News for today:
- How AI improves cybersecurity. Data from a recent Hack the Box competition shows the impact of AI on security teams: tasks completed faster and higher solve rates. There were performance differences across teams based on seniority (elite teams had the biggest uplift), and eliminating judgment-forming options wasn’t a great long-term strategy. If organizations over-index on automating the tasks that build judgment, they risk trading long-term resilience for short-term efficiency. Agentic automation must be paired with deliberate human skill development. For enterprises, the competitive advantage will not come from AI adoption alone. It will come from training cybersecurity professionals to effectively orchestrate, validate, and govern AI-driven workflows and agents. Hack the Box
- Okta now included in Commvault’s identity resilience offering. Commvault’s identity resilience offering enables organizations to rapidly recover from identity misconfigurations, operational disruptions, and identity-driven cyberattacks; the offering now includes support for Okta. Instead of manual scripts and processes, the offering provides automated protection and granular, point-in-time recovery of critical Okta objects and configurations. By combining secure, immutable storage with precise restoration capabilities, organizations can reduce disruption and regain access quickly. Commvault
- Improved API scanning in Detectify. Among other recent enhancements (e.g., still better visibility, Protocol Discovery, and the Test Catalogue), Detectify rolled out several updates for its API Scanning product, to improve workflows for security engineers. Detectify
- Vendor agnostic advisory from Check Point on embracing AI. Check Point introduced a new advisory service – which it’s positioning as vendor agnostic – to help organizations adopt AI with embedded governance, risk management, and regulatory compliance. Secure AI Advisory provides a structured, intelligence-driven framework to bring clarity and control to AI transformation. The service embeds governance, risk assessment and regulatory alignment across the full AI lifecycle, enabling measurable risk reduction and responsible scaling from day one. Three tiers are offered. Check Point
- Better understanding of network security posture with Tufin. AI features heavily in Tufin’s updated network security posture management, with new AI assistants for security teams and a targeted security dashboard for executives. On the first: By using AI to make it easier for teams to access and understand their network’s security posture, potential vulnerabilities and points of attack can be revealed, enabling better-informed decisions to be made at a speed that matches or exceeds that of attackers. Better network data leads to quicker response times, proactive actions, and continuous network protection. Tufin
- Heat map for the NIST NICE framework. Immersive added a heat map for reporting evidence on readiness against the NIST NICE framework to its One platform for defensibility and targeted remediation. The NIST NICE Heat Map acts as a live, daily-updated system of record to actively reduce risk. By mapping platform activity directly to the NIST NICE framework—covering 5 Work Role Categories and 41 official Work Roles—Immersive One allows security leaders to move beyond check-the-box compliance to objective cyber readiness. Immersive
- SSL decryption not required for Web DDoS protection. Radware’s new Web DDoS Protection for Encrypted Traffic – a cloud service – blocks layer 7 / application DDoS attacks without requiring shared SSL certificates or decryption. Radware’s AI-powered Web DDoS Protection service uses cross-correlated, behavioral analysis and machine learning models to establish traffic baselines, detect anomalies, and dynamically generate mitigation rules. The system is designed to mitigate layer 7 DDoS attacks in real time without requiring ongoing manual policy tuning. Protection automatically adapts as traffic patterns evolve, helping maintain application availability while minimizing impact on legitimate users. Radware
- StrongDM acquisition is completed. Delinea’s acquisition process for StrongDM is now finished. The combined Delinea and StrongDM platform brings together leading enterprise PAM and runtime authorization into a unified identity security control plane powered by Delinea Iris AI, enabling real-time policy evaluation and governance of privileged actions taken by both human and non-human identities across modern infrastructure. Delinea