Geek-Guy.com

Indigo Appoints Ilex Content Strategies as its Marketing and Communications Agency of Record

Indigo Telecom Group, a strategic partner for critical digital infrastructure, has appointed  Ilex Content Strategies, a global B2B marketing and communications agency, as its marketing and communications agency of record. Ilex will support brand and messaging development, account-based marketing, content creation, internal communications, and Borderless PR as Indigo drives global growth.      Indigo serves critical digital infrastructure providers, from…

Eon Launches Ransomware Protection for Cloud Databases

As enterprises move critical workloads to managed cloud databases, a growing ransomware recovery gap is emerging across modern cloud infrastructure. Eon is aiming to close that gap with new ransomware protection designed specifically for managed cloud database environments. The new capability expands Eon’s ransomware protection suite and focuses on detecting corruption and restoring trusted data…

RondoDox botnet expands arsenal targeting 174 flaws, and hits 15,000 daily exploit attempts

RondoDox botnet targets 174 flaws, reaching 15,000 daily exploit attempts in a more focused and strategic campaign. RondoDox botnet is ramping up attacks, targeting 174 vulnerabilities with up to 15,000 daily exploitation attempts in a more focused and strategic campaign, Bitsight reported. “We gathered all these exploit attempts (identifiable by indicators like the User-Agent and…

CTG unveils cyber resilience scoring dashboard for measurable risk reduction

CTG has announced the launch of a cyber resilience scoring dashboard that helps organizations quantify risk, prioritize remediation, and track measurable improvement over time. The dashboard is part of the Group’s Cegeka Security Advisory Framework (CSAF), a modular approach that combines assessments and advisory services to help organizations continuously improve their security strategy. By translating…

Every significant B2B company is becoming a security company

Every platform giant is becoming a security company. As every enterprise is becoming more and more tech-enabled, the responsibility for protecting data, identities, and infrastructure starts to fall on the platforms where that work happens. Over the past several years, I have come to a simple realization: that every platform vendor eventually becomes a security…

LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader

The ransomware operation known as LeakNet has adopted the ClickFix social engineering tactic delivered through compromised websites as an initial access method. The use of ClickFix, where users are tricked into manually running malicious commands to address non-existent errors, is a departure from relying on traditional methods for obtaining initial access, such as through stolen…

SCW Trust Agent: AI tracks AI influence in code to reduce software risk

Secure Code Warrior has announced SCW Trust Agent: AI, a governance solution designed to make AI influence in software development visible, attributable, and enforceable at the point of commit, enabling enterprises to scale AI coding tools with measurable control over software risk. Organizations can trace which AI models influenced specific commits, correlate that influence with…

Xona Systems brings real-time threat response to OT remote access sessions

Xona Systems has introduced Active Defense, a new capability that enables organizations to stop threats during live remote access sessions in operational technology (OT) environments automatically, without waiting for manual intervention. In many environments, the gap between detecting suspicious activity and stopping an active session can stretch from minutes to hours, leaving adversaries connected to…

XM Cyber advances AI security with enhanced exposure and attack path visibility

XM Cyber has enhanced its Continuous Exposure Management Platform to help organizations adopt AI without exposing themselves to new and emerging threats. The release introduces three major capabilities that enable organizations to embrace AI-driven innovation at full speed, without giving attackers a roadmap to their most critical assets. “Rapid AI adoption has created a dilemma…

GoTo Launches New LogMeIn Partner Network

Cloud communications and IT organization, GoTo, is launching its new LogMeIn Partner Network, a program that supports IT partners and MSPs with solutions, resources, and enablement opportunities for business growth. GSI and MSP support for a competitive landscape The new partner network is designed to maximize partner success and support technology partners, resellers, Global System…

Blumira Intros EDR and ITDR Solutions, Joins Pax8 Marketplace

Blumira, a security operations platform, is releasing enhanced endpoint detection and response (EDR) and identity threat detection and response (ITDR) capabilities. The company also recently joined the Pax8 Marketplace to deliver enterprise security operations to MSPs. Stopping threats at speed These newly expanded capabilities will enable security teams on Blumira Respond and Automate editions to…

SailPoint improves visibility and control over unauthorized AI use

SailPoint has announced the launch of SailPoint Shadow AI Remediation, the latest component of its real-time AI governance and security framework. This solution enables organizations to discover, monitor, and secure the use of unauthorized AI tools, known as “shadow AI,” helping to mitigate the security and compliance risks associated with the rapid growth of artificial…

Pindrop Fraud Assist uses AI to analyze calls and strengthen fraud prevention

Pindrop has announced Pindrop Protect Fraud Assist, the agentic fraud investigation and case management solution for real-time phone conversations. As AI fraud attacks surge across contact centers, Pindrop Protect Fraud Assist embeds agentic AI directly into the fraud investigation workflow, helping analysts investigate smarter, close cases faster and keep pace with rising fraud volumes, without…

Huntress adds tools to its Agentic Security Platform to detect, fix, and prevent endpoint and identity risks

Huntress has announced Managed Endpoint Security Posture Management (ESPM) and Managed Identity Security Posture Management (ISPM), expanding its Agentic Security Platform to deliver end-to-end protection across endpoints, identities, and human risk. Huntress built Managed ESPM from the ground up and developed Managed ISPM in less than four months by leveraging expertise and capabilities from its…

DH2i Enhances SQL Server Resilience Across Hybrid IT

DH2i has released new versions of its clustering and automation software designed to help enterprises maintain SQL Server uptime while modernizing infrastructure across Linux, Windows, and Kubernetes environments. The company announced the general availability of DxEnterprise v26.0 and DxOperator v2, updates that introduce expanded monitoring, automated quorum enforcement, security improvements, and new automation capabilities for…

New Kingston IronKey USB drive delivers enterprise-grade data security

Kingston Digital has announced the launch of the next-generation IronKey Locker+ 50 G2 (LP50 G2) hardware-encrypted USB flash drive. The drive provides enterprise-grade security with FIPS 197 and AES 256-bit hardware encryption in XTS mode. It also safeguards against BadUSB with digitally signed firmware and against brute force password attacks. LP50G2 features a premium space…

Pattern Launches End-To-End Generative Engine Optimisation Framework for Australian Brands

Pattern Group Inc. (Nasdaq: PTRN) (“Pattern”), a leader in accelerating brands on global ecommerce marketplaces by leveraging proprietary technology and AI, today announced the launch of two new tools designed to facilitate and measure brand discovery through emerging AI platforms. Together, Patterns’ proprietary Large Language Model (LLM) Access Audit and Generative Engine Optimisation (GEO) Scorecard…

Druva Adds Identity Resilience for Okta, AD, and Entra ID

Druva, a data security company, has announced that Druva Identity Resilience now supports Okta and Microsoft Active Directory, in addition to Microsoft Entra ID.  Druva Identity Resilience delivers unified protection, cyber recovery, and threat detection and response within a SaaS platform, bringing disparate identity providers together so security and IT teams can restore trusted access…

Cyber-Attacken fluten Eon-Netz: Angriffe verzehnfacht

Eon trägt eine große Verantwortung für die Energieversorgung in Deutschland. nitpicker – shutterstock.com Der Energiekonzern Eon sieht eine zunehmende Zahl von Cyberangriffen auf seine Energienetze. Mittlerweile seien täglich mehrere hundert Angriffe auf die Netzinfrastuktur zu verzeichnen, berichtete Vorstandsmitglied Thomas König am Montag im Austausch mit Journalisten. Im Vergleich zu von vor fünf Jahren habe sich die Zahl damit verzehnfacht.…

Intel 471 debuts integrated platform for external threat management

Intel 471 has announced its latest product offering, the Cyber Threat Exposure Bundle, on its Verity471 platform. This new bundle combines Attack Surface Exposure, Third-Party Exposure, and Brand Exposure into a single solution, providing users with a standardized view to identify, prioritize, and remediate external risks. By integrating these solutions, organizations are better equipped to…

Chip wafer shortage will run through 2030 as AI demand overwhelms supply: SK Hynix chief

The global shortage of semiconductor wafers will not ease before the end of the decade, SK Group Chairman Chey Tae-won said, delivering one of the most definitive long-range forecasts yet from the executive of the world’s leading supplier of high-bandwidth memory chips. Speaking to reporters on the sidelines of Nvidia’s GTC Conference in San Jose,…

Saviynt Appoints Alex Lei to Drive Identity Security Growth Across Asia Pacific and Japan

COMPANY ANNOUNCEMENT:  Enterprise security veteran to lead regional sales strategy as organisations across APJ strengthen identity-first cybersecurity  Key Highlights: The appointment comes as organisations across APJ increase investment in identity security to support cloud adoption, AI initiatives, and evolving cyber risks Lei will oversee customer acquisition, partner strategy, and go-to-market execution across APJ

CL-STA-1087 targets military capabilities since 2020

China-linked APT group CL-STA-1087 has targeted Southeast Asian militaries since 2020 using AppleChris and MemFun. A suspected China-linked espionage campaign, tracked as CL-STA-1087, has targeted Southeast Asian military organizations since at least 2020, using AppleChris and MemFun malware. “The activity demonstrated strategic operational patience and a focus on highly targeted intelligence collection, rather than bulk…

Armis Research Reveals Australia Experiencing the Highest Volume of Cyberwarfare Attacks of Any Country Globally

GUEST RESEARCH: A rising number (72%, up from 56% last year) of Australian respondents have had to report an act of cyberwarfare to authorities, the most of any country surveyed for this report 77% of Australian IT professionals believe the ability of nation-states to harness AI for cyber operations will widen the gap between attackers…

Chainguard locks down CI/CD with secure-by-default actions

Chainguard has announced Chainguard Actions, secure-by-default workflows for CI/CD pipelines that allow developers and AI agents to ship quickly without introducing software supply chain risk. Using an agentic approach, Chainguard Actions provides a continuously secured catalog of workflows maintained by the Chainguard Factory, the infrastructure that has become the industry standard for delivering trusted open…

System-level ‘coopetition’: Why Nvidia’s DGX Rubin NVL8 runs on Intel Xeon 6

Nvidia has selected Intel’s Xeon 6 processors as the host CPUs for its Nvidia DGX Rubin NVL8 systems. The DGX Rubin NVL8 is part of Nvidia’s next flagship AI system portfolio, designed to help companies accelerate agentic AI adoption. The DGX Rubin NVL8 systems are designed for large-scale AI workloads, combining eight Rubin GPUs with…

AWS Bedrock’s ‘isolated’ sandbox comes with a DNS escape hatch

AWS’ promise of “complete isolation” for agentic AI workflows on Bedrock is facing scrutiny after researchers found its sandbox mode isn’t as sealed as advertised. In a recent disclosure, BeyondTrust detailed how the “Sandbox” mode in AWS Bedrock AgentCore’s Code Interpreter can be abused to break isolation boundaries using DNS queries. While the sandbox blocks…

Imprivata enhances NHS access security with passwordless controls

Imprivata has introduced new capabilities designed to help NHS organisations and UK healthcare providers meet the unique demands of the UK’s evolving compliance, cybersecurity, data protection landscape, including the Cyber Assessment Framework (CAF)-aligned Data Security and Protection Toolkit (DSPT) and Care Identity Service (Spine) Authentication. Imprivata Enterprise Access Management (EAM) offers context-aware passwordless authentication, high-assurance…

Proofpoint addresses AI threats with intent-based security

Proofpoint has announced Proofpoint AI Security, the newest security solution that combines intent-based detection, multi-surface control points, and a comprehensive implementation framework to secure how humans and AI agents use AI across the enterprise. Based on the Agent Integrity Framework, which defines how an AI agent operates with integrity, Proofpoint is introducing a five-phase maturity…

Microsoft zeroes in on AI-driven data risks in Fabric

New Microsoft Purview innovations for Microsoft Fabric help organizations secure data and accelerate AI adoption. The updates focus on identifying risks, preventing data oversharing, and strengthening governance and data quality across the data estate. Integration between Microsoft Purview and Microsoft Fabric delivers unified data security and governance, enabling protection of sensitive data, maintaining visibility across…

It’s time to get serious about post-quantum security. Here’s where to start.

After decades of development, quantum computing is now becoming increasingly available for advanced scientific and commercial use. The potential marvels range from accelerating drug discovery and materials science, to optimizing complex logistics and financial modeling. But there’s a paradox to this trend: Quantum computing also poses a growing threat to data security. The risk is…

Konni Deploys EndRAT Through Phishing, Uses KakaoTalk to Propagate Malware

North Korean threat actors have been observed sending phishing to compromise targets and obtain access to a victim’s KakaoTalk desktop application to distribute malicious payloads to certain contacts. The activity has been attributed by South Korean threat intelligence firm Genians to a hacking group referred to as Konni. “Initial access was achieved through a spear-phishing…

Lazarus, AI, and Trust Abuse: Top Enterprise Cybersecurity Risks 2026 

As part of a recent live expert panel, ANY.RUN together with threat researcher and ethical hacker Mauro Eldritch explored biggest security risks companies should be prepared for in 2026.  The discussion covered several relevant cases, from the Lazarus IT Workers operation to the rapid rise of AI-driven phishing attacks, and examined the common thread behind them: trust abuse.  Below are the key takeaways for those seeking a clearer view of…

From Windows to macOS: ClickFix attacks shift tactics with ChatGPT-based lures

ClickFix campaigns are evolving, with attackers increasingly targeting macOS users and deploying more advanced infostealers, according to Sophos researchers. ClickFix is a growing social engineering technique that tricks users into manually executing malicious commands, bypassing traditional protections. Once mainly targeting Windows, it is now increasingly affecting macOS, with recent campaigns deploying infostealers like AMOS and…

Attack on Stryker’s Microsoft environment wiped employee devices without malware

The recent cyberattack on Stryker wiped tens of thousands of employee devices through its Microsoft environment, and systems are still offline. A recent cyberattack on medical technology giant Stryker targeted its internal Microsoft environment and remotely wiped tens of thousands of employee devices without using malware. The company confirmed that its medical devices were not…

Traefik Triple Gate gains parallel safety pipelines, failover routing, and AI runtime controls

Traefik Labs has announced new capabilities that extend Traefik Hub’s Triple Gate architecture (API Gateway, AI Gateway, and MCP Gateway) with deeper runtime governance across the full AI workflow, including a composable multi-vendor safety pipeline with parallel guard execution, multi-provider failover routing, token-level cost controls, graceful error handling for agent-aware enforcement, IBM Granite Guardian integration,…

Runtime: The new frontier of AI agent security

AI agents are already operating inside enterprise networks, quietly doing some of the work employees once handled themselves — writing code, drafting emails, retrieving files, and connecting to internal systems. Sometimes they also make costly mistakes. At Meta, an employee asked an AI assistant to help manage her inbox. It deleted it instead. At Amazon,…

Hidden instructions in README files can make AI agents leak data

Developers rely on AI coding agents to set up projects, install dependencies, and run commands by following instructions in repository README files, which provide setup guidance for software projects. New research identifies a security risk when attackers hide malicious instructions in those documents. A semantic injection attack, where injections are embedded in an installation file,…

What to do in the first 24 hours of a breach

In this Help Net Security video, Arvind Parthasarathi, CEO of CYGNVS, walks through a 10-step process for handling a cybersecurity breach. The first five steps cover preparation: setting up an out-of-band communication platform, identifying internal stakeholders, selecting external providers like legal counsel and forensic firms, building cross-functional playbooks, and running tabletop exercises to test those…

CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a medium-severity security flaw impacting Wing FTP to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, CVE-2025-47813 (CVSS score: 4.3), is an information disclosure vulnerability that leaks the installation path of the application under certain conditions

Cybersecurity jobs available right now: March 17, 2026

Application Security DevSecOps Specialist NTT DATA | Italy | On-site – View job details As an Application Security DevSecOps Specialist, you will integrate security into CI/CD pipelines using tools such as SAST, DAST, SCA, secret scanning, and container scanning to ensure secure software delivery. You will conduct code security reviews, triage findings, and collaborate with…

Weekly Update 495

In the beginning, it was simple. A website, a database and 150M+ email addresses to search. Time has added serverless functions (which run on servers 🤷‍♂️), code on the edge, new data storage constructs and a completely different mechanism for even just querying a simple email address. HIBP is a continually evolving beast, and barely…