Two announcements on November 9 describe the same problem from opposite ends. Cisco said at Cisco Live APJC in Melbourne that it will add Anthropic's Claude Mythos to Cisco AI Defense, to attack customers' AI applications and agents before someone else does. The same day, the Linux Foundation published research, sponsored by ActiveState, showing that most security teams can no … [Read more...] about Cisco Puts Claude Mythos Into AI Defense for Red Teaming as Linux Foundation Research Finds AI Writes Code Faster Than Security Can Review It
News
Vanta Buys Pillar Security to Police AI Agents at Runtime as Orca Finds 99.9 Percent of Fixable AI Flaws Left Open
Vanta has signed a definitive agreement to buy Pillar Security, a two-year-old startup that tests and guards AI agents while they run. Price and terms weren't disclosed. The same day, Orca Security put out its 2026 State of AI Security Report, and one number in it explains why a compliance company wants a runtime security team: of the AI vulnerabilities that already have a fix, … [Read more...] about Vanta Buys Pillar Security to Police AI Agents at Runtime as Orca Finds 99.9 Percent of Fixable AI Flaws Left Open
Sentra Raises 150 Million Dollars Led by Capital One Ventures to Control What AI Agents Can Reach in Company Data
Sentra, the New York data security company founded in 2021, closed a $150 million Series C led by Capital One Ventures on November 4. Its last round was a $50 million Series B led by Key1 Capital in April 2025. No valuation was given. The company has about 210 employees. Capital One leading is a signal on its own. Banks are among the biggest buyers of data loss prevention, and … [Read more...] about Sentra Raises 150 Million Dollars Led by Capital One Ventures to Control What AI Agents Can Reach in Company Data
Abnormal AI Survey Finds 46% of Security Teams Cannot Define Normal Behavior for AI Agents
Security teams have spent a decade learning what normal looks like for a person. They've barely started on the software that now acts like one. That's the core of Abnormal AI's 2026 State of Behavioral Security Report, released November 5. The survey covered 525 security professionals at organizations with more than 1,000 employees across six countries, about 85% of them CISOs … [Read more...] about Abnormal AI Survey Finds 46% of Security Teams Cannot Define Normal Behavior for AI Agents
Cyber Threat Pressure Reads 55.2 Elevated as CISA Adds Exploited Flaws at the Fastest Pace Since 2022
The Cyber Threat Pressure gauge reads 55.2 for October 2026, in the Elevated zone, down from 67.0 in September, when it sat in High. The drop hides a busier picture than the headline suggests. CISA added 36 flaws to its catalog of vulnerabilities already being exploited in the wild, after 43 in September, and the last three months together are the fastest run of additions since … [Read more...] about Cyber Threat Pressure Reads 55.2 Elevated as CISA Adds Exploited Flaws at the Fastest Pace Since 2022
Check Point Starts Renting Out Its Firewalls to Midsize Companies as Appliance Sales Slide and Fortinet Surges
Check Point Software Technologies (NASDAQ: CHKP) will start selling its firewalls as a subscription on November 1. Customers pay a monthly or annual fee and Check Point keeps title to the hardware, so nobody has to sign off on a big capital purchase. The program was announced on October 26. It runs through Check Point partners on a three-year term. The bundle covers a lot of … [Read more...] about Check Point Starts Renting Out Its Firewalls to Midsize Companies as Appliance Sales Slide and Fortinet Surges
ProjectDiscovery Gives Away Neo Triage, Betting Proven Exploits Beat CVSS Scores for Clearing Vulnerability Backlogs
ProjectDiscovery, the company behind the open-source Nuclei scanner, has made Neo Triage generally available. The pitch is blunt. Instead of ranking a vulnerability backlog by score, Neo tries to reproduce each finding against the live asset it was reported on and comes back with a verdict and the traffic to back it up. It's included in every Neo tier, the free community tier … [Read more...] about ProjectDiscovery Gives Away Neo Triage, Betting Proven Exploits Beat CVSS Scores for Clearing Vulnerability Backlogs
Fewer Than 20 Percent of AI Decisions Have a Named Owner as Nuix, Basware and GovSignals Push Audit Trails
Companies have handed real decisions to AI. Very few of them can say who answers for those decisions. Sopra Steria Next, the consulting arm of Sopra Steria, put numbers on it in its CIO Compass report, published in Paris on October 21: fewer than 20 percent of AI-influenced or AI-executed decisions have an identified business owner, explicit rules and formal accountability. … [Read more...] about Fewer Than 20 Percent of AI Decisions Have a Named Owner as Nuix, Basware and GovSignals Push Audit Trails
AI Code Still Fails 38 Percent of Security Tests as One in Seven US Healthcare Sites Runs Known Exploited Flaws
Two reports landed a day apart this week, and they make more sense read together. Veracode's latest GenAI Code Security Report says the code coming out of large language models is getting safer for the first time since the series began in July 2025. SecurityScorecard's healthcare study, built on its Project Meridian mapping platform, shows the other end of the pipeline: the … [Read more...] about AI Code Still Fails 38 Percent of Security Tests as One in Seven US Healthcare Sites Runs Known Exploited Flaws
CISA Adds Exploited VMware ESX Logging Flaw and Fragnesia Linux Root Bug to KEV Catalog
CISA put two more flaws into its Known Exploited Vulnerabilities catalog on October 28. One is a Linux kernel bug that hands root to any local user. The other is a VMware ESX logging gap that carries a CVSS score of 2.7, which is about as low as a score gets before it stops being worth a CVE. That second one is the interesting entry. A 2.7 doesn't land in KEV by accident. It … [Read more...] about CISA Adds Exploited VMware ESX Logging Flaw and Fragnesia Linux Root Bug to KEV Catalog