Geek-Guy.com

Tag: 2026

Optimize security operations through an AWS Security Hub POC

April 27, 2026: This post was first published in September 2025 when the enhanced AWS Security Hub was in public preview. It has since been updated to reflect the general availability of Security Hub. This revision also provides a more detailed, step-by-step framework for planning your POC. AWS Security Hub prioritizes your critical security issues…

TeamPCP Supply Chain Campaign: Update 008 – 26-Day Pause Ends with Three Concurrent Compromises (Checkmarx KICS, Bitwarden CLI Cascade, xinference PyPI), CanisterSprawl npm Worm Identified, and Tier 1 Coverage Returns, (Mon, Apr 27th)

This update succeeds TeamPCP Supply Chain Campaign Update 007, published April 8, 2026, which left the campaign in credential-monetization mode following the Cisco source code theft via Trivy-linked credentials, Google GTIG’s formal designation of the operators as UNC6780 (with their credential stealer named SANDCLOCK), and the lapsed CISA KEV remediation deadline for CVE-2026-33634 with no standalone…

U.S. utility giant Itron discloses a security breach

Itron detected unauthorized access to part of its IT environment on April 13, 2026, and launched incident response and notified authorities. Itron disclosed a cyber incident involving unauthorized access to part of its internal IT systems, detected on April 13, 2026. The company activated its incident response plan, engaged external cybersecurity experts, and notified law…

News alert: BreachLock’s integrated attack validation platform debuts in Gartner AEV category

NEW YORK, Apr. 21, 2026, CyberNewswire—BreachLock, a global leader in offensive security, today announced it has been named a representative vendor in the 2026 Gartner Market Guide for Adversarial Exposure Validation. This recognition marks the first time BreachLock has been identified in the Adversarial Exposure Validation (AEV) category since launching its agentic AI-powered Adversarial Exposure Validation platform in 2025. Not only has the company gained recognition in the AEV market quickly, but BreachLock has also emerged as the only vendor offering adversarial exposure validation, Penetration Testing…

Toxic Combinations: When Cross-App Permissions Stack into Risk

On January 31, 2026, researchers disclosed that Moltbook, a social network built for AI agents, had left its database wide open, exposing 35,000 email addresses and 1.5 million agent API tokens across 770,000 active agents. The more worrying part sat inside the private messages. Some of those conversations held plaintext third-party credentials, including OpenAI API…

VirtualBox 7.2.8 is out with Linux kernel 7.0 support and crash fixes

Oracle shipped VirtualBox 7.2.8 on April 21, 2026, as a maintenance release covering crashes, networking problems, clipboard issues, and extended Linux kernel compatibility. The update touches the VMM layer, NAT networking, graphics, UEFI, and both Linux and Windows guest support. VMM and core stability A Guru Meditation error carrying the code VERR_IEM_IPE_4 is fixed in…

Cyberattack That Could Have Poisoned a City’s Water Supply by Manipulating Chlorine Levels

In mid-April 2026, researchers at Darktrace published a detailed breakdown of a malware sample that occupies a narrow but alarming niche in the threat landscape: a Windows-based OT weapon apparently designed from the ground up to sabotage Israeli water treatment and desalination infrastructure. The malware identifies itself internally as ZionSiphon — the name appears in a core…

SAP participates in Hannover Messe 2026, showcasing agentic AI-Driven manufacturing and supply chain innovations

COMPANY NEWS: SAP announces its participation in Hannover Messe 2026, the world’s largest industrial trade fair held in Hannover, Germany, from April 20 to 24, to unveil its agentic AI-driven manufacturing and supply chain innovation solutions. Under this year’s theme, Trusted orchestration. Smarter execution, SAP will present its vision for how Business AI is fundamentally…

The endless CISO reporting line debate — and what it says about cybersecurity leadership

It is difficult to understand why, in 2026, we are still debating the reporting line of the chief information security officer (CISO). It is one of the first topics I wrote about in 2015, and after more than two decades of high-profile cyber incidents, sustained regulatory pressure, massive technology investments and the steady elevation of…

Windows is getting stronger RDP file protections to fight phishing attacks

Microsoft has introduced new Windows protections starting with the April 2026 security update to reduce phishing attacks that abuse Remote Desktop (.rdp) files. With these updates, the Remote Desktop Connection app displays stronger warning dialogs before a connection is established, shows details about the remote system, and requires users to review any request to share…

News Alert: NTT Research launches SaltGrain—advanced Attribute-Based Encryption security

SUNNYVALE, Calif., Apr. 15, 2026 – NTT Research, Inc., a division of NTT (TYO:9432), today announced the launch of Scale Academy, a startup incubator responsible for bringing to market products and services based upon technologies studied within the labs of NTT Research and NTT R&D. NTT Research also revealed Scale Academy’s first product, SaltGrain, a zero-trust data security suite…

Report: AI Shifts IT Roles as Demands and Complexity Rise

SolarWinds recently released its 2026 IT Trends Report: The Human Side of Autonomous IT, examining how AI is reshaping IT roles. Instead of simply managing systems, IT teams are now expected to interpret AI-driven insights, design automated workflows, and govern increasingly autonomous environments. The shift is creating a paradox: while AI reduces manual effort, it…

Microsoft Patch Tuesday for April 2026 fixed actively exploited SharePoint zero-day

Microsoft Patch Tuesday security updates for April 2026 fixed 165 vulnerabilities, including an actively exploited SharePoint zero-day. Microsoft Patch Tuesday security updates addressed 165 vulnerabilities, making it one of the largest updates by CVE count. One of the most interesting flaws fixed by the IT giant is a critical SharePoint zero-day, tracked as CVE-2026-32201, already…

Curity looks to reinvent IAM with runtime authorization for AI agents

In 2026, enterprise developers are building and deploying the first generation of powerful, increasingly autonomous AI agents at incredible speed. Now comes the hard part: working out how to secure them. Vendors in the space are facing multiple challenges. To begin with, traditional identity and access management (IAM) tools were never designed to secure anything…

Curity looks to reinvent IAM with runtime authorization for AI agents

In 2026, enterprise developers are building and deploying the first generation of powerful, increasingly autonomous AI agents at incredible speed. Now comes the hard part: working out how to secure them. Vendors in the space are facing multiple challenges. To begin with, traditional identity and access management (IAM) tools were never designed to secure anything…

News alert: Mallory launches AI-native platform to cut through alert noise and surface real risk

AUSTIN, Texas, Apr. 9, 2026, CyberNewswire—Mallory is launching a AI-native threat intelligence platform, purpose-built to answer the questions CISOs and their teams are asking every day: •What are the real threat vectors for our organization? •What’s actually exploitable in our environment right now? •What should we proactively fix? The platform monitors thousands of threat sources,…

Nutanix Expands Cloud Platform, Integration Partnerships

At the Nutanix .NEXT 2026 conference, the hybrid multicloud computing organization announced enhancements to its cloud platform, expanded its infrastructure ecosystem, and strengthened partner support. Nutanix cloud updates include agentic AI-focused infrastructure Nutanix has announced the expansion of customer choice and control for Enterprise AI, with new capabilities for Agentic AI infrastructure that will enable…

Minimus Appoints Tech Dealmaker Yael Nardi as Chief Business Officer to Drive Hyper-Growth

NEW YORK, NY – April 7, 2026 – Minimus, a leading provider of hardened container images and secure container images designed to eliminate CVE risk, today announced the appointment of Yael Nardi as Chief Business Officer (CBO). In this newly created role, Nardi will architect the company’s next phase of scale, overseeing a high-velocity top-of-funnel…

[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk

In the rapid evolution of the 2026 threat landscape, a frustrating paradox has emerged for CISOs and security leaders: Identity programs are maturing, yet the risk is actually increasing. According to new research from the Ponemon Institute, hundreds of applications within the typical enterprise remain disconnected from centralized identity systems. These “dark

RSAC 2026: Rethinking Trust in Agentic AI Security

Ahead of RSAC 2026, a conversation with David Brauchler, Technical Director and Head of AI/ML Security at NCC Group, highlighted a growing concern: many organizations are fundamentally unprepared to secure AI-powered systems.  As enterprises rapidly adopt agentic AI, traditional security assumptions are breaking down, exposing critical gaps in how risk is understood and managed. The…

March 2026 Leadership Moves: Google Cloud Partner Chief Departs & More

As the first quarter of 2026 comes to a close, organizations around the channel have made significant moves to their leadership teams. Key figures have been appointed, promoted, or departed from their positions to make way for new faces. Take a look around at some of the signature moves that enterprises have made as they…

Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches

Microsoft’s Secure Boot certificates, issued in 2011, are approaching expiration in 2026. To help IT administrators track whether devices have received replacement certificates, Microsoft has added new status indicators to the Windows Security app, under Device security > Secure Boot. Updated 2023 certificates are being delivered automatically through Windows Update to consumer devices and some…

March 2026 M&A Recap: SAP, Eaton Headline Month’s Deals

At the end of the first quarter of 2026, the channel saw several key acquisitions in March. Significant players in the channel have made these moves to help provide their customers with improved services, stronger solutions, and expanded expertise. Dive into the acquisitions from the month and don’t forget to catch up on February’s M&As,…

News Alert: TAC Security surpasses 10,000 customers, scaling global VM and AppSec platform

NEW YORK, Apr. 1, 2026, CyberNewswire—TAC Infosec, a global leader in cybersecurity (NSE: TAC), with presence across 100+ countries, announced a historic milestone by crossing 10,000 clients – 6,500+ of TAC Security and 3,500+ of CyberScope, since April 2024, delivering on its commitment to shareholders to achieve this by 2026. While building trusted access to…

Major Cyber Attacks in March 2026: OAuth Phishing, SVG Smuggling, Magecart, and More 

March 2026 brought a wave of cyber attacks that reflected how quickly modern threats can move from subtle early signals to serious business impact. ANY.RUN analysts identified and explored several major threats this month, exposing phishing campaigns, stealthy malware, payment-skimming activity, and resilient botnet infrastructure affecting organizations across industries. From Microsoft 365 token abuse and…

Major Cyber Attacks in March 2026: OAuth Phishing, SVG Smuggling, Magecart, and More 

March 2026 brought a wave of cyber attacks that reflected how quickly modern threats can move from subtle early signals to serious business impact. ANY.RUN analysts identified and explored several major threats this month, exposing phishing campaigns, stealthy malware, payment-skimming activity, and resilient botnet infrastructure affecting organizations across industries. From Microsoft 365 token abuse and…

Cloud Security Alliance Wins 2026 SC Award for AI Security Certification

The Cloud Security Alliance (CSA) has won the 2026 SC Award for Best Professional Certification Program for its Trusted AI Security Expert (TAISE) credential, a training program focused on the secure development, deployment, and governance of generative AI systems. The recognition comes as organizations continue adopting AI tools at a rapid pace, often while security,…

RSAC 2026 News: RSA Security and Microsoft Advance Identity Security for AI Era

At RSAC Conference 2026, I had the opportunity to sit down with Kenn Chong, Principal Product Manager at RSA Security (RSA), to discuss how identity security is evolving — and why traditional approaches are no longer enough. Our conversation centered on a clear theme: identity is now the primary attack surface, and securing it requires…

RSAC 2026: AI Leads Security Shift Across Vendors & MSPs

At this year’s RSA Conference 2026, cybersecurity companies across the board took the opportunity to announce new partnerships and capabilities. Unsurprisingly, AI was a central theme across vendors. Whether focused on AI-powered defense, addressing shadow AI, or embedding AI into security operations, the technology is now more than ever a cornerstone of how cybersecurity companies…

Top product launches at RSAC 2026

RSAC 2026 showcased a wave of innovation, with vendors unveiling technologies poised to redefine cybersecurity. From AI-powered defense to breakthroughs in identity protection, this year’s conference delivered a glimpse into the future. Here are the most interesting products that caught our attention, and could shape what’s next. Astrix advances AI agent security platform to govern…

RSAC 2026: AI Security Tools Aim to Cut Response Time

Security vendors at RSAC 2026 are zeroing in on one core problem: investigation speed.  Across the show floor, new AI-powered tools promise to cut threat response times from hours to seconds while helping overwhelmed security teams keep pace with rising alert volumes. From autonomous investigation agents to platforms designed to secure enterprise AI systems, this…

The Best ERM Software in 2026

In this post, I will talk about the best ERM software in 2026. Today’s organizations face increasingly complex cybersecurity threats and regulatory landscapes, requiring the right enterprise risk management (ERM) solutions to ensure maximum surveillance. The following five platforms offer a unique approach to risk identification and management, with advanced automation, reporting and integration capabilities…

ANY.RUN Recognized for Innovations and Market Leadership at Global InfoSec Awards 2026  

ANY.RUN has been recognized at Global InfoSec Awards 2026 by Cyber Defense Magazine (CDM), the industry’s leading electronic information security magazine. We’re especially proud and grateful that our impact for the industry has been acknowledged in two categories at once:  Innovative Malware Analysis for Sandbox  Market Leader Threat Intelligence   This dual recognition reflects the approach to cybersecurity we prioritize: supporting the full SOC…

ANY.RUN Recognized for Innovations and Market Leadership at Global InfoSec Awards 2026  

ANY.RUN has been recognized at Global InfoSec Awards 2026 by Cyber Defense Magazine (CDM), the industry’s leading electronic information security magazine. The award ceremony took place during RSAC 2026 conference. We’re especially proud and grateful that our impact for the industry has been acknowledged in two categories at once:  Innovative Malware Analysis for Sandbox  Market Leader Threat Intelligence   This dual…

Auvik: Shadow IT, AI Gaps Challenge IT Teams in 2026

Auvik’s 2026 IT Trends Report finds a growing disconnect between AI ambition and operational reality, as IT teams struggle with visibility, staffing, and shadow IT despite rising budgets. While most organizations are increasing investment and expressing optimism around AI, the report shows many lack the governance, time, and infrastructure needed to translate that momentum into…

Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR

A large-scale malvertising campaign active since January 2026 has been observed targeting U.S.-based individuals searching for tax-related documents to serve rogue installers for ConnectWise ScreenConnect that drop a tool named HwAudKiller to blind security programs using the bring your own vulnerable driver (BYOVD) technique. “The campaign abuses Google Ads to serve rogue ScreenConnect (

News alert: DDoS attacks surge 150%—Gcore analysis shows faster, cheaper more frequent attacks

LUXEMBOURG, Luxembourg, March 24, 2026, CyberNewswire— Gcore, the global infrastructure and software provider for AI, cloud, network, and security solutions, today announced the findings of its Q3-Q4 2025 Gcore Radar report DDoS attack trends. The report reveals growing attack volumes, increasingly sophisticated tactics, and changes in attack locations driven by evolving botnet infrastructure. The DDoS attack…

NVIDIA GTC Recap: Updates From the Next-Gen AI Conference

NVIDIA GTC 2026, one of the largest AI conferences focused on next-gen AI, featured no shortage of product and service announcements. Among the announcements are those that open new opportunities for the channel with AI agent-as-a-service offerings and strengthening NVIDIA’s position as a platform orchestrator within the channel ecosystem. MSPs and MSSPs will also be…

Faster attacks and ‘recovery denial’ ransomware reshape threat landscape

Mandiant’s M-Trends 2026 report, released today at the RSA Conference, shows that attackers are moving faster, operating more collaboratively, and increasingly focusing on the systems organizations rely on to recover from breaches. The report, based on more than 500,000 hours of incident response engagements in 2025, finds that attackers are compressing key phases of the…

Top must-visit companies at RSAC 2026

RSAC 2026 Conference is taking place at the Moscone Center in San Francisco March 23 – 26. With hundreds of booths, countless product demos, and nonstop buzz, navigating RSAC can be overwhelming. That’s why we’ve done the legwork to highlight the standout companies you won’t want to miss. Whether you’re looking for cutting-edge innovation, industry…

LG Australia Ushers in New Era of Entertainment with Launch of 2026 Sound Suite Lineup

LG Electronics Australia (LG) today announced local availability of its 2026 LG Sound Suite, an innovative home audio system that gives Australians ultimate audio flexibility at home. Leading the range is the H7, the world’s first soundbar powered by Dolby® Atmos FlexConnectTM, delivering an immersive listening experience that intelligently adapts to any room layout without a…

MY TAKE: As RSAC 2026 opens, AI has bifurcated cybersecurity into two wars—the clock is running

SAN FRANCISCO — RSAC 2026 opens here Monday at Moscone Center, with upwards of 40,000 cybersecurity professionals, executives, and policy leaders, myself among them, filing in to take stock of an industry under acute pressure. Related: RSAC 2026’s full agenda The dominant undercurrent is already unmistakable: AI hasn’t just arrived in cybersecurity. It has split…

Hyvä Theme Development in 2026

In this post, I will talk about Hyvä theme development in 2026. In the ever-evolving world of eCommerce, frontend performance, scalability, and developer efficiency have become critical success factors. Within the ecosystem of Magento, the Hyvä Theme has emerged as a revolutionary solution that challenges traditional frontend development approaches. By prioritizing simplicity, speed, and modern…

ZeroThreat.ai Wins Cybersecurity Excellence Award for Best Web Application Security Platform

Chicago, IL – March, 2026 – ZeroThreat.ai, the AI-powered automated web and API pentesting platform that validates real exploit paths in minutes, today announced it has been named the Silver Award winner of the Cybersecurity Excellence Award for Best Web Application Security Platform. The award, recognized globally across the cybersecurity industry, honors organizations that demonstrate…

ANY.RUN Enters IT-Harvest’s 2026 Cyber 150 for Fast Growth and Industry Impact 

We’re thrilled to announce that ANY.RUN has once again been recognized in IT-Harvest’s 2026 Cyber 150, a list of the fastest-growing cybersecurity companies. Receiving this recognition for the second year in a row makes this moment especially meaningful and reflects the strong progress our company made over the past year.  It also points to a broader shift in the market.…

8 Best Encryption Software & Tools in 2026

This guide is for businesses and IT decision-makers evaluating encryption software in 2026, covering how these tools work and how to choose the right solution for your needs.  Encryption software obfuscates data to render it unreadable without a decryption key, protecting it against unauthorized access or theft. However, the best tool depends heavily on the…

News alert: SpyCloud study reveal stolen tokens, session data fuel surge in non-human identity attacks

AUSTIN, Texas, Mar. 19, 2026, CyberNewswire—SpyCloud, the leader in identity threat protection, today released its annual 2026 Identity Exposure Report, one of the most comprehensive analyses of stolen credentials and identity exposure data circulating in the criminal underground and highlighting a sharp expansion in non-human identity (NHI) exposure. Last year, SpyCloud saw a 23% increase…

CISA warns of active exploitation of Microsoft SharePoint vulnerability (CVE-2026-20963)

CVE-2026-20963, a remote code execution (RCE) SharePoint vulnerability Microsoft fixed in January 2026, is being exploited by attackers. The confirmation comes from the US Cybersecurity and Infrastructure Security Agency (CISA), which added the flaw to its Known Exploited Vulnerabilities (KEV) catalog on Wednesday. About CVE-2026-20963 CVE-2026-20963 affects Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Server…