News for today:
- [Delinea] Use AI, have issues. New research from Delinea looks at the use of AI tools or agents in critical business applications. Key finding: use results in unexplained actions. 84% of organizations using AI tools or agents in critical business applications reported at least one AI-related issue in the past 12 months, including incorrect financial transactions and actions that could not be traced or explained. Delinea
- [AvePoint] AvePoint Trust Platform. AvePoint announced the AvePoint Trust Platform, for governing, securing, and optimizing AI use within enterprises. The platform makes data AI-ready, governs every agent across its lifecycle, and keeps the business resilient when AI gets it wrong – independent of any single cloud, model, or AI provider. The launch includes new AI Governance, Security, and Cost Optimization capabilities, broadening observability to Anthropic Claude, Windows, and server-hosted agents, as well as the tools, MCP servers, and the models agents are accessing. AvePoint
- [Horizon3] Integration with Cortex XSOAR. Horizon3 released an integration for Cortex XSOAR from Palo Alto Networks, for ingestion of vulnerability assessment data from NodeZero. The NodeZero integration … [brings] pentest evidence into orchestrated remediation. NodeZero autonomously tests environments to identify security vulnerabilities and other weaknesses, map attack paths, and provide evidence of impact and remediation guidance. Cortex XSOAR ingests high and critical open findings identified by NodeZero as incidents. Existing automation and playbooks can then enrich, route, track, and orchestrate remediation. After a fix is implemented, teams can use NodeZero 1-Click Verify to retest eligible findings and determine whether they remain exploitable. Horizon3
- [Silent Push] Inside Abstract Security. Silent Push announced that its data can be used inside Abstract Security’s platform, for faster analysis of potential new threats. A domain shows up in a DNS log at two in the morning. The usual next twenty minutes go on tabs: WHOIS in one, a hosting lookup in another, passive DNS somewhere else, and the picture assembled by hand before anyone can say whether the domain matters. Abstract now calls Silent Push when the indicator appears and attaches the answers to the event itself. Five actions are available, and between them they cover the questions an analyst actually asks. Silent Push
- [Hornetsecurity] Defences not trusted. New research from Hornetsecurity finds that organizations have low confidence in the protections they’ve deployed against ransomware. Despite the widespread implementation of preventative measures, almost half (45%) of those surveyed aren’t confident in the effectiveness of their organisation’s own ransomware protection strategy. Hornetsecurity