Pulse Security AI launched from stealth today to solve a problem the security industry has spent decades ignoring: giving the leader who runs the program the same operational foundation every other business function takes for granted.

The company raised $8M in seed funding led by Foundation Capital, with participation from Zetta Venture Partners. The funding accelerates Pulse’s engineering and go-to-market efforts to meet enterprise demand from security leaders ready to modernize how their programs are run.

The CISO’s missing system

For decades, the industry developed increasingly effective tools for practitioners. SOC analysts, threat hunters, vulnerability management teams, and every other function within a security program have purpose-built technical infrastructure. Yet, the program itself is managed through spreadsheets, slide decks, tribal knowledge, and a lot of “human middleware”.

The pressure is intensifying. NIST reports CVE submissions rose 263% from 2020 to 2025. VulnCheck found 884 newly exploited vulnerabilities in 2025 alone, with nearly 29% exploited on or before the day of CVE publication. Frontier AI models are compressing response windows further by accelerating discovery and exploit validation. At the same time, SEC disclosure rules have moved cyber risk into the boardroom, where most directors still struggle to translate technical data into business risk.

That gap has consequences. CISOs are now accountable to boards and regulators for outcomes they cannot operationalize at the speed the business and modern threats demand.

Armistead

Organizational sprawl to cover vast IT environments adds complexity. They are asked to translate technical risk into business risk with no system of record connecting the two. In more than 80 CISO interviews conducted by Pulse Security, a recurring theme emerged: Security leaders lack a continuously up-to-date, authoritative system they can stand behind in the boardroom, with their executive peers, or under regulatory scrutiny.

Brett Wahlin, CIO of Aurora, notes, “Security teams often get lost in technical complexity, but CISOs must remain focused on overarching business risk. Success requires a clear understanding of a security program’s health and the ability to translate technical data into strategic insights. The industry has long needed a system of record that provides ground truth, transforming daily operations into meaningful, business-driven intelligence.”

Building the security foundation

Currently, the security function manages its program through a morass of spreadsheets, policies that quickly go stale, and disconnected tools. People are asked to fill in the gaps, which adds to toil and job dissatisfaction. Pulse goes upstream as an AI layer that leverages existing sources. The platform is built on a context graph architecture that sits above the technical silos security teams already run, including EDR, cloud, identity, and the unstructured data sources that hold most of the program’s institutional knowledge, such as assessment reports, communication documents, and tracking spreadsheets. By integrating the full scope of a security program – the risks, the technical environment, the regulatory obligations, the people, and the business priorities – Pulse gives security leaders the consolidated knowledge they need to formulate strategy, automate program-level workflows, communicate with clarity, and lead with authority.

Pulse Security AI was co-founded by product & security experts Mike Armistead, Robert Hipps, and Nick Gilligan. Armistead and Hipps previously co-founded Respond Software, the AI-driven SOC automation company that FireEye/Mandiant acquired for $186 million in 2020. Before that, Armistead co-founded Fortify Software, which pioneered the application security category and was acquired by HP in 2010. Gilligan was among Respond’s first technical hires and later led AI engineering teams at Mandiant and Google.

“We were fortunate to work closely with the Pulse team through our early investment in Respond, so I know they can deliver real transformation in security,” said Sid Trivedi, Partner at Foundation Capital. “The problem Pulse addresses is massive, expensive, and still solved largely by human effort. CISOs face accelerating risks that siloed technologies cannot address. At the same time, the CISO role within a company has been elevated to include regular board engagement. Pulse’s agentic platform gives security leaders the strategic command they have been missing to present a comprehensive picture of their program.”

“Security leaders today are expected to make high-stakes decisions across an increasingly complex organization, yet most still operate across fragmented tools, endless workflows, and incomplete visibility,” said Apoorva Pandhi, Managing Director at Zetta Venture Partners. “Mike, Robert, and this team have a proven track record of building category-defining companies.”

“The security industry has spent decades building better tools for practitioners and almost nothing for the leader who runs the program,” said Mike Armistead, CEO and Co-founder of Pulse Security AI. “A CFO reconciles finances through an ERP. A CRO captures tribal knowledge with a CRM. Security leaders have never had the equivalent. Pulse is the foundation they need to run their programs the way other functions leverage their management systems to gain clarity, speed, and communicate effectively.”

Resources

•Read the thesis behind Pulse Security, “Stealth Mode Is Over. Here’s Why We Built Pulse.”

•Watch: From Spreadsheets to Strategy: How Pulse Security Modernizes Security Management

•Watch: Investing in the Future of Security Leadership | Sid Trivedi & Apoorva Pandhi

About Pulse Security AI: Pulse Security is redefining how cybersecurity programs are run with an operational management platform for cybersecurity leaders. It’s where security pros and AI agents work together: executing procedures, capturing decisions, and delivering real-time program visibility without the manual overhead. The result is a security organization that runs faster, costs less, and gives leaders clear confidence in where their program stands. Pulse Security was founded by a seasoned team of former Google and security veterans and is backed by Foundation Capital and Zetta Venture Partners. Users can learn more at pulsesecurity.ai.

Media contact: Carmen Angela Harris, Pulse Security, carmen@pulsesecurity.ai

The post News alert: Pulse Security launches with $8 million for AI platform to modernize CISO operations first appeared on The Last Watchdog.

Today, the company announced Insignary Clarity On-Demand, a self-service, pay-per-project offering that gives any organization immediate access to patented SCA and Software Bill of Materials (SBOM) generation — with no annual subscription required.

Clarity On-Demand is designed for two groups: teams that want to evaluate Insignary Clarity before committing to a full enterprise deployment, and smaller organizations that need professional-grade SBOM generation and vulnerability visibility for a specific project but do not require an annual enterprise subscription. Both now have direct access — on their own timeline — to the same binary-level analysis that Insignary’s enterprise customers rely on.

The urgency is real. Canada’s Bill C-8, which enacts the Critical Cyber Systems Protection Act (CCSPA), received Royal Assent on June 16, 2026, and will introduce mandatory supply chain risk management obligations — phased in over the coming months — for designated operators across sectors including banking, telecommunications, energy, and transportation.[1] The U.S. FDA now requires SBOMs in premarket submissions for connected “cyber devices.”[2] For many organizations, the compliance clock is already running — and waiting for an annual procurement cycle is no longer an option.

Kim

“You cannot verify an SBOM by reading the manifest that created it. You verify an SBOM by examining the software that was actually built, shipped, and deployed. Clarity On-Demand makes that level of verification accessible to any organization — from a development team preparing for its first compliance audit to an enterprise team evaluating binary SCA for the first time.” — Taek Wan Kim, President & CEO, Insignary

What on-demand includes

Each Clarity On-Demand subscription provides two weeks of access to the Insignary Clarity platform for a single user and a single project. Within that window, users can:

•Generate a complete SBOM from source code and compiled binaries

•Receive automated license and security risk alerts

•Identify components associated with known patent licensing risks

•Receive alerts for known exploits tied to identified components

Clarity On-Demand is available on a self-service, pay-per-project basis with plans based on scan volume. Teams with larger scan volumes or those requiring a consultant-curated audit report can contact Insignary directly for a customized engagement. Full pricing details are available at insignary.com/clarity-on-demand.

First-time users receive 50% off their first Clarity On-Demand project. To claim the offer, email on-demand@insignary.com.

Why binary analysis matters

Most traditional SBOM tools rely on what developers declare, scanning package manager files rather than the software itself — so AI-generated code, vendor libraries, and statically linked binaries that bypass package managers often go undetected. Clarity On-Demand instead extracts fingerprints directly from compiled binary code, using the same patented technology as Insignary’s enterprise platform, to identify every open-source component present regardless of whether it was declared. The U.S. National Security Agency recommends exactly this approach, advising that national security system owners “obtain SBOMs and associated vulnerability and code quality information from analysis of software binaries.”[3]

Trusted across global markets

BearingPoint serves as the company’s exclusive distributor across Europe. Cybertrust Japan drives adoption across Japanese manufacturing under a joint SBOM initiative. Reselling partner TechMatrix supports distribution across the region. Customers include government organizations and global leaders across electronics, defense, financial services, automotive, manufacturing, medical devices, and other technology sectors.

About Insignary: Insignary Inc. is a Toronto-based cybersecurity company specializing in binary software composition analysis (SCA) and software supply chain security. Its patented technology identifies open-source software components, vulnerabilities, and software provenance directly from compiled binaries, without requiring access to source code. The company’s flagship platform, Insignary Clarity, is used by enterprises, governments, and software vendors worldwide, and is supported by strategic investors and partners including BearingPoint in Europe; Cybertrust Japan and TechMatrix in Japan; and TMA Solutions. For more information, users can visit www.insignary.com.

References: [1] Government of Canada — Bill C-8, Royal Assent June 16, 2026 — https://www.canada.ca/en/public-safety-canada/news/2026/06/government-of-canada-strengthens-cyber-security-and-critical-infrastructure-with-royal-assent-of-bill-c8.html

[2] U.S. FDA — Cybersecurity in Medical Devices: SBOM required in premarket submissions — https://www.fda.gov/regulatory-information/search-fda-guidance-documents/cybersecurity-medical-devices-quality-system-considerations-and-content-premarket-submissions

[3] NSA — Recommendations for Software Bill of Materials (SBOM) Management, December 2023 — https://media.defense.gov/2023/Dec/14/2003359097/-1/-1/0/CSI-SCRM-SBOM-MANAGEMENT.PDF

Media contact: Jessica DY Lee, Principal Solutions Architect, Insignary, jessicalee@insignary.com

Editor’s note: This press release was provided by CyberNewswire as part of its press release syndication service. The views and claims expressed belong to the issuing organization.

The post News alert: Insignary’s on-demand SBOM verification boosts software supply chain security first appeared on The Last Watchdog.

Researchers observed Claude Tag responding to messages containing the literal text “@Claude” without requiring a genuine structural Slack mention. As a result, content delivered through bots, webhooks, automated feeds, or other external sources could potentially be interpreted as instructions.

The research demonstrated the potential impact through a connected internal organizational resource. Bot-generated messages instructed Claude Tag to retrieve internal information, publish it into Slack, and subsequently delete the original resource using the organization’s configured connection.

The video below demonstrates the observed behavior and its potential impact on connected organizational systems.

Malamed

“Our research raises a fundamental question for every organization deploying enterprise AI agents: who is actually authorized to instruct the agent?” said Tal Melamed, CTO and Co-Founder of Tego AI. “Organizations need controls that validate the origin and purpose of sensitive actions before an agent is allowed to execute them.”

The research also identified broader concerns involving untrusted automated content becoming an indirect instruction channel, connected applications and MCP servers expanding the potential impact, administrative access to stored channel information outside Slack’s native membership model, and limited visibility through existing history, compliance, and audit interfaces.

“A safety classifier can be an important defense, but it should not be the final authorization boundary for enterprise actions,” Melamed added. “Sensitive operations require deterministic controls that remain effective even when the model misunderstands a request, trusts the wrong identity, or makes an incorrect decision.”

Tego AI recommends applying least-privilege permissions to Claude Tag connections, preferring read-only access, avoiding channels that ingest untrusted external content, restricting administrative access, retaining relevant Slack logs, and introducing independent runtime authorization for sensitive actions.

Tego AI responsibly disclosed the findings to Anthropic. Anthropic classified the submission as informative and disputed that literal “@Claude” text or bot-generated messages initiate Claude Tag sessions under the product’s default configuration. Tego AI’s full report documents the observed behavior, supporting evidence, security implications, and disclosure timeline.

Read the full technical report, including supporting evidence and the disclosure timeline: https://www.tego.ai/blog/tego-ai-finds-anthropics-claude-tag-slack-integration-can-trigger-unauthorized-enterprise-actions

About Tego AI: Tego AI is a cybersecurity company developing runtime security and control technology for enterprise AI agents. Its platform helps organizations monitor agent activity and stop unauthorized or risky actions before agents access sensitive data or connected systems.

Tego AI currently operates in stealth. This is the company’s second public security disclosure. According to Tego AI, it has identified additional security issues across other major AI agent platforms, with further disclosures planned.

Media contact: Tal Melamed, CTO, Tego AI, tal@tego.ai

Editor’s note: This press release was provided by CyberNewswire as part of its press release syndication service. The views and claims expressed belong to the issuing organization.

The post News alert: Tego AI finds Anthropic’s integration of Claude and Slack can trigger unauthorized actions first appeared on The Last Watchdog.

As organizations increasingly deploy AI agents across distributed systems and enterprise environments, a new challenge is emerging: organizations can no longer rely solely on trust-based assumptions about how data is used, how computations are executed and how autonomous systems behave. The need for mathematically verifiable collaboration, governed AI behavior, and cryptographic proof is rapidly becoming one of the defining infrastructure challenges of the AI era.

The HOL Partner Program was created to help coordinate the development of open standards and interoperable frameworks that enable autonomous AI systems to securely identify themselves, communicate, transact and access sensitive information without relying on closed or assumption-based architectures. This shift reflects a growing industry recognition that secure collaboration and autonomous AI systems require verification, not simply trust.

The initiative further validates the growing industry focus on proof-based governance, verifiable interoperability, privacy-preserving infrastructure and secure collaboration for autonomous systems operating at enterprise scale.

OpenMatter Network joins a founding group of organizations participating in the HOL Partner Program, including GoDaddy, XMTP Labs, Horizen Labs, SKALE Labs, DSR Corporation, TODAQ Labs, HashPack, Hgraph and other organizations helping shape the emerging infrastructure layer for autonomous AI systems and agentic computing environments.

As part of the initiative, OpenMatter Network has been selected to contribute to the HOL AI Privacy & Security subcommittee, where the company will define the architectural baseline for institutional adoption, verifiable compliance, threshold decryption, post-quantum security and governed AI execution across distributed environments.

Davis

“AI systems are rapidly evolving beyond isolated tools into autonomous entities operating across organizations, applications and networks,” said Renee Davis, CEO and Co-Founder of OpenMatter Network. “The challenge now is ensuring these systems can securely collaborate, verify identity, access data and operate within enforceable policies across environments that cannot be inherently trusted. For decades, organizations have relied on trust-based assumptions about infrastructure, data and execution. We believe the future belongs to systems that can prove what happened. Mathematically verifiable collaboration and cryptographic proof will become foundational requirements for the next generation of AI infrastructure.”

OpenMatter Network recently launched its platform under the banner “Don’t Trust Data. Prove It.” Positioned as the Verifiable Trust Layer for Secure Collaboration and AI Agents, the company’s architecture enables secure collaboration, governed AI behavior and mathematically verifiable execution across distributed environments through technologies including Masked Compute, QuantumGuard and Datavizor.

The company’s QuantumGuard technology is specifically designed to help govern how autonomous AI agents authenticate, interact, access resources and mathematically prove compliance across enterprise and open network environments.

Anderson

“Organizations are quickly realizing that AI governance cannot rely on assumption-based trust models,” said Ada Anderson, CTO and Co-Founder of OpenMatter Network. “If AI systems are making decisions, accessing information and interacting across organizational boundaries, enterprises need the ability to verify behavior, enforce policies and prove compliance. The next generation of AI infrastructure will require mathematically verifiable execution, enforceable controls and interoperable standards that allow autonomous systems to operate securely across environments.”

“OpenClaw gave people a real taste of where AI agents are headed. The excitement was immediate, but so was the responsibility. If this is going to scale, the internet needs stronger rails for safety, interoperability, and privacy. That is the work HOL is focused on. With OpenMatter joining the Partner Program, we are bringing in post-quantum cryptography expertise to help make those rails practical, usable, and real,” added Michael Kantor, President of HOL (Hashgraph Online).

According to HOL, the Partner Program was created to help prevent the emerging AI ecosystem from fragmenting into closed and incompatible systems as autonomous AI adoption accelerates. The organization’s initial working groups focus on agent registries, agentic payments, AI privacy and security, and inter-agent communication and coordination.

Davis and Anderson bring extensive experience in secure systems architecture, distributed computing, AI infrastructure and cryptographic technologies. Their participation in the HOL initiative further strengthens OpenMatter Network’s position as an emerging contributor to the evolving standards and verification frameworks required for enterprise-scale AI deployment.

For more information on OpenMatter Network, click here. For more information on HOL, users can click here.

About OpenMatter Network: Headquartered in Florida’s Space Coast, OpenMatter Network is building the Verifiable Trust Layer for Secure Collaboration and AI Agents. Guided by the principle “Don’t Trust Data. Prove It.,” the company’s cryptographically verifiable architecture enables secure collaboration, governed AI behavior and mathematically verifiable execution across untrusted environments. For more information, users can visit www.openmatter.network.

About HOL:Hashgraph Online (HOL) is an open-source ecosystem for interoperable AI agents. HOL develops standards, SDKs, registries, and developer tools that help organizations identify, discover, verify, and coordinate agents across web and decentralized environments. Its ecosystem includes HOL Guard, a security platform that helps developers and organizations reduce risk when deploying and operating AI agents. Through the HOL Partner Program, HOL collaborates with organizations advancing open standards and infrastructure for the agent ecosystem. For more information, users can visit https://hol.org.

Media contact: Caleigh McDaniel, caleigh@griffin360.com

Editor’s note: This press release was provided by CyberNewswire as part of its press release syndication service. The views and claims expressed belong to the issuing organization.

The post News alert: OpenMatter joins HOL initiative to shape trust standards for autonomous AI first appeared on The Last Watchdog.

According to Gartner: “Open-source and third-party components may contain a long list of vulnerabilities, but not all of them directly impact your code base. Reachability analysis helps in triaging the vulnerabilities based on their exploitability.”*1

The urgency is clear across independent industry research. A 2024 Venafi survey of 800 security decision-makers across the U.S., U.K., Germany, and France found that 92% are concerned about AI-generated code, and 63% have considered banning it outright over security risk.*2 The U.S. National Vulnerability Database recorded more than 48,000 CVEs in 2025 — roughly 130 every day.

AI coding assistants are accelerating the growth of unmanaged open-source dependencies. As organizations adopt these tools at scale, they face a widening challenge: understanding which open-source components enter production software, whether those components can be trusted, and how the resulting security and compliance risks are managed.

The problem is structural. Most SCA tools read what developers declare — not what actually runs. AI-generated code, vendor libraries, and third-party binaries frequently bypass package managers and never appear in a manifest.

Kim

“SBOMs are increasingly becoming a regulatory requirement around the world. However, software transparency is only as reliable as the accuracy of an SBOM itself. You cannot verify an SBOM by reading the manifest that created it. You verify an SBOM by examining the software that was actually built, shipped, and deployed. As software supply-chain regulations increasingly depend on SBOMs, the ability to validate software at the binary level becomes essential for organizations operating in regulated industries, critical infrastructure, and AI-enabled software environments.” — Taek Wan Kim, President & CEO, Insignary

Binary-first SBOM verification

Insignary Clarity scans both source and binary to build a complete Software Bill of Materials (SBOM) for the applications teams build, the third-party components they incorporate, and the IT infrastructure that bypasses the traditional secure development lifecycle.

Key capabilities include:

•Binary SCA — identifies open-source components, vulnerabilities, and license obligations directly from compiled binaries, without requiring source code or package manifests

•AIBOM Generation — produces an AI Bill of Materials for software containing AI-generated or AI-assisted code, covering components that bypass traditional dependency declarations

•Reachability Analysis — determines which disclosed vulnerabilities actually reach executable code paths, enabling risk-based prioritization rather than raw CVE-count triage

•Continuous Vulnerability Alerting — monitors stored SBOMs against updated vulnerability databases and delivers automated alerts when newly disclosed CVEs match deployed components, without requiring a rescan

“An SBOM is foundational to managing the complexity and securability of modern software deployments.”*3

Gartner recognition

Insignary has been cited in four Gartner research reports*, Gartner Hype Cycle for Secure Software Engineering,2026, Gartner Hype Cycle for Application Security,2025, Gartner Scale Application Security With AI-Augmented Vulnerability Remediation,2025, and Gartner 3 Steps for Assessing an Open-Source Software Project, 2025.

Global regulatory support

Insignary Clarity supports organisations meeting software supply-chain security requirements across North America and globally:

•U.S. Executive Order 14028 and OMB Memorandum M-26-05 — federal agencies may now independently verify vendor SBOMs rather than accepting a standard attestation form, raising the bar for all software sold into the U.S. government

•FDA Section 524B — every connected medical device premarket submission must include a binary-verified SBOM covering all compiled software components

•Canada’s Bill C-8 Critical Cyber Systems Protection Act (CCSPA), effective June 2026 — mandatory supply chain risk management for banking, telecommunications, energy, and transportation operators

Additional frameworks: CISA and NSA SBOM guidance, NIST SSDF, Australia’s Information Security Manual (ISM), U.S. Connected Vehicle Rule, EU Cyber Resilience Act.

Enterprise adoption

Globally, BearingPoint — one of Europe’s leading management and technology consulting firms and a strategic investor in Insignary — serves as the company’s exclusive distributor across Europe. Cybertrust Japan, another strategic investor, and its reselling partner TechMatrix drive adoption across Japanese manufacturing under a joint SBOM initiative. Customers include government organizations and global leaders across the electronics, defense, financial services, automotive, manufacturing, medical, and other technology sectors.

GARTNER and Hype Cycle are trademarks of Gartner, Inc. and/or its affiliates. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

ABOUT INSIGNARY: Insignary Inc. is a Toronto-based cybersecurity company specializing in binary composition analysis and software supply chain security. Its patented technology enables organizations to identify open-source software components, vulnerabilities, and software provenance directly from compiled binaries without requiring access to source code.

The company’s flagship platform, Insignary Clarity, provides binary analysis and software composition analysis capabilities that enable organizations to verify the contents of deployed software and strengthen software supply chain governance. Insignary Clarity AIR extends this capability to the AI domain by helping organizations identify, assess, and manage risks associated with AI models, AI-generated software, and AI-driven development environments.

The company serves enterprises, governments, and software vendors worldwide and is supported by strategic investors and partners including BearingPoint in Europe, Cybertrust Japan and TechMatrix in Japan, and TMA Solutions. Through its global partner ecosystem, Insignary supports software supply chain security initiatives across North America, Europe, and Asia.

Website: https://insignary.com/

Full report: Gartner Hype Cycle for Secure Software Engineering, 2026

References:

•Gartner, Hype Cycle for Secure Software Engineering 2026

•Venafi, “Machine Identity Management Development Survey,” 2024

•Gartner, “Emerging Tech: A Software Bill of Materials Is Critical to Software Supply Chain Management.”

Media contact: Jessica DY Lee, Principal Solutions Architect, Insignary, jessicalee@insignary.com

Editor’s note: This press release was provided by CyberNewswire as part of its press release syndication service. The views and claims expressed belong to the issuing organization.

The post News alert: Insignary tackles SBOM accuracy gap as AI tools intensify software supply-chain risk first appeared on The Last Watchdog.

Today’s DDoS attacks are not just simple volume or protocol attacks anymore. They can originate from compromised devices within trusted and legitimate networks, mimic real traffic, and appear in short, high-intensity bursts that leave little time for manual response.

The Next-gen Network DDoS Protection combines behavior-based, AI-driven detection with full IPv4 and IPv6 coverage for modern infrastructures. With greater automation and less reliance on manual tuning, it represents a major architectural shift in DDoS detection and mitigation.

The platform is designed entirely with European data sovereignty in mind and is built into the architecture. It runs on Link11’s own cloud infrastructure, and security data is hosted in Europe. This enables companies to maintain control over their data, mitigate legal uncertainties, and minimize their reliance on non-European cloud providers.

Adaptive attack mitigation

Previous solutions often relied on rigid rule systems and static thresholds. While this approach was effective against volumetric attacks, it is no longer sufficient against today’s AI-driven, adaptive attack patterns. Combining insights from more than one million mitigated attacks with deep learning to deliver faster, smarter, and more precise protection, Link11 rebuilt the Network DDoS solution from ground up.

Jung

“Today’s DDoS attacks are increasingly AI-generated, precise, and designed to outsmart traditional detection logic. “After more than 12 months of development and testing, we don’t see this product as just an update. Rather, we see it as a complete redesign: a platform that keeps pace with the current threat landscape and will also meet future requirements.” says Jens-Philipp Jung, Link11’s CEO. “Anyone protecting infrastructure needs a platform that thinks for itself rather than one that has to be constantly readjusted.”

With Next-Gen Network DDoS Protection, Link11 goes beyond traditional behavioral analysis by analyzing and mitigating each attack vector individually. Rather than responding to volumetric, protocol, or amplification attacks with a blanket response, targeted countermeasures are initiated. This significantly reduces false positives and further accelerates the groundbreaking mitigation time, which was already under 10 seconds for unknown vectors and is now under three seconds. This improvement is one of many over Link11’s previous Network DDoS Protection. Additionally, known vectors are mitigated in near real time, just as before.

Protection modern infrastructures

Built on state-of-the-art technology, the new solution is designed to make advanced DDoS protection easier to understand and operate. Real-time logs, reason codes, and a completely redesigned dashboard give security teams deep visibility into how attacks unfold and how mitigation measures are applied. During an attack, teams can quickly see which traffic is being blocked or allowed, why those decisions are being made, and which services remain available. This transparency helps companies maintain availability, protect revenue, and keep critical business operations running.

“One guiding principle drove the development of this new solution: resilience is not a technical metric, but a business promise. Next-gen Network DDoS Protection is designed to help users keep this promise,” explains Marc Lamik, CPO of Link11.

Since the platform continuously learns from live traffic patterns and constantly adapts its detection logic on its own, the need for manual fine-tuning is significantly reduced. By making more precise mitigation decisions automatically, the system reduces the need for frequent SOC team intervention. The AI-driven Next-Gen Network DDoS Protection provides full IPv4 and IPv6 coverage for consistent protection across modern dual-stack infrastructures.

For existing customers, switching to the new version requires no configuration effort on their part. The migration involves an internal routing change and does not cause any downtime. Baselines and configurations are preserved, and protection remains uninterrupted during the switch.

Next-gen Network DDoS Protection is now available for existing and new Link11 customers.

 About Link11: Link11 is a leading European IT security provider that protects global infrastructures and web applications from cyberattacks. Its cloud-based IT security solutions help companies worldwide strengthen the cyber resilience of their networks and critical applications and prevent business disruptions. Link11 is a BSI-qualified provider of DDoS protection for critical infrastructure. The company meets the highest standards in data security and compliance with PCI DSS, SOC 2 Type II, BSI C5, and ISO 27001.

Media contact: Lisa Froehlich, Link11 GmbH just did it, l.froehlich@link11.com

Editor’s note: This press release was provided by CyberNewswire as part of its press release syndication service. The views and claims expressed belong to the issuing organization.

The post News alert: Link11 launches faster DDoS mitigation to counter AI-driven, adaptive network attacks first appeared on The Last Watchdog.

Every marketing vendor a company approves can silently introduce third and fourth-party scripts that no security team ever reviewed. In the AI era, that invisible layer is expanding faster than point-in-time audits can track. The gap between what an organization approves and what actually executes on its site is where data leakage, regulatory exposure, and compliance failures happen.

The session pairs two perspectives that rarely sit at the same table. Idan Cohen, CEO and Co-Founder of Reflectiz, brings 20 years in cybersecurity, from offensive code and penetration testing to building Reflectiz into an AI web security platform. Omri Ariav, Director of Product Management at Taboola, leads the data layer behind an advertising platform reaching over 600 million daily active users. His scope spans user data and identity, tracking, attribution, measurement, and privacy, working where large-scale data, measurement, and user trust meet. He is an active part of Taboola’s AI transformation and an open-source builder who writes regularly about AI in real product workflows.

“Security teams approve a vendor list. They don’t approve what actually loads in the browser,” said Idan Cohen, CEO and Co-Founder of Reflectiz. “One marketing tag can pull in a chain of third and fourth parties nobody vetted, and AI is making that chain grow faster than anyone can audit by hand. This session is about closing that gap, so marketing and security finally work from the same picture of what’s running on the site.”

Attendees will learn:

•What transparent, security-forward ad tech looks like in 2026, and how to tell which vendors meet that bar

•How a single approved marketing tag spawns a chain of third- and fourth-party scripts no one reviewed

•Why AI-driven ad tech expands the client-side attack surface faster than audits can catch

•A practical three-step framework to inventory, monitor, and govern the web supply chain so marketing and security work from one source of truth

Registration is open at: https://www.reflectiz.com/learning-hub/reflectiz-taboola-marketing-security-webinar/

About Reflectiz: Reflectiz gives organizations an outside-in view of every script, tag, and third party running on their websites. The platform continuously maps the client-side attack surface, flags risk in full context, and helps security and compliance teams close the gap between what they approved and what is actually running. The platform is designed to help organizations validate their security posture rather than rely on assumptions.

Media contact: Oran Frenkel, PR & Social Media Manager, Reflectiz,
oran.f@reflectiz.com

Editor’s note: This press release was provided by CyberNewswire as part of its press release syndication service. The views and claims expressed belong to the issuing organization

The post News alert: Reflectiz partners with Taboola to host webinar on AI-driven marketing security risks first appeared on The Last Watchdog.

For decades, organizations have relied on trust-based assumptions to secure data, execute workloads, and govern digital systems. But as data becomes increasingly distributed and AI agents begin operating autonomously across organizations, applications, and networks, those assumptions are being tested in new ways.

Enterprises today face a growing challenge: they must be able to collaborate, compute and deploy AI systems across environments they do not fully control. In this new reality, trust alone is no longer sufficient. Organizations need the ability to verify how data is used, how computations are executed, and how AI systems behave.

OpenMatter Network was created to address this challenge through mathematical proof and cryptographic verification rather than assumption-based trust models. The company believes verification is becoming a foundational requirement for secure collaboration, governed AI systems, and the next generation of digital infrastructure.

Positioned as the Verifiable Trust Layer for Secure Collaboration and AI Agents, OpenMatter Network enables organizations to securely collaborate, execute sensitive workloads, and deploy AI systems across environments that cannot be inherently trusted.

Designed to complement existing enterprise infrastructure, OpenMatter Network integrates with the cloud, data, and AI platforms organizations already use. Rather than replacing existing investments, the platform adds a layer of cryptographic verification, governed execution, and secure collaboration across environments that cannot be inherently trusted.

The platform combines advanced cryptographic verification, enforceable policy controls, and distributed architecture to create a verifiable foundation for collaboration, computing, and AI execution across organizational boundaries.

Davis

“For decades, organizations have been asked to trust the systems they rely on,” said Renee Davis, CEO and Co-Founder of OpenMatter Network. “We believe the next generation of digital infrastructure will be built on proof. Organizations need the ability to mathematically verify how data is used, how computations are executed and how AI systems behave. They don’t need to replace the infrastructure they already rely on; they need the ability to verify what happens across it. That is the problem OpenMatter Network was built to solve.”

The OpenMatter Network platform includes several core technologies designed to address the growing need for verifiable collaboration and governed AI infrastructure.

Masked Compute enables mathematically verifiable execution for secure collaboration and computation across organizations without exposing sensitive underlying data.

QuantumGuard provides verifiable policy enforcement and governance for AI agents operating across systems and environments.

Datavizor serves as the verification and visibility layer, providing insight into cryptographically provable execution, policy enforcement, and AI activity.

Together, these technologies create a unified platform for secure collaboration and governed AI execution at a time when enterprises are increasingly concerned about the operational, regulatory, and security risks associated with uncontrolled AI systems and distributed computing environments.

“Organizations are quickly realizing that policy prompts and assumed compliance are not enough,” said Ada Anderson, CTO and Co-Founder of OpenMatter Network. “If you cannot prove what happened, you cannot truly govern it.”

Davis and Anderson bring extensive experience in secure systems architecture, distributed computing, AI infrastructure, and cryptographic technologies. Their combined backgrounds helped shape the OpenMatter Network architecture around the growing operational realities facing organizations deploying AI and distributed computing systems at scale.

The platform is designed to support a wide range of enterprise and research applications, including healthcare collaboration, secure AI model training, financial analytics, enterprise AI governance, and distributed scientific research.

OpenMatter Network is already collaborating with Dara, a privacy-first health data platform, to explore how verifiable collaboration infrastructure can support healthcare insights without compromising individual data privacy.

“The future of healthcare depends on our ability to learn from data without compromising the privacy of the individuals behind it. By combining Dara’s privacy-first health data platform with OpenMatter Network’s secure collaboration infrastructure, we are exploring new ways to generate insights while keeping users in control of their information. We are excited about what this collaboration can make possible,” added Alanna Scott Delaney, CEO of Dara.

To learn more about OpenMatter Network, users can visit https://www.openmatter.network/.

For the press kit, users can click here.

About OpenMatter Network: Headquartered in Florida’s Space Coast, OpenMatter Network is building the Verifiable Trust Layer for Secure Collaboration and AI Agents. Guided by the principle “Don’t Trust Data. Prove It.,” the company’s cryptographically verifiable architecture enables secure collaboration, governed AI behavior and mathematically verifiable execution across untrusted environments. For more information, users can visit www.openmatter.network.

Editor’s note: This press release was provided by CyberNewswire as part of its press release syndication service. The views and claims expressed belong to the issuing organization.

The post News alert: OpenMatter launches platform to verify AI activity across enterprise systems first appeared on The Last Watchdog.

Based on a survey of security professionals at organizations with more than 1,000 employees, SpyCloud found that 78% of organizations experienced an increase in phishing volume over the past 12 months, while 84% say AI-generated phishing attacks are becoming more prevalent or harder to defend against.

Additional SpyCloud analysis found:

•Phishing attacks exposed employee data at 86% of Fortune 100 companies over the last 12 months.

•Technology companies experienced the highest level of phishing exposure, followed by the airline and automotive industries.

The findings suggest that while organizations recognize the growing threat posed by phishing, many remain unprepared to respond once an attack succeeds.

•Only 38% of organizations are very confident they can detect and respond to credential theft within 24 hours.

•58% struggle to identify which credentials or session tokens were exposed following a phishing incident.

•42% struggle to remediate exposed users at scale.

•68% require 4 hours or longer to identify and remediate confirmed phishing-related exposures.

•Only 30% have fully integrated phishing detection with identity response workflows.

“Phishing has become both more sophisticated and more scalable,” said Trevor Hilligoss, Chief Intelligence Officer at SpyCloud. “AI-generated lures, PhaaS platforms, and adversary-in-the-middle (AiTM) techniques are helping attackers capture not only usernames and passwords, but session cookies, refresh tokens, granting them authenticated access that can persist long after a password reset. While prevention remains important, organizations also need visibility into exactly what was exposed and be able to remediate before attackers can turn those exposures into follow-on attacks like ransomware, account takeover, session hijacking, or fraud.”

Enterprise exposure rises

The report combines survey findings with SpyCloud’s analysis of active phishing campaigns and PhaaS infrastructure, revealing a clear and deliberate focus on enterprise targets.

SpyCloud researchers observed that approximately half of its recaptured PhaaS platform-sourced records are tied to enterprise identities, compared to just 11% of malware-sourced records. This indicates that phishing attacks are now approximately five times more likely to target enterprise users than malware infections – up from roughly three times more likely in late 2025. This trend is reinforced by SpyCloud’s analysis of kits such as Tycoon 2FA, where approximately 80% of captured credentials belonged to corporate email accounts.

AI reshapes phishing

While AI-generated phishing emerged as the dominant concern among respondents, organizations are increasingly worried about a broader range of phishing-related threats. Business email compromise (BEC) was cited by 58% of respondents, vendor impersonation by 52%, collaboration platform phishing by 36%, and session hijacking by 20%.

The report also highlights growing concerns around AiTM phishing techniques, particularly device code phishing attacks that abuse legitimate OAuth authentication workflows to obtain authenticated access.

Hilligoss added, “Attackers gravitate toward techniques that give them the most reliable access with the least amount of effort, and device code phishing checks both boxes. Rather than continuously fighting authentication controls, they can leverage legitimate workflows to obtain trusted access that often persists long after the initial compromise. This changes the response process significantly because security teams need to think beyond credential resets and focus on revoking the tokens and sessions – a process that hasn’t historically been a part of the post-phishing playbook.”

Visibility gaps aid attackers

The report found that visibility remains the single greatest challenge organizations face after a successful phishing attack.

When security teams cannot determine which credentials, session tokens, or other authentication artifacts were exposed, remediation becomes significantly more difficult and attackers gain valuable time to establish persistence, move laterally, escalate privileges, or launch follow-on attacks.

“At some point, users are going to get phished,” said Hilligoss. “Organizations must move beyond phishing prevention-focused strategies and build response capabilities that provide continuous visibility into exposed credentials, cookies, session tokens, and other identity data. Security teams should prioritize automated remediation workflows capable of revoking compromised access at scale and reducing the window of opportunity available to attackers.”

Backed by the world’s largest repository of darknet data, SpyCloud recaptures phished credentials, session cookies, refresh tokens, and phishing targeting data directly from criminal infrastructure and active phishing campaigns, enabling organizations to identify compromised identities and automatically remediate exposures before they can be used for ransomware, account takeover, session hijacking, fraud, or other identity-based attacks.

To read the full 2026 Phishing Pulse Report, users can click here. If interested in a SpyCloud demo, users can click here.

About SpyCloud: SpyCloud transforms recaptured darknet data to disrupt cybercrime. Its automated identity threat protection solutions use advanced analytics and AI to accelerate investigations and protect workforce, consumer, and supplier identities from the threats that matter most: authentication bypass, session hijacking, malicious insiders, account takeover, ransomware, and fraud. Its data from malware-infected devices, successful phishes, combolists, and third-party breaches also powers many popular dark web monitoring and identity theft protection offerings. Customers include 7 of the Fortune 10, along with hundreds of global enterprises, mid-sized companies, and government agencies worldwide. Headquartered in Austin, TX, SpyCloud is home to more than 250 cybersecurity experts whose mission is to protect businesses and consumers from the stolen identity data criminals are using to target them now. To learn more and see insights on the company’s exposed data, users can visit spycloud.com.

Media contact: Emily Brown, REQ on behalf of SpyCloud, spycloud@req.co

Editor’s note: This press release was provided by CyberNewswire as part of its press release syndication service. The views and claims expressed belong to the issuing organization.

The post News alert: SpyCloud report finds phishing surge exposing employee data at Fortune 100 companies first appeared on The Last Watchdog.

The report’s headline finding is a divide inside the same organizations: the closer a person sits to the day-to-day running of AI, the less confident they are that the risk is contained. In the US, 29% of C-suite and VP respondents say their organization has AI risk under control, against 7% of the mid-level practitioners managing it.

In the UK, the gap runs the same way, 18% to 11%. Both gaps are statistically significant.

AI tools are already present across most IT estates, and most teams run several at once.

The controls have not kept pace. Across both markets, the report finds adoption has outrun security controls by roughly two to one.

The survey also records a counterintuitive pattern: the teams that see their AI use most clearly are the most concerned about it, not the least.

Heimdal’s report describes visibility as the diagnosis rather than the cure.

In an incident publicly disclosed in January 2026, the acting director of CISA, the United States cybersecurity agency, uploaded documents marked “For Official Use Only” to public ChatGPT in mid-2025.

The agency’s own monitoring flagged the activity within a week, but the use policy had not prevented it.

Key findings

•Executive confidence outruns the frontline. In the US, 29% of executives say AI risk is under control, against 7% of practitioners. In the UK, 18% against 11%.

•AI is already embedded. ChatGPT runs in 72% of UK IT environments and 69% of US environments, and Microsoft Copilot in 68% of UK and 59% of US.

•Readiness lags adoption. Only around 4 in 10 teams rate their security stack as ready for AI-related risk.

•Concern rises with visibility. Among UK teams with full visibility into AI use, 56% flag data leakage as a top concern, against 27% of teams with none. In the US the figure is 59% among teams with full visibility.

•Operational load is high. Nearly three-quarters of IT and security teams lose at least a quarter of their week to repetitive, low-value work, and around one in three lose more than half.

•The most overloaded teams are the most optimistic about AI. 59% of the most overloaded US teams, and 55% in the UK, expect AI to ease the load.

Pilton

“Misplaced confidence is one of the most dangerous things in security. This data shows executives are far more confident that AI risk is under control than the evidence supports. Most of the conversation right now is about productivity, when the bigger question is how AI can be turned against the business. The report shows the gap between how secure leaders feel and how secure they actually are,” said Adam Pilton, Cybersecurity Advisor at Heimdal.

Baloch

Independent security researcher Rafay Baloch, CEO and Founder of REDSECLABS, added: “The risk that concerns me most is not AI itself but the blind spots it can create. When teams use AI tools without clear oversight, sensitive information, intellectual property, and business data can end up in places leaders never intended. Many organizations believe having an AI policy means they are prepared, but a policy alone does not create visibility. The companies seeing the best results are not the ones trying to restrict AI. They are the ones creating clear guardrails while helping employees use AI responsibly.”

The report concludes that organizations should treat AI as part of the core IT estate, applying the same scrutiny to AI services as to any other critical supplier, including procurement review, contractual data-handling terms, a current inventory of sanctioned and unsanctioned AI tools, and technical controls over access, execution, action chains, and privilege.

The full report is available at https://heimdalsecurity.com/blog/state-ai-risk-management/

About the Research:The State of AI Risk Management in 2026 is based on a survey of 1,000 IT professionals (500 UK, 500 US), conducted via Pollfish from 1 to 8 May 2026. The sample spans six seniority tiers from entry-level through C-suite and VP.

About Heimdal:Heimdal is a global cybersecurity provider offering a unified security and compliance platform across endpoint, identity, email, network, and access security. More than 17,000 customers in over 40 countries use its 12-plus integrated products to prevent threats, detect breaches, and automate response.

Media contact: Danny Mitchell, Head of Content & PR, Heimdal Security, dmi@heimdalsecurity.com

Editor’s note: This press release was provided by CyberNewswire as part of its press release syndication service. The views and claims expressed belong to the issuing organization.

The post News alert: Heimdal study finds executives are more confident than frontline IT teams on AI risk first appeared on The Last Watchdog.