News for today:
- [Sophos] AI Defense launches. Sophos GA’d its AI Defense offering, for discovering which AI tools are being used and enforcing usage policies. Sophos AI Defense pulls signals from the device, network, identity, and browser layers to map AI activity across an environment, then weighs who is acting, how they’re behaving, and what data is involved to separate routine use from activity that warrants action. Real-time guardrails, designed to help prevent sensitive data exposure, inspect prompts, uploads, and other AI interactions as they happen. That activity also flows into the Sophos Fusion system, so security teams using Sophos XDR, along with Sophos MDR analysts, can investigate and respond through the workflows they already know. Sophos
- [Absolute Security] Acquired FirmGuard from Phoenix. Absolute Security acquired FirmGuard from Phoenix Technologies, to strengthen protections for its firmware offering. The acquisition adds deeper visibility, integrity verification, posture management, continuous patching, and compliance enforcement for endpoints, AI workstations, and autonomous agents. The integration will help provide the firmware foundation AI-driven enterprises need to defend against threats, reduce risk, prevent agents from going rogue, and minimize disruption. Absolute Security
- [Donoma] Zero-day data protection. Donoma argues for better data protection – “zero-day data protection” – in light of the FBI hack; the data itself has to be protected. Seshat is a continuous encryption platform built by Donoma Software. It creates an encrypted operating environment in which sensitive data stays encrypted at rest, in transit, and while it is being queried and processed. Applications keep working. The data never has to be decrypted to be useful. Seshat does not claim to stop the exploit. No one honestly can. What it changes is everything that comes after: an attacker who compromises the application tier finds encrypted records, encrypted configuration, and encrypted logs. There is nothing readable to pivot on, and nothing usable to take. Donoma
- [IRONSCALES] Partnership with Todyl. IRONSCALES announced an integration with the Todyl Security Platform for MSPs, which integrates email protection as a native module within Todyl. IRONSCALES brings detection trained by more than 3,500 MSPs globally, so a threat seen in one environment sharpens protection for every customer of each partner using Todyl’s platform, and automated remediation clears the routine work that drains analyst hours. For a Todyl partner, that means protection that scales with the client base, not the headcount, delivered from one platform and one console instead of stitched-together point tools that slow response when it matters most. Available 4Q. IRONSCALES
- [NinjaOne] Governed agentic AI for unified IT operations. NinjaOne launched Katana AI to support autonomous AI operations, but auto analyzing multiple data sources to determine how to resolve IT problems. There’s a new MCP server, too. Katana AI analyzes device telemetry, history, alerts, and activity to surface likely root causes and recommend next steps, including remediation actions and scripts, where technicians already work. This allows technicians to resolve complex and challenging IT problems faster, improving productivity for all employees. Instead of pulling from a generic model, Katana AI draws on users’ device history, alert patterns, and the resolution knowledge teams already have built, so recommendations reflect how the user’s systems actually behave. NinjaOne
- [ArmorCode] Too much. New research from ArmorCode finds that security teams can’t keep up with the cadence of AI-powered vulnerability discovery. Half of security leaders expect complexity to get worse if they continue with the status quo. Our study shows that finding more vulnerabilities doesn’t reduce risk. Organizations need to continuously connect discovery to action across security silos, and validate that every fix actually worked. That’s how security teams move from simply managing an ever-growing backlog to actually reducing exposure. ArmorCode
- [RSA] New RSA Agent ID system. RSA announced RSA Agent ID for regulated industries, for discovering, securing, and governing what AI agents can do. On the second capability: RSA Agent ID Secure enforces your policy on each call at an AI/MCP Gateway that runs either RSA-hosted or in your own environment, chosen per gateway. The solution provides approval with real assurance, demanding a named, authenticated operator approve high-risk actions out of band with a phishing-resistant credential. Access is revoked when an agent is decommissioned. GA November. RSA