News for today:
- [CrowdStrike] Expanded partnership with Schwarz Digits, and path with XM Cyber. CrowdStrike announced an expanded partnership with Schwarz Digits for sovereign cybersecurity in Europe (with Falcon being offered on STACKIT by Schwarz Digits), as well as the acquisition of XM Cyber’s intellectual property; Schwarz Digits owns XM Cyber. As part of the expanded partnership, CrowdStrike has signed a definitive agreement to acquire the intellectual property of XM Cyber, a Schwarz Digits company recognized for its advanced attack path visualization and offensive simulation technologies. Over time, XM Cyber customers will have the opportunity to adopt the Falcon platform through Falcon Flex. As frontier AI accelerates how quickly vulnerabilities can be discovered, chained, and exploited, organizations are replacing fragmented point tools and standardizing on the Falcon platform, uniting continuous visibility, exploitability-driven prioritization, and response across the full attack surface. CrowdStrike
- [1Password] 1Password for Claude. 1Password introduced a new approach for making credentials available to Claude – with security as a core design principle (what 1Password is calling a “zero-exposure security framework”). The approach gives Claude access to stored credentials without those credentials ever reaching the model, its memory, or Anthropic’s systems. The launch marks a critical new step in securing agents that do real work. It gives them the access they need to complete tasks, while keeping people in control of which credentials are used, when, and for what purpose. Users can now authorize Claude to complete real-world tasks like booking travel and managing accounts securely with credentials injected directly to the target system on their behalf. Available immediately for Mac users. 1Password
- [Tenable] Application security risks in Tenable One. Tenable expanded its exposure management platform with new application security capabilities, for assessing new code for vulnerabilities and likelihood of exploitation. Tenable One ingests, analyzes and normalizes data from relevant application development and security sources, including AI application security tools, such as Claude Security. Tenable One then connects all ingested exposure data – unifying Tenable telemetry with data from other security tools, including endpoint protection, cloud security, vulnerability management, operational technology security and more, and vital business context from repositories like configuration management databases – designed to deliver the most complete view of enterprise risk, and accelerate remediation prioritization and action. With this platform expansion, Tenable One shifts organizations from reactive application scanning to proactive risk prioritization, connecting code risks to the runtime systems, cloud workloads, identities and attack paths they put at risk. Tenable
- [Pentera] Ransomware attack scenarios. Pentera added new capabilities for assessing the efficacy of security controls against new ransomware variants. What’s new: organizations [can] run real attack scenarios based on some of the most dangerous ransomware operations in use today …. Qilin, Play, and BlackCat evade detection by blending into legitimate system tools, disabling security controls at the kernel level, and compromising trusted IT vendors to reach multiple victims through a single breach. With Pentera, security teams can validate against each group’s specific attack chain, from initial access through encryption. Pentera
- [Adaptiva] Patching in air-gapped environments. Adaptiva announced AirGap for OneSite Patch, for securely patching systems in isolated air-gapped environments. AirGap for OneSite Patch extends Adaptiva’s autonomous patch management capabilities to fully isolated, air-gapped environments. Current OneSite Patch customers can extend their existing patch infrastructure to air-gapped environments without introducing separate management tools or workflows. By pairing an offline server inside the isolated environment with an online server connected to the Adaptiva cloud service, administrators can securely acquire, transfer, import, and distribute operating system and third-party patches without exposing protected systems to the internet. Available immediately. Adaptiva
- [Cohesity] Maestro is here. Cohesity announced Cohesity Maestro, an MCP-powered architecture that makes everything Cohesity offers via Data Cloud available via agents. For enterprises creating their own AI-driven workflows and assembling models, tools, and dashboards tailored to how their teams work, Cohesity Maestro fits inside whatever that looks like, while being governed by the same role-based access controls, authentication, and audit framework that apply to direct platform access. Cohesity doesn’t prescribe the AI experience; it participates in the one customers are already building on their own security terms. IT and security operations teams can now ask what changed across their environment in the last 24 hours and surface a prioritized view of business-critical risks and recovery gaps. From there, they can trigger restores, hunt threats, and orchestrate recovery directly from the AI tools they already use, without switching to a separate console. Cohesity
- [Delinea] New partner program. Delinea launched a new partnership program for the delivery of identity security technology via partners. Developed with direct partner input, including a global partner listening survey, the Delinea Partner Advantage Program is designed to address the most persistent pain points in the channel: margin erosion, channel conflict, and ambiguous rules of engagement. The program gives partners a clear, structured path to deliver identity security outcomes to their customers and provides a foundation for predictable, profitable growth. Beyond protecting discounts, the program is structured to help partners compound the value of every customer relationship they build. Delinea