News for today:
- [DigiCert] When email isn’t trusted. New research from DigiCert shows that consumers worry about the authenticity of email messages from brands, and that worry translates into changed shopping patterns. The data shows 43% of consumers deleted or abandoned an email in the past year because they weren’t sure it was genuine. Seventeen percent delayed a purchase, and more than 1 in 10 shopped with another retailer. The findings highlight a challenge ahead of Black Friday: just 3% of shoppers say they would open or click an offer if they couldn’t verify it came from the brand. More than half would delete, ignore, or report it. DigiCert
- [Pistachio] Phishing in 2027. Pistachio outlined phishing threat types that employees need to watch out for as 2027 approaches, and gives this recommendation: Most phishing attacks still depend on getting someone to do something: pay an invoice, approve a request, sign in, open a file or keep something confidential. The message can look completely legitimate, and it might not even be an email. It could be a Teams message or a phone call. So the more useful question isn’t whether a message looks suspicious, but whether the request makes sense and has been checked before anyone acts on it. Pistachio
- [Rubrik] Additional partners for Hourglass. Rubrik broadened its partner alliance for AI agent security (new partners are AHEAD, Trace3, and WWT); Project Hourglass now includes Rubrik Code Guardian and Rubrik Agent Cloud. Rubrik Code Guardian aims to provide partners the capability to proactively red-team client code within air-gapped environments, prioritize realistic attack chains, and maintain instant codebase recovery …. Rubrik Code Guardian harnesses Anthropic’s Claude Mythos 5 through a specialized security harness to evaluate code repositories against sophisticated, multi-step threat scenarios. Rather than operating on live production environments, the system tests a cloned, air-gapped copy of customer repositories. Rubrik
- [Varonis] Extending Atlas. Varonis added browser protection, endpoint protection, and an AI gateway to its AI security platform. Atlas secures the full AI lifecycle with a consistent set of policies that work wherever you build or run your agents and models. It also links AI activity to the Varonis Data Security Platform, so security teams can see and control sensitive data access. Varonis