to help organizations scale distributed operations, reduce cyber risk, and maintain consistent governance as AI adoption accelerates across the enterprise. To help enterprises securely adopt AI and turn resilience into a core business capability, HPE is introducing the HPE Juniper Networking SRX400 Series Firewalls, an expanded hybrid mesh…

FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk Concerns

The U.S. Federal Communications Commission (FCC) said on Monday that it was banning the import of new, foreign-made consumer routers, citing “unacceptable” risks to cyber and national security. The action was designed to safeguard Americans and the underlying communications networks the country relies on, FCC Chairman Brendan Carr said in a post on X. The…

Zoom sees human conversation as its edge in the agentic AI era

AI agents in the workplace are increasingly able to retrieve information, coordinate tasks, and even act on a user’s behalf. But important decisions still typically happen through human interaction. As agentic AI threatens to disrupt the SaaS market, Zoom sees an advantage in its ability to capture interactions across video, phone, and in-person meetings —…

Zoom sees human conversation as its edge in the agentic AI era

AI agents in the workplace are increasingly able to retrieve information, coordinate tasks, and even act on a user’s behalf. But important decisions still typically happen through human interaction. As agentic AI threatens to disrupt the SaaS market, Zoom sees an advantage in its ability to capture interactions across video, phone, and in-person meetings —…

SmartApeSG campaign pushes Remcos RAT, NetSupport RAT, StealC, and Sectop RAT (ArechClient2), (Wed, Mar 25th)

Introduction This diary provides indicators from the SmartApeSG (ZPHP, HANEYMANEY) campaign I saw on Tuesday, 2026-03-24. SmartApeSG is one of many campaigns that use the ClickFix technique. This past week, I’ve seen NetSupport RAT as follow-up malware from Remcos RAT pushed by this campaign. But this time, I also saw indicators for StealC malware and…

OpenAI’s Foundation play reframes the AI roadmap for IT leaders

OpenAI’s non-profit arm has revealed its plans to tackle “humanity’s hardest problems.” The OpenAI Foundation has announced a sweeping range of investment and research goals, from building safeguards around how AI behaves in the wild to pushing for shared data ecosystems and funding disease research. The stated roadmap could serve as a blueprint for how…

DarkSword’s GitHub leak threatens to turn elite iPhone hacking into a tool for the masses

Leaked iOS spyware has some cybersecurity professionals raising urgent alarms about potential mass iPhone compromises, a development that pairs ominously with the recent discovery of two sophisticated iOS exploit kits. At the same time, some other experts say Apple’s defensive features for iPhones remain elite. But several factors have created unprecedented circumstances: the public accessibility…

Why Prevention Isn’t Enough: Shifting to True Operational Resilience in 2026

As cyber threats grow in sophistication and scale, traditional prevention-first security models are proving insufficient for modern enterprises.  This article examines the evolution toward operational resilience, emphasizing the protection of identity systems, rapid containment, and recovery as essential capabilities. It explores how organizations can adopt an “assume breach” mindset, strengthen identity infrastructure, and build recovery-focused…

Saviynt Debuts New Identity Control Plane for AI Agents

Saviynt, an AI-era identity security platform, is unveiling its Saviynt Identity Security for AI solutions, which establishes enterprise-grade capability for fully managing AI agents alongside human and non-human identities (NHIs). Delivering full capabilities to govern AI agents According to Saviynt, the new platform provides organizations with continuous visibility, lifecycle governance, and runtime authorization over autonomous…

Deeper Network Promo Deeper Network Promo Deeper Network Promo Image

Data breach at Dutch Ministry of Finance impacts staff following cyberattack

Dutch Ministry of Finance disclosed a data breach affecting some employees following a cyberattack, investigation is ongoing. The Dutch Ministry of Finance disclosed a cyberattack detected on March 19 after a third-party alert. Attackers breached some internal systems, the incident impacted a “portion of the employees”. Authorities are still investigating the incident and its full…

Darktrace Introduces Darktrace / Adaptive Human Defence, a New Generation of Personalised, Real-Time Security Training and Protection

The first solution that uses an understanding of each individual’s behavior to integrate email security controls with personalised security awareness training; training is personalised based on your inbox activity, and its outcomes used to further strengthen the email security controls in place Unique adaptive coaching tailors the difficulty and content of phishing simulations to each…

TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise

TeamPCP, the threat actor behind the recent compromises of Trivy and KICS, has now compromised a popular Python package named litellm, pushing two malicious versions containing a credential harvester, a Kubernetes lateral movement toolkit, and a persistent backdoor. Multiple security vendors, including Endor Labs and JFrog, revealed that litellm versions 1.82.7 and 1.82.8 were published…

Experts warn of a ‘loud and aggressive’ extortion wave following Trivy hack

SAN FRANCISCO — Mandiant is responding to a major, ongoing supply-chain attack involving the compromise of Trivy, a widely used open-source tool from Aqua Security that’s designed to find vulnerabilities and misconfigurations in code repositories. The fallout from the attack spree, which was first detected March 19, is extensive and poses substantial risk for follow-on…

Critics call FCC router rule a ‘big swing’ that could create more supply chain uncertainty

The Federal Communications Commission’s move to ban foreign-made routers touches on a real threat, but critics say the agency rule is overly broad, practically unworkable and doesn’t meaningfully address weaknesses in router security that have led to major breaches on American governments and businesses. Under the Secure Equipment Act and Secure Networks Act, the FCC…

Apple goes global with key MDM tools and services for business

As it steadily grows its share in business markets, Apple has at last introduced its very useful collection of services for small and mid-sized businesses (SMBs), Apple Business Essentials, outside the US; except it’s not called Apple Business Essentials, and much of it will be free. First introduced November 2021 following the company’s acquisition of Fleetsmith, Business Essentials is…

Apple: Local business ads are coming to Apple Maps

Following years of speculation, Apple has confirmed it intends to introduce advertising in Apple Maps — specifically a business-focused offering designed to grab a chunk of the estimated $296 billion location-based ads market.  Announced alongside big changes in Apple’s services for business, including international introduction of services previously available with Apple Business Essentials in the…

Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR

A large-scale malvertising campaign active since January 2026 has been observed targeting U.S.-based individuals searching for tax-related documents to serve rogue installers for ConnectWise ScreenConnect that drop a tool named HwAudKiller to blind security programs using the bring your own vulnerable driver (BYOVD) technique. “The campaign abuses Google Ads to serve rogue ScreenConnect (

Palantir Will No Longer Profit Off of New Yorkers’ Health Data

A controversial multimillion-dollar deal between New York City’s public hospital system and military contractor Palantir, first reported by The Intercept, is coming to an end, according to recent testimony before the city council. Related Palantir Gets Millions of Dollars From New York City’s Public Hospitals The Intercept reported in February that the New York City…

Exclusive Networks Launches Ignition in North America

Exclusive Networks is expanding its incubation model for emerging cybersecurity vendors into North America, aiming to give MSPs and solution providers earlier access to next-generation, AI-driven technologies while accelerating vendor go-to-market timelines. Exclusive Networks launches Ignition in North America at RSA Conference Exclusive Networks this week announced the North American debut of its “Ignition” program,…

Treasury asks whether terrorism risk insurance program should bolster cyber coverage

The Treasury Department is soliciting public feedback on whether it should change a terrorism risk insurance program to address cyber-related losses. In a Federal Register notice set for publication Wednesday, Treasury seeks comment from the public for a mandatory report it must deliver to Congress this summer on the effectiveness of the terrorism risk insurance…

QualDerm Partners December 2025 data breach impacts over 3 Million people

Over 3.1M people affected as QualDerm Partners suffered a December 2025 breach, exposing personal, medical, and health insurance data. Over 3.1 million people are affected by a December 2025 data breach at QualDerm Partners, where hackers stole personal, medical, and health insurance information from the company’s internal systems. QualDerm Partners is a U.S.-based healthcare management…

News alert: DDoS attacks surge 150%—Gcore analysis shows faster, cheaper more frequent attacks

LUXEMBOURG, Luxembourg, March 24, 2026, CyberNewswire— Gcore, the global infrastructure and software provider for AI, cloud, network, and security solutions, today announced the findings of its Q3-Q4 2025 Gcore Radar report DDoS attack trends. The report reveals growing attack volumes, increasingly sophisticated tactics, and changes in attack locations driven by evolving botnet infrastructure. The DDoS attack…

“It is not the customer’s job to know what they want” rings true in cyber

Ever since I embarked on the founder journey and started working on my own startup, I’ve developed different perspectives and some strong opinions about founder life. In today’s issue, I am going to share one of them – about the fact that there has never been a billion-dollar security company built based on Gartner’s* insight…

IBM’s Sovereign AI Move Signals a Structural Shift in Enterprise AI Strategy

The industry’s movement toward sovereign AI reflects a maturation of the market and an acknowledgment that AI at scale requires the same rigor in governance and infrastructure design that enterprises have long applied to other mission-critical technologies. The post IBM’s Sovereign AI Move Signals a Structural Shift in Enterprise AI Strategy appeared first on RTInsights.

Cisco Reimagines Security for the Agentic Workforce

COMPANY NEWS:  With end-to-end security across AI actions, Cisco is helping organizations confidently deploy AI agents at scale News Summary: Cisco extends Zero Trust Access to agents with agent discovery in Cisco Identity Intelligence, agentic Identity and Access Management (IAM) in Duo, and model context protocol (MCP) policy enforcement and adaptive risk protection in Secure Access…