News for today:
- [Cye] Center of Excellence for PE. Cye launched a new program to enable private equity firms to assess their client’s cybersecurity programs and posture. The Center of Excellence acts as the central operating hub for portfolio cybersecurity, standardizing execution across investments and applying cross-portfolio insights and actions to strengthen decision-making, operational support and continuous exposure reduction. Cye combines its expert-trained AI-native exposure management platform and M&A related services to deliver continuous, portfolio-wide oversight with a unified system of record and reporting. Available immediately. Cye
- [Thrive] Thrive more. Thrive upgraded its NextGen managed services platform with new security integrations from Elastic (better data collection, analysis, and prioritization) and Cato Networks (zero trust capabilities). On the second: Thrive is also introducing Cato Networks Universal Zero Trust Network Access (UZTNA) technology into its managed security portfolio, helping organizations replace traditional VPNs with a modern approach to secure access built for today’s distributed workforce technology into its managed security portfolio, helping organizations replace traditional VPNs with a modern approach to secure access built for today’s distributed workforce. Instead of relying on network-based access, Cato continuously validates user identity and context, enabling Thrive to provide secure, seamless access regardless of where employees work, while reducing the complexity associated with legacy remote access technologies. Thrive
- [Proofpoint] AI-powered investigations and insider risk visibility. Proofpoint introduced new tools for security, compliance, and legal teams investigating the human and AI context behind insider risk; the two new tools work with Microsoft 365 and the Proofpoint Archive. Generative AI, copilots, and AI agents are increasingly embedded in how people work, and insider risk is no longer limited to human activity alone. Prompts, responses, and interactions with AI systems are becoming part of the communications trail that can reveal intent and explain why an event occurred. As employees increasingly use AI to communicate, create content, make decisions, and conduct business, organizations need to capture AI interactions, preserve them as business records, and monitor them for regulatory and compliance risk. Understanding what happened, as well as the intent and circumstances behind it, is becoming critical to making faster, more informed decisions. Proofpoint
- [Veeam] Unmanaged AI wreaks havoc in EMEA. New research from Veeam says that enterprises in EMEA have significant challenges (Veeam’s term: “crisis”) due to unmanaged AI. On the data security front, 70% of organizations admit that automated AI workflows are interacting with sensitive corporate data without full oversight. Meanwhile, on the governance side, IT is losing control, with 67% reporting that employees are creating autonomous AI workflows that IT cannot fully track. Veeam
- [CrowdStrike] Geographic localization of QuiltWorks. CrowdStrike moved to the next phase of its Project QuiltWorks program, for AI-driven vulnerability discovery and more, with a new cohort of specialist firms in the United States ready to work with customers. CrowdStrike is regionalizing the program to connect customers with partners that bring the expertise, scale, and services required to address the unique needs of their markets …. Blackthorne Consulting, CDW, Consortium, Echelon Risk + Cyber, EVOTEK, GuidePoint Security, NETbuilder, Optiv, Pondurance, and Presidio are helping customers turn QuiltWorks findings into prioritized action and remediation. CrowdStrike
- [Huntress] Into Africa. Huntress signed a new distribution partnership with QBS Software Africa, which marks its entrance into the African market. Through QBS Software Africa, local value-added resellers (VARs) and managed service providers (MSPs) will gain access to the Huntress Agentic Security Platform and 24/7 AI-centric Security Operations Center (SOC), bringing together layered protection across endpoints, identities, logs, security posture, and employee behavior. Powered by Athena, Huntress’ agentic investigation system, the platform investigates threats at machine speed alongside elite human experts, combining autonomous investigation with deep security expertise to uncover novel tradecraft and complex threats before attackers can turn speed into impact. Huntress
- [OPSWAT] 100% for the third time. OPSWAT announced its third 100% score for sanitization via its Deep CDR technology. AV-Comparatives, an Austrian, ISO 9001:2015-certified testing lab, evaluated Deep CDR Technology on sanitization effectiveness by attack scenario, coverage across approximately 50 file types, and file fidelity after reconstruction. The test set included AI assisted malicious content, zero-day exploits, malicious macros, embedded executables, nested archives and other evasive file borne attacks. Deep CDR Technology passed every case under the tested configuration while preserving file usability. Macros, embedded executables, nested archives, AI-assisted payloads — 300-plus cases, and nothing came through. OPSWAT